Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b589bcc-8e5f-42b0-84e6-f5be0dcf4137.roa
File: 5b589bcc-8e5f-42b0-84e6-f5be0dcf4137.roa (raw, json)
Hash identifier: 3Xt9QcjVue1dKDndC//x0pZSE4RXQakndf9MVZfQgno=
Subject key identifier: 78:3E:04:D0:92:CA:4C:8B:3B:F1:52:19:05:AF:B2:87:55:A3:26:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3265D495CDE530EB2B743C414EF2624B72415071
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b589bcc-8e5f-42b0-84e6-f5be0dcf4137.roa
Signing time: Mon 06 Oct 2025 16:22:47 +0000
ROA not before: Mon 06 Oct 2025 16:22:47 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.216.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:65:d4:95:cd:e5:30:eb:2b:74:3c:41:4e:f2:62:4b:72:41:50:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:22:47 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=ad0253f736fcaa7551caf58f54c1f16f7843f41c2cdeb05b9cf9b21df23110a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:af:08:ab:36:89:b0:1f:b7:bc:22:07:35:
f3:a1:9c:c3:59:5a:70:07:e6:64:9f:2c:39:67:47:
72:a7:90:cd:1b:db:6e:e1:86:30:57:a0:ee:7c:b2:
94:d1:03:33:34:91:8b:06:6d:a2:56:8f:1b:ef:ef:
0e:b8:82:f6:b5:86:8b:dd:86:39:54:c1:82:33:a8:
7a:fb:e7:bc:1b:a4:43:c7:cc:cb:05:1b:5b:f2:61:
08:ef:dd:a0:02:b1:e2:50:73:19:99:50:0b:86:43:
77:93:44:12:b2:d3:99:1f:fc:f4:31:97:f2:81:30:
ea:96:b7:af:97:b2:ed:40:aa:34:4c:a8:95:55:3b:
8f:9b:9e:d1:37:15:f2:0f:03:2a:4c:ec:1f:ac:f1:
a8:41:01:57:14:d2:f3:26:0b:d5:da:b7:0a:59:7c:
43:fa:57:39:1d:39:78:18:90:71:e7:16:a5:53:ce:
96:cb:2c:6d:c4:0b:fb:33:f3:da:e4:bc:9f:a4:37:
90:17:cf:ce:ef:6d:cf:c6:16:4c:dc:eb:16:dd:01:
fa:c3:d0:e7:e7:a0:4b:59:92:62:9e:86:cb:e8:70:
21:12:fa:20:cd:64:0d:66:3b:2c:8e:6d:3e:86:4f:
84:a2:1c:04:9c:84:b7:01:01:c7:c3:d5:78:58:eb:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3E:04:D0:92:CA:4C:8B:3B:F1:52:19:05:AF:B2:87:55:A3:26:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b589bcc-8e5f-42b0-84e6-f5be0dcf4137.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.216.184.0/22
Signature Algorithm: sha256WithRSAEncryption
12:22:2d:9d:51:1c:8c:5b:40:e6:44:41:bc:8a:a0:68:e4:3c:
cd:1f:17:e1:1a:1c:00:9f:4d:e2:96:88:94:14:d5:71:9f:9a:
f0:81:4f:f8:d5:12:45:25:2b:e0:7b:13:b8:fb:2f:a6:d4:94:
0c:a2:06:21:4e:b1:38:d2:67:a0:54:ba:d6:53:46:c7:7c:16:
50:b4:9e:57:6a:d0:65:c3:4f:92:f4:ce:ac:01:0b:7b:96:4a:
3d:a3:0d:a2:19:a0:e4:ae:b7:87:8b:84:1b:7c:02:fa:4d:2d:
77:b6:41:93:47:fc:89:fc:84:54:c7:0f:74:43:dc:bb:02:40:
37:bd:9d:2a:bd:72:8d:84:35:56:f4:a7:7f:a2:69:b8:75:e8:
c3:5e:ea:d2:61:2c:a3:b6:2d:6c:d8:ad:a6:7e:8e:67:d7:16:
0b:fe:f9:6d:ec:91:c0:e9:f5:de:dc:1c:78:b6:35:17:a3:9f:
2b:da:0d:0c:cc:e0:af:2c:0e:69:16:9d:a8:f9:12:13:16:f7:
a8:44:5b:88:db:48:f5:3f:74:89:3b:1a:03:07:1a:9e:d4:43:
35:cc:b5:b0:ce:b6:5d:f7:e7:7f:01:c1:ac:bf:76:27:c5:ad:
ce:f5:57:05:7f:54:8a:a5:e0:ad:96:fe:ed:c1:9a:c1:ae:c2:
85:b3:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:36 2025 by rpki-client