Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36717466-2259-4e4e-aeb2-b21e139325b8.roa
File: 36717466-2259-4e4e-aeb2-b21e139325b8.roa (raw, json)
Hash identifier: dMOvuOClqe8YNG8ywUVqAfyU/8Bqj6wZrsd5SKfxMfk=
Subject key identifier: 4B:EA:3C:1F:E9:29:78:C5:48:D8:18:3D:A8:25:73:DE:B3:2B:F8:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 17DECD9A0B44BFD9C8385CDD45D9615D73FD8015
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36717466-2259-4e4e-aeb2-b21e139325b8.roa
Signing time: Fri 17 Oct 2025 20:10:06 +0000
ROA not before: Fri 17 Oct 2025 20:10:06 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.56.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:de:cd:9a:0b:44:bf:d9:c8:38:5c:dd:45:d9:61:5d:73:fd:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 20:10:06 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=38ba9d3ad26a5842a3addb8cd9a7c76b5680ac52020a7bf67fdcdd702390ce72, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:5f:27:7c:45:03:9a:20:0d:03:06:76:5f:
01:b2:fb:42:cd:a0:d2:f3:8d:a5:3a:f3:0b:de:fa:
2b:1e:fa:23:9b:10:4a:e1:eb:16:16:e5:9d:90:55:
d2:53:8f:04:1b:a9:0b:cd:47:cf:99:60:96:46:7d:
7c:70:af:80:0e:7f:7f:e5:51:76:b3:6d:ea:3d:93:
80:59:ec:4f:71:fa:e9:09:6f:e0:44:11:8b:31:18:
6c:8e:85:87:bc:d8:52:3d:77:b5:01:99:93:91:fa:
9f:c2:57:fb:95:ac:54:34:68:8e:d2:75:63:0c:2c:
79:8f:1c:a1:34:46:80:de:f7:27:ba:0a:3f:bd:90:
16:64:4a:79:8b:67:37:cf:4c:60:aa:11:81:57:4d:
a4:84:db:40:0f:ad:8f:d8:d9:23:eb:1e:97:e9:94:
92:cf:4e:94:13:58:15:0b:46:5e:e7:27:92:a2:3f:
e0:2a:fd:65:1a:bc:a6:0a:96:f9:63:08:3c:27:21:
5c:31:72:fd:ed:ab:73:ac:09:4d:b2:80:13:2a:e8:
1c:9b:d8:c8:86:2a:6c:5f:7c:ef:4f:75:f0:86:39:
c1:19:af:d5:48:8a:07:2d:27:7b:ef:ef:00:e1:83:
6e:fa:b2:31:6e:14:c5:c2:a8:cf:47:16:e9:11:f1:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EA:3C:1F:E9:29:78:C5:48:D8:18:3D:A8:25:73:DE:B3:2B:F8:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36717466-2259-4e4e-aeb2-b21e139325b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.0.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:89:47:70:f7:74:b9:db:6a:7e:66:c4:5b:e1:03:00:6f:50:
8a:bc:78:2e:cc:75:52:9b:b3:8b:b6:f0:73:62:9b:ce:5b:68:
3e:79:96:ad:cf:b2:80:50:e9:8c:b8:da:ad:93:b1:86:f8:14:
94:3d:d8:2f:f1:52:47:35:b4:77:a2:e4:6a:f4:fd:70:53:96:
e5:a8:57:3b:44:6c:28:78:84:8d:8f:e6:31:0a:a2:ff:a9:68:
fd:5a:1c:b0:ed:43:8f:cf:e2:16:fd:fa:0c:1a:0e:dd:83:5f:
9b:bd:6a:d5:89:ae:e4:fa:4e:5b:79:5a:fe:99:5d:bf:e6:ff:
95:3b:da:79:1b:f3:97:0f:71:b8:bb:dd:af:2c:53:26:6b:e0:
f9:80:34:25:67:75:61:7c:f9:9a:16:fe:ed:f7:bd:86:3a:90:
94:36:ba:2c:c1:3a:94:e8:54:ad:8f:23:df:a0:58:99:d9:15:
84:6e:b8:c8:e8:f1:6a:37:f2:e2:9e:7a:67:e4:cc:77:97:04:
2d:b9:7b:97:f9:12:b5:24:27:7d:24:95:31:66:2a:68:d2:7b:
5a:70:2b:11:77:3b:8c:aa:35:9e:1b:ea:eb:b5:a7:1d:b6:01:
ae:af:b7:8e:34:48:f3:4a:6e:d9:9b:fe:c6:e5:90:ca:68:41:
37:25:f6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:31:16 2025 by rpki-client