Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa
File: 7ec798da-a6c2-44be-afd4-f4a224668ad8.roa (raw, json)
Hash identifier: 5u7X6A4bR/tlL712l4wP4CaOFDiGjwOK7WPAZM9i3Qg=
Subject key identifier: 78:A8:EE:52:7A:36:3A:46:7F:F8:52:09:AF:6C:6A:F2:DA:D3:D7:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21C5A30C67E38C938B8A4C8DAFAD01D9390A1041
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa
Signing time: Sat 18 Oct 2025 01:11:38 +0000
ROA not before: Sat 18 Oct 2025 01:11:38 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 119.13.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c5:a3:0c:67:e3:8c:93:8b:8a:4c:8d:af:ad:01:d9:39:0a:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:11:38 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=1890a29dc8b771db5930b8ddadb768337b2ec593e2d694f7befc03cf7752ded2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:29:59:85:d7:14:03:ea:87:e8:2e:2b:63:
4d:ed:e2:2a:36:45:d4:ef:c6:dd:00:e7:69:11:56:
c5:f7:1f:f1:ba:b7:47:a4:e8:a2:fc:59:39:91:08:
a2:0c:d5:fa:d9:31:14:41:22:d4:6a:bf:a6:d0:86:
f0:d3:ae:43:4a:48:e2:ba:3a:67:2a:68:c2:f9:56:
3a:b2:b3:c0:0c:c7:7c:70:62:ce:90:dd:08:2e:cb:
5d:18:2f:50:ce:00:2a:e0:7d:f3:39:03:ac:4f:e6:
16:6c:9a:4e:dd:34:93:27:7d:c3:3a:eb:ae:f9:1d:
a2:94:c6:06:bf:ba:c8:5a:88:5e:2c:48:2e:08:87:
7a:54:23:38:82:98:3a:f5:b6:28:e6:26:9f:bc:20:
2d:70:8a:d6:dd:97:a7:33:71:05:da:80:34:9e:58:
d7:c7:a7:90:a6:67:50:0b:7a:25:ec:5f:22:9e:be:
91:78:73:e5:81:20:22:6b:ee:89:0f:86:81:04:4b:
d9:5f:65:7a:09:1b:4a:74:71:df:b6:ee:05:05:da:
96:ca:91:5a:1f:eb:8c:ff:14:7f:60:7f:6a:3f:f3:
a7:6d:d6:c6:bb:eb:7d:d0:f0:1e:a9:e7:74:29:cd:
9c:73:40:86:17:b2:fe:00:4d:05:97:31:be:f4:5f:
fc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:EE:52:7A:36:3A:46:7F:F8:52:09:AF:6C:6A:F2:DA:D3:D7:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ec798da-a6c2-44be-afd4-f4a224668ad8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.13.52.0/22
Signature Algorithm: sha256WithRSAEncryption
38:1f:d8:3f:27:52:33:da:38:a3:50:6e:bf:9c:f3:4d:42:2e:
28:a3:6c:e3:e1:d9:b2:27:02:a5:2c:4b:35:bb:82:46:2c:26:
d9:47:62:1b:fe:4a:93:80:0e:77:0d:a1:b3:13:69:5b:5a:5f:
1e:12:4d:7f:ff:54:0b:ca:cd:77:bd:a3:07:03:89:66:84:e4:
d6:78:15:0f:2e:61:52:eb:da:40:94:2f:3a:eb:06:1e:1e:25:
dd:06:2b:79:2b:db:46:eb:0a:c1:ca:5f:de:ce:e9:f3:e2:d4:
1e:91:e1:e5:42:db:8a:09:81:71:c2:08:c8:c3:f4:76:f0:4b:
dd:a1:1e:08:8f:68:79:b1:8e:2b:ca:9b:bc:ed:7f:e7:1a:65:
ae:98:6b:c2:f7:fd:44:f9:3c:b1:16:3f:0a:46:2d:b6:a3:f3:
97:12:ed:1c:02:cc:64:45:15:4d:ea:2e:ae:91:94:56:c2:77:
13:8e:c8:84:3d:af:fe:68:45:d4:70:90:ac:d2:1c:24:0f:3e:
15:4d:b3:f4:8c:4f:31:03:e4:27:b5:dd:0c:f9:5a:ed:41:df:
09:d9:e9:67:63:fb:c0:30:b2:29:c9:cd:22:7e:16:5c:78:03:
84:ae:02:0b:15:6a:5b:d5:80:70:9e:ca:6a:c6:02:1b:13:b0:
75:8f:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:29 2025 by rpki-client