Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793b1d13-c592-4627-ae73-33658faf9052.roa
File: 793b1d13-c592-4627-ae73-33658faf9052.roa (raw, json)
Hash identifier: IWTFc8fRSqDpJExur+UNHvai+BSn7VgyW/YubcoufkE=
Subject key identifier: FF:7F:69:00:FD:AC:5B:6E:17:23:EC:E0:1E:73:B0:C7:45:92:70:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6135599280F35C0E4E17342E42A8D13BEAC92FAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793b1d13-c592-4627-ae73-33658faf9052.roa
Signing time: Sun 19 Oct 2025 00:40:56 +0000
ROA not before: Sun 19 Oct 2025 00:40:56 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.183.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:35:59:92:80:f3:5c:0e:4e:17:34:2e:42:a8:d1:3b:ea:c9:2f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:40:56 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d1cfa214257ab8ca654b5a207ae48325858402dce4461ba10f8922ef90c5b83e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:64:c4:44:04:2c:bf:55:a8:cd:2e:b7:82:
36:88:67:06:92:e2:5d:9b:26:d7:75:32:3e:25:e4:
98:df:58:f7:e1:2c:49:2a:af:5c:7a:00:b1:0e:bd:
4a:81:60:1a:97:6b:06:e9:cc:f4:59:57:15:fb:da:
b8:1f:72:07:e9:8e:f0:bd:89:e2:25:87:66:eb:91:
7d:b2:e2:1a:ec:d8:a7:76:25:d3:9a:47:2b:40:34:
5f:38:c3:c7:95:ae:18:45:b4:0b:26:d9:1f:d2:45:
3c:92:f4:2c:aa:71:60:9f:04:a4:ca:91:64:60:c4:
3e:10:e3:7f:95:d6:c0:79:26:e2:56:79:41:ea:4b:
7a:ee:77:3e:79:6a:13:a6:89:b5:3d:5d:f8:2f:62:
ce:86:38:29:2d:64:9e:8e:f8:14:39:71:fa:01:95:
51:1b:bc:5d:b9:63:8c:7c:5d:df:fe:04:16:23:3e:
f6:1d:ce:13:ba:61:05:5f:b3:fe:bf:59:a8:44:0e:
b6:8a:9b:a1:1b:02:dc:a9:22:3f:ac:70:1a:42:11:
02:8b:32:6c:fd:c6:99:11:08:88:f1:99:cc:e6:4a:
9d:30:87:50:50:32:ba:d4:74:58:5c:60:f6:6f:0b:
c2:61:a3:25:a9:14:52:97:ea:79:ac:3d:4d:af:08:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7F:69:00:FD:AC:5B:6E:17:23:EC:E0:1E:73:B0:C7:45:92:70:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/793b1d13-c592-4627-ae73-33658faf9052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.183.0.0/16
Signature Algorithm: sha256WithRSAEncryption
26:e8:dd:51:cd:15:de:59:97:0a:82:93:17:8f:bc:a5:15:6a:
00:e1:7e:4c:cf:83:e4:4f:4e:7e:cf:c2:2b:34:4c:6e:25:54:
a1:67:1f:56:e5:ef:94:ae:27:fd:5c:44:ea:e3:23:40:6f:87:
8c:84:82:fa:51:08:f8:c8:e7:15:c8:69:d4:b9:56:bf:71:57:
dc:5f:ec:78:80:1b:02:df:dd:93:7f:99:bf:2d:0a:92:73:37:
a3:d1:8c:1b:7b:42:6e:d0:3a:dd:fd:39:00:87:23:74:4f:a8:
16:95:f0:76:18:71:85:68:9d:09:7f:25:c6:4c:1e:41:4d:ab:
71:b4:ab:ed:c5:9c:84:15:de:11:b5:50:0f:c5:b3:92:00:a6:
22:fc:9c:dc:7f:60:97:b8:3d:46:a5:bc:0d:c0:ba:47:6a:74:
70:12:ac:74:95:7e:26:54:19:ac:03:64:73:83:83:31:e6:ad:
ea:3b:01:be:5a:49:5f:9d:81:6e:bf:24:14:b1:73:0c:a8:1a:
53:a2:b2:a8:ab:1e:af:e6:06:3c:c7:0f:b1:a7:27:56:51:7e:
df:fd:92:05:bd:c5:8c:57:40:51:03:fd:0a:ca:29:56:36:54:
37:42:85:3c:78:67:24:b3:56:4a:50:9c:3f:f6:c7:fc:3c:e6:
b7:ff:5c:93
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYTVZkoDzXA5OFzQuQqjRO+rJL60wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDA0MDU2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkMWNmYTIxNDI1N2FiOGNhNjU0YjVhMjA3YWU0ODMyNTg1
ODQwMmRjZTQ0NjFiYTEwZjg5MjJlZjkwYzViODNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCirWTERAQsv1WozS63gjaIZwaS4l2bJtd1Mj4l5JjfWPfh
LEkqr1x6ALEOvUqBYBqXawbpzPRZVxX72rgfcgfpjvC9ieIlh2brkX2y4hrs2Kd2
JdOaRytANF84w8eVrhhFtAsm2R/SRTyS9CyqcWCfBKTKkWRgxD4Q43+V1sB5JuJW
eUHqS3rudz55ahOmibU9XfgvYs6GOCktZJ6O+BQ5cfoBlVEbvF25Y4x8Xd/+BBYj
PvYdzhO6YQVfs/6/WahEDraKm6EbAtypIj+scBpCEQKLMmz9xpkRCIjxmczmSp0w
h1BQMrrUdFhcYPZvC8JhoyWpFFKX6nmsPU2vCFq/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU/39pAP2sW24XI+zgHnOwx0WScOIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc5M2IxZDEzLWM1OTItNDYyNy1hZTczLTMzNjU4ZmFmOTA1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4tzANBgkqhkiG9w0BAQsFAAOCAQEAJujdUc0V3lmXCoKTF4+8pRVqAOF+
TM+D5E9Ofs/CKzRMbiVUoWcfVuXvlK4n/VxE6uMjQG+HjISC+lEI+MjnFchp1LlW
v3FX3F/seIAbAt/dk3+Zvy0KknM3o9GMG3tCbtA63f05AIcjdE+oFpXwdhhxhWid
CX8lxkweQU2rcbSr7cWchBXeEbVQD8WzkgCmIvyc3H9gl7g9RqW8DcC6R2p0cBKs
dJV+JlQZrANkc4ODMeat6jsBvlpJX52Bbr8kFLFzDKgaU6KyqKser+YGPMcPsacn
VlF+3/2SBb3FjFdAUQP9CsopVjZUN0KFPHhnJLNWSlCcP/bH/Dzmt/9ckw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:36:11 2025 by rpki-client