Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa
File: 45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa (raw, json)
Hash identifier: Tggj2HEDeOA+uEZvbA1FGz620U7jL/wcY+aKRNZ0MnM=
Subject key identifier: AC:32:CE:B0:5B:1D:64:10:0D:A0:BC:80:25:EB:9F:97:A0:5F:1E:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 760FDEBFEAE78A86D3EB942D103F589A4EBEC8C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa
Signing time: Sat 18 Oct 2025 02:11:34 +0000
ROA not before: Sat 18 Oct 2025 02:11:34 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.20.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:0f:de:bf:ea:e7:8a:86:d3:eb:94:2d:10:3f:58:9a:4e:be:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:11:34 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=0a131330175e0fb336338442a975c585e7d6fcb60673ee23c59d73adee77ced3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:74:11:18:92:b0:28:a8:3d:63:8a:b6:c1:
39:58:d6:70:19:d3:73:47:4d:07:ef:d1:7e:8b:40:
ec:2a:6f:e8:1c:90:44:02:7e:2a:d7:e3:b5:da:5c:
e8:e7:1d:c4:81:2e:4c:ae:89:74:df:12:a9:32:7b:
a2:55:65:30:d5:0e:09:36:eb:72:c4:f5:ff:5d:0a:
83:78:53:e3:a4:05:6d:d9:86:06:44:7d:4e:17:88:
0c:64:c8:71:57:e5:45:e0:f5:2f:ca:b9:c5:bc:bb:
82:99:43:7b:51:a1:f5:3c:e2:08:ff:2a:f2:43:f8:
53:24:91:60:f7:43:1d:a5:36:a8:fe:93:ee:1f:2a:
2d:8c:96:ae:db:f0:c1:62:35:0f:51:c1:95:4f:96:
5e:96:ef:94:ce:97:20:e0:82:22:93:72:55:1e:a7:
26:29:1e:ea:bd:ef:7d:9d:ac:d0:e6:3e:18:b5:71:
21:13:2d:30:52:3c:0f:a7:43:c1:cd:08:71:b6:51:
ce:81:b8:fa:5c:7b:62:a9:45:93:98:87:b3:0c:6c:
b1:8b:32:33:ce:4c:a9:db:92:8e:ea:58:3f:2f:86:
d6:07:3c:af:d0:6e:fa:85:e3:6e:0e:63:68:73:73:
31:39:1d:bd:ef:7e:e3:76:5b:35:56:24:00:c6:65:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:32:CE:B0:5B:1D:64:10:0D:A0:BC:80:25:EB:9F:97:A0:5F:1E:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/45a29cb5-ef36-49b6-8d84-d87fbb54fd2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:cf:c5:ab:20:ef:29:28:c3:a0:a4:77:53:10:d8:e3:61:51:
51:56:b6:81:0c:71:c4:92:45:04:da:f5:91:56:95:00:14:c6:
aa:05:3d:15:83:e0:ce:d2:a7:cc:3e:63:68:21:98:30:63:92:
b2:af:25:d7:fd:76:8f:1b:58:85:fa:c9:67:65:27:27:0e:ac:
49:d3:c7:f4:ad:14:de:bc:0b:fa:b0:a1:d0:51:f6:55:32:8d:
87:49:e7:ac:31:14:d9:3f:ee:89:72:c7:77:17:3c:c0:4a:7a:
c5:6a:97:d9:dd:f8:5d:7b:d8:15:ee:de:27:ab:1b:b4:23:32:
ec:84:87:04:f5:3e:9a:99:b3:02:ab:a1:4a:39:e0:55:67:d5:
2d:9f:7b:af:8f:5a:b5:35:7d:62:6c:19:1b:cb:d6:13:5f:bf:
95:37:88:50:d0:c8:1a:4d:77:da:37:98:11:10:3e:60:e0:ac:
ab:d2:72:8f:fd:42:c4:9c:54:59:c9:7e:25:9d:b5:2c:de:4d:
79:21:51:15:54:7e:03:73:a0:bf:5f:5e:02:52:8e:98:a7:f3:
6e:b7:70:9a:64:2b:73:a6:b9:55:d6:f8:be:b0:53:3e:42:a8:
ec:f3:bf:0d:5a:53:a4:63:3e:62:cf:be:44:55:43:95:f3:10:
6d:64:1e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:47 2025 by rpki-client