Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa
File: 6392e4ef-e271-45c8-867d-345229dc1cf6.roa (raw, json)
Hash identifier: 2YW/eNlXEGiejXdNfeL4xnIcx4E+1S0et0ax4UDpBBA=
Subject key identifier: E2:62:B0:EA:4E:19:5C:75:68:0C:30:3B:D4:35:C3:43:AA:B0:09:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E8C31DAEC2487BE5BF1F1353A29900CADD87C71
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa
Signing time: Fri 26 Sep 2025 00:21:15 +0000
ROA not before: Fri 26 Sep 2025 00:21:15 +0000
ROA not after: Fri 31 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.5.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8c:31:da:ec:24:87:be:5b:f1:f1:35:3a:29:90:0c:ad:d8:7c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 26 00:21:15 2025 GMT
Not After : Oct 31 23:59:59 2025 GMT
Subject: serialNumber=13e7839773a9922e22d8b3b56835d91505edfb07bc85a583f576bd13d4d91455, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:db:06:13:5d:2c:df:95:5d:cb:a6:95:80:
a4:a6:1b:c2:fc:bf:9e:25:5d:31:f8:bc:c7:09:06:
3d:45:e4:03:8d:cd:bb:da:dd:74:41:5f:83:5f:f2:
b2:b5:c6:b8:1e:51:33:9a:b7:70:c8:7c:11:44:03:
61:ce:d5:57:3d:e3:63:60:eb:72:04:06:8f:50:01:
79:f4:f8:cc:37:78:8d:2e:a5:b5:06:47:b9:b7:38:
99:1f:90:b4:a9:b5:40:8b:be:c2:9a:25:57:4b:d7:
d8:3a:ed:9e:44:a5:f8:9e:3e:1e:86:32:4e:c6:c0:
e9:46:b0:e8:00:f5:9c:e0:7d:12:53:b0:5a:9b:87:
73:22:21:6c:6d:91:d3:3b:f6:79:1a:53:a4:bd:3d:
a9:93:eb:ea:c3:ad:3f:b0:9f:f2:b1:83:e4:d3:15:
13:6f:66:65:4b:1a:bc:09:9f:57:c9:11:04:7d:28:
13:35:22:94:0d:c6:9b:5d:82:75:99:64:8d:81:e3:
01:11:53:25:89:17:f5:31:9a:17:89:4b:2c:88:2a:
cb:3c:6f:0b:4a:0b:46:57:5b:80:0e:30:83:2a:27:
12:45:65:d5:0a:c8:af:2e:4c:ae:ed:bf:87:5a:21:
39:46:3a:ba:3e:f4:7d:48:cd:c1:39:cd:db:ab:75:
88:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:62:B0:EA:4E:19:5C:75:68:0C:30:3B:D4:35:C3:43:AA:B0:09:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6392e4ef-e271-45c8-867d-345229dc1cf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bb:17:7c:83:e7:3f:be:5a:8e:40:78:61:6d:3b:97:c8:af:
11:6a:c5:f0:fc:70:eb:54:07:ef:ee:17:67:c5:39:e8:ae:77:
e4:06:42:58:5c:a2:92:1e:00:a4:62:04:48:05:62:66:32:e2:
93:d6:fc:75:d8:bf:d6:c7:89:14:63:1b:2b:85:f0:60:3b:5a:
59:37:6c:cd:9d:d2:39:a0:c8:4c:9f:84:db:17:b6:9a:bd:df:
4a:8d:9c:48:37:2c:6b:3c:2d:3a:34:91:0e:b7:c2:b3:22:1d:
b0:f6:a1:82:41:23:1f:ef:65:c7:97:01:89:dd:3e:69:df:ff:
e0:f8:5f:ac:d7:c1:b5:7a:2c:bb:70:79:d1:e8:e0:b7:1d:fe:
18:1d:e9:5d:45:a1:61:ac:68:ed:8f:be:2b:e6:c4:41:b8:95:
08:4b:81:ff:af:94:d6:6e:7d:2d:3c:f2:77:62:ec:78:53:b0:
2f:c7:95:13:23:b6:b5:43:47:af:46:4f:46:52:70:58:95:0a:
27:93:4f:a4:82:d1:1f:7b:e1:f5:71:83:f4:ed:10:8d:61:a8:
51:e0:95:6f:61:ad:85:14:10:a6:ff:ce:3f:65:78:96:33:7a:
8d:96:fa:be:ac:8a:14:55:53:1e:4a:f7:10:e9:16:a2:52:f5:
2e:12:e8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:38:37 2025 by rpki-client