Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6cf3fa-6eee-4987-9853-a06a8e428215.roa
File: 5a6cf3fa-6eee-4987-9853-a06a8e428215.roa (raw, json)
Hash identifier: 4xAU5HgUXtmdPrKs1TsdjmT6pDg48LCUGJlHXumH/7I=
Subject key identifier: 22:AC:3D:53:67:86:E5:EA:FF:39:A3:E2:33:B8:54:17:43:F3:0F:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 722C7C28DADDE9EFD4F5A85B5E0BEAD0EEBE5241
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6cf3fa-6eee-4987-9853-a06a8e428215.roa
Signing time: Tue 07 Oct 2025 00:12:33 +0000
ROA not before: Tue 07 Oct 2025 00:12:33 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2c:7c:28:da:dd:e9:ef:d4:f5:a8:5b:5e:0b:ea:d0:ee:be:52:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:12:33 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=679c8fb72d6545f2801647ec8acc780c328dc02d0380e4c1bd3457ba6b535e43, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d0:dc:33:ad:1e:1d:4d:ff:20:43:16:33:fa:
35:6e:e1:07:d9:f7:e4:9a:b5:af:7b:8f:b9:00:cc:
cc:c4:6e:bd:73:3b:08:7f:ad:0f:02:7a:26:2a:ea:
f8:69:bf:bc:77:c5:5b:f1:1d:09:09:e6:94:50:66:
b9:9c:64:14:79:28:eb:fd:e1:01:4a:9c:a4:7b:7c:
66:1d:40:74:eb:dd:46:0e:9a:03:02:a8:14:25:b8:
18:03:87:19:f6:30:65:0e:39:0a:05:fe:89:83:20:
9a:ab:f5:28:73:d9:be:fc:d7:64:ab:9b:f9:3f:86:
e9:5f:81:22:cb:29:49:b0:cf:98:c0:0f:f5:29:20:
cf:d6:19:70:bd:54:5f:f3:3f:57:30:e1:e9:f3:ef:
96:6c:f6:5d:e0:10:53:6d:26:ca:66:94:ee:cf:57:
a9:88:e7:c3:4e:25:34:2b:eb:17:7d:5b:24:b9:77:
88:6f:d6:ca:fa:c7:67:d6:79:74:0c:34:b7:48:c9:
71:9b:ee:31:16:cc:60:69:8e:99:0d:4d:26:73:ed:
9a:2e:cf:5d:8f:78:2f:8e:65:69:7d:b4:83:dc:cd:
80:07:7c:a9:98:51:63:fa:eb:37:be:07:de:73:47:
80:24:a9:70:2f:16:00:10:5a:26:60:32:ed:e9:75:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:3D:53:67:86:E5:EA:FF:39:A3:E2:33:B8:54:17:43:F3:0F:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5a6cf3fa-6eee-4987-9853-a06a8e428215.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.3.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a1:d1:68:d3:0e:e0:11:95:4e:a3:36:c1:e6:c0:13:8f:75:
5b:43:a8:b8:45:15:27:8c:f0:e3:90:bc:8f:8a:92:bb:41:1a:
66:22:e1:66:7c:a1:96:66:e5:ee:48:5b:d8:46:46:14:38:12:
d5:92:63:3a:df:72:fe:51:d0:52:9f:03:ed:3f:29:41:05:94:
a2:a9:af:c5:d5:1f:dd:f3:17:ca:7e:97:76:24:6e:c1:1a:25:
dd:95:04:03:e6:5a:f7:eb:ab:d6:f5:5f:da:e9:21:c7:f6:dd:
3d:49:50:bf:2f:f5:43:c3:88:69:a4:4c:dd:b9:e1:6b:f7:29:
07:d1:e2:fb:c8:99:9b:f4:ba:86:4b:02:57:14:cf:f7:c0:a0:
a9:0c:b9:2e:10:ca:76:fe:bc:e1:c5:b3:2c:f0:be:8c:95:b1:
c6:49:57:e0:a1:a9:63:c4:12:14:e6:05:64:ee:63:02:a7:a1:
cd:c9:1a:0a:27:f2:0d:4f:51:6f:a1:25:b1:6b:76:bb:5c:6f:
6d:21:4e:18:b0:b2:fa:16:13:88:72:ef:bb:3b:e8:a9:51:b5:
ba:c8:2a:5c:e0:1c:51:bf:52:9d:34:37:93:63:d8:3e:82:27:
8a:0a:71:4c:ac:88:47:37:52:30:d2:ce:79:50:5e:7b:a4:96:
a8:b9:86:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcix8KNrd6e/U9ahbXgvq0O6+UkEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA3MDAxMjMzWhcNMjUxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NzljOGZiNzJkNjU0NWYyODAxNjQ3ZWM4YWNjNzgwYzMy
OGRjMDJkMDM4MGU0YzFiZDM0NTdiYTZiNTM1ZTQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCm0NwzrR4dTf8gQxYz+jVu4QfZ9+Sata97j7kAzMzEbr1z
Owh/rQ8CeiYq6vhpv7x3xVvxHQkJ5pRQZrmcZBR5KOv94QFKnKR7fGYdQHTr3UYO
mgMCqBQluBgDhxn2MGUOOQoF/omDIJqr9Shz2b7812Srm/k/hulfgSLLKUmwz5jA
D/UpIM/WGXC9VF/zP1cw4enz75Zs9l3gEFNtJspmlO7PV6mI58NOJTQr6xd9WyS5
d4hv1sr6x2fWeXQMNLdIyXGb7jEWzGBpjpkNTSZz7Zouz12PeC+OZWl9tIPczYAH
fKmYUWP66ze+B95zR4AkqXAvFgAQWiZgMu3pdfgbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIqw9U2eG5er/OaPiM7hUF0PzDyowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVhNmNmM2ZhLTZlZWUtNDk4Ny05ODUzLWEwNmE4ZTQyODIxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABu7gMwDQYJKoZIhvcNAQELBQADggEBAHGh0WjTDuARlU6jNsHmwBOPdVtD
qLhFFSeM8OOQvI+KkrtBGmYi4WZ8oZZm5e5IW9hGRhQ4EtWSYzrfcv5R0FKfA+0/
KUEFlKKpr8XVH93zF8p+l3YkbsEaJd2VBAPmWvfrq9b1X9rpIcf23T1JUL8v9UPD
iGmkTN254Wv3KQfR4vvImZv0uoZLAlcUz/fAoKkMuS4Qynb+vOHFsyzwvoyVscZJ
V+ChqWPEEhTmBWTuYwKnoc3JGgon8g1PUW+hJbFrdrtcb20hThiwsvoWE4hy77s7
6KlRtbrIKlzgHFG/Up00N5Nj2D6CJ4oKcUysiEc3UjDSznlQXnuklqi5hno=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:31 2025 by rpki-client