Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa
File: 4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa (raw, json)
Hash identifier: WTt19Kovw5kFoKzY+fo6k3vzM8+lzU1xNcddeIig66Q=
Subject key identifier: 46:A8:7F:4D:6C:92:70:79:7D:D1:E8:47:A2:27:35:A5:69:52:99:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 534B6EEF8DFABFDF43572B6879746C3D31B2928F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa
Signing time: Mon 29 Sep 2025 15:11:39 +0000
ROA not before: Mon 29 Sep 2025 15:11:39 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 75.45.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4b:6e:ef:8d:fa:bf:df:43:57:2b:68:79:74:6c:3d:31:b2:92:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 29 15:11:39 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=8f35a4e516a556c99b4f53ae73c575dd6d345b82f9ca9f42c4113dabbca11a18, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:76:bf:9f:bb:c8:ea:df:5b:bc:1e:be:2d:e7:
1a:4e:10:fe:55:00:13:5d:09:44:ac:fb:74:cd:57:
6d:33:ed:11:e2:32:77:a9:a7:df:5b:57:91:bd:82:
36:d4:5b:b7:f2:f3:46:5c:80:9c:5a:5f:2f:06:de:
c9:8f:49:08:cd:4a:b3:22:ce:4b:e6:b3:f0:59:04:
9f:ad:dc:63:20:0b:5d:e7:f0:8d:0b:34:b4:d2:df:
10:0f:a8:59:58:d4:28:0e:c7:88:8e:9a:e0:6a:e9:
b7:cc:a6:65:0f:47:23:68:e0:79:d8:64:df:2b:17:
24:bc:49:9b:55:ea:68:59:8e:c1:ce:6a:f5:1c:cd:
4f:5d:85:59:83:5a:c8:a6:aa:e3:73:05:2d:66:f7:
04:f2:7e:eb:c6:68:80:00:6d:e0:84:c0:21:9b:3a:
e4:fa:99:33:d2:cc:86:f2:ef:1f:f8:8b:37:a0:a9:
3d:71:db:07:91:d3:5f:5a:c4:ac:ed:17:e4:eb:45:
89:bd:6c:30:f9:84:a0:e7:62:0a:94:50:2f:4c:bd:
05:38:6b:6b:82:60:c5:ac:94:a4:8e:d2:42:83:64:
77:11:7c:34:6e:ed:7e:3a:4e:c6:bd:35:8f:2e:b7:
84:8c:74:3b:54:6c:69:81:90:69:91:11:eb:aa:4b:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:7F:4D:6C:92:70:79:7D:D1:E8:47:A2:27:35:A5:69:52:99:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b328c46-ba48-416d-99ac-6a2f6f35ffd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.45.160.0/19
Signature Algorithm: sha256WithRSAEncryption
cd:61:c5:b7:9c:ac:f4:a7:97:6f:ca:29:48:22:bf:3b:7f:b0:
c1:5f:87:a8:bb:b4:d2:26:e1:c7:3e:6d:46:91:11:8e:e8:de:
d5:74:24:d0:7c:f4:b3:db:13:08:27:6d:e1:16:88:d8:b7:f3:
ac:33:49:04:a3:60:f8:48:72:77:a5:77:df:31:bc:21:8f:80:
1b:69:1f:ca:07:15:a1:23:fd:48:bd:ae:77:f1:88:ea:41:2b:
44:ed:a7:4a:74:0b:0b:f7:15:94:8f:80:f1:15:ec:80:5e:d7:
13:8d:99:94:44:c4:90:de:2c:d5:4d:2f:d8:28:fb:10:9d:8e:
01:af:fb:38:88:6e:01:9c:38:e6:78:9e:0e:2e:1f:4e:db:79:
fb:e3:9b:d8:6c:d4:65:b5:9e:9c:7d:65:56:c7:ee:51:78:89:
f0:d9:a7:3a:61:a3:23:d4:d8:18:65:65:91:f4:b1:33:6e:07:
84:77:ea:26:9e:7d:af:da:b1:1e:18:d8:68:98:2b:47:2e:b1:
52:b3:de:4d:03:2f:40:eb:0a:0a:0e:08:b3:1f:5b:0b:08:c9:
5f:70:d3:f3:ad:7b:c4:c5:d5:73:20:93:83:2e:d8:3e:00:c4:
97:cd:d0:ce:78:c2:d8:00:09:f9:99:ed:b5:2e:29:81:43:25:
af:00:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:31 2025 by rpki-client