Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a15677a-f3a8-4cc4-89b3-68b19c29a828.roa
File: 3a15677a-f3a8-4cc4-89b3-68b19c29a828.roa (raw, json)
Hash identifier: WX5q+rKw1C8nKIiHiA9cTuga6n9zM0NpohaSlN0CoU0=
Subject key identifier: EF:E3:BB:B4:1C:C4:66:65:D3:F1:D7:79:41:B3:BE:51:77:D1:23:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20A85D3CFFAEE6DF0253D95D627B2887BAD81426
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a15677a-f3a8-4cc4-89b3-68b19c29a828.roa
Signing time: Fri 10 Oct 2025 00:21:34 +0000
ROA not before: Fri 10 Oct 2025 00:21:34 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.87.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a8:5d:3c:ff:ae:e6:df:02:53:d9:5d:62:7b:28:87:ba:d8:14:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 00:21:34 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=ba6e7af7bea4f0ea969056f5385a8e4cb2460b79488ede674cf021fc09e54643, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:92:d3:bc:64:bc:92:d2:80:02:e8:ca:cd:
b6:d5:10:4a:a1:88:8c:ed:c8:3c:ed:a1:f7:d1:aa:
b5:48:f3:47:88:58:b3:0a:b0:8f:51:9b:92:d7:95:
bc:e3:dc:cb:05:0e:4d:01:f2:74:26:eb:3f:b8:69:
66:09:7c:3c:7e:fd:b6:85:9d:ca:17:89:e2:6e:9e:
2e:53:46:a7:b1:b2:0d:50:ee:6e:fd:3e:56:dd:98:
cf:a8:36:26:05:bb:89:ec:b2:01:c9:84:4e:5c:18:
46:03:ee:2b:a6:2d:70:0d:56:32:43:af:ec:02:6d:
9b:13:d8:0a:3c:cd:ce:6d:e8:0f:5c:ad:38:57:15:
e1:06:9c:fe:4b:67:2b:bc:80:54:42:36:fd:9f:c2:
b4:eb:61:ae:cc:b1:40:7c:e2:7c:16:a2:38:b9:4e:
e6:e5:34:b5:63:04:0c:71:cd:fd:f4:80:82:9e:6b:
77:85:76:df:87:43:46:1f:f2:98:df:66:09:62:a6:
41:fc:0c:67:cb:bd:c1:44:b6:19:c1:f5:45:02:3b:
ed:5d:40:d9:e7:31:75:0a:4f:9f:e5:f8:14:76:fb:
e3:80:be:e3:e4:3d:04:45:fb:94:56:92:12:89:89:
85:81:06:25:c4:bc:48:9f:1a:9a:de:4a:f2:fa:a6:
7e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E3:BB:B4:1C:C4:66:65:D3:F1:D7:79:41:B3:BE:51:77:D1:23:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a15677a-f3a8-4cc4-89b3-68b19c29a828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.87.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:da:d5:f1:75:72:6f:ec:11:71:c3:34:4e:3f:5d:d0:0f:99:
7c:6f:9b:21:ff:94:3a:59:6c:ff:c2:65:b8:43:70:00:2d:fe:
df:1d:53:cf:43:ad:97:8a:8e:03:69:46:ae:d9:f0:5a:e3:f3:
54:60:1f:8e:d9:08:a7:ce:0c:0f:b7:62:0d:79:b5:e8:f7:09:
25:e8:82:3c:83:fb:b1:cf:48:70:55:4c:88:d4:eb:dc:89:e5:
e8:8b:d0:8b:9d:c6:83:11:59:e0:ba:b7:51:34:ce:c0:67:ae:
b2:3b:be:3d:fd:79:06:50:70:f9:97:2e:20:41:18:13:03:6f:
a3:b7:97:59:49:37:02:06:b5:18:84:73:5f:0e:d2:26:2f:6d:
e3:d2:bd:34:2e:02:b6:2c:d4:6d:eb:24:a3:6b:1a:10:24:b1:
c0:7b:6a:86:40:04:9f:4f:8d:91:ca:c9:27:1c:56:8d:5e:be:
b5:cd:7c:7d:21:78:a6:3d:35:6c:e1:60:75:3d:a7:9f:fc:b0:
29:bc:b5:4e:4b:05:6e:55:4f:67:ae:6d:a4:3c:e4:06:04:5b:
9f:99:b0:6d:f5:45:ad:8e:59:08:82:46:61:3c:4a:73:ec:9b:
ee:34:28:ad:82:ef:ef:2b:1f:07:32:97:65:28:f3:59:32:d4:
52:7b:6e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:47 2025 by rpki-client