Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
File: 81636c94-0d61-45b7-858e-afa997830908.roa (raw, json)
Hash identifier: lCCWLaWxFpFrVgUT1dkLBvD+j3YJuYZlrdB+MobY8JU=
Subject key identifier: 68:DD:7B:76:F0:C8:7F:3D:0D:9C:41:4F:F1:AC:31:50:4A:A9:06:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67CA118F543D1EB386465DDA592618BE83C1710A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
Signing time: Tue 07 Oct 2025 00:12:34 +0000
ROA not before: Tue 07 Oct 2025 00:12:34 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ca:11:8f:54:3d:1e:b3:86:46:5d:da:59:26:18:be:83:c1:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:12:34 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=42c2fd371d144aea23318789eeb12e97e3edb02b070b27a66949a42260353b07, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:f5:20:6a:87:4f:91:15:6d:72:bf:c7:1d:
18:5a:53:a8:62:b5:78:ff:b6:d6:d5:07:67:79:4a:
ed:90:bb:3d:7c:7f:1c:38:a9:61:94:eb:ab:46:40:
26:89:90:45:d5:67:49:fc:1a:28:31:59:ba:06:6b:
98:6f:e5:c8:56:df:3e:67:06:62:63:13:11:c4:ba:
21:cc:b0:2c:bb:76:c9:cb:41:b9:fc:2f:b6:da:02:
6c:5a:7d:1f:24:bb:28:c2:51:a4:e6:ba:ea:6e:1b:
47:d0:d2:86:28:c0:18:cc:b7:69:5c:dc:f0:bb:db:
60:3b:fb:06:62:a5:5a:52:49:e0:e3:59:52:64:ed:
ab:38:9f:7b:1d:4a:31:69:6d:22:cb:57:9f:b3:f5:
78:02:01:1a:09:b0:a1:eb:42:e8:f3:69:fe:48:58:
65:f4:05:e4:27:35:ab:7a:c6:0d:5e:fa:7f:fb:d0:
eb:91:9d:36:15:0b:2d:30:b4:74:ab:03:b8:a6:fd:
bf:98:32:f9:ec:4a:99:96:61:b0:3d:81:4a:1f:67:
20:33:15:ab:29:58:ed:08:3c:03:e6:86:ca:84:b0:
c8:89:0d:2f:e5:1f:79:53:f3:65:6a:e4:ff:49:10:
ce:e0:ca:a2:5c:fe:2e:1c:ea:6d:6e:4d:71:1b:3e:
aa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DD:7B:76:F0:C8:7F:3D:0D:9C:41:4F:F1:AC:31:50:4A:A9:06:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.2.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ce:3b:b8:33:7d:9f:95:4a:3c:86:8e:0c:bd:df:7c:2f:8e:
11:10:dc:5f:cf:84:2c:b4:67:7c:e5:c9:94:1e:d5:5e:2a:4a:
93:03:5a:40:e8:df:6a:c0:a8:2b:1f:c3:40:67:a9:51:ea:89:
ee:50:8b:51:06:5c:08:4b:ec:e4:7d:ff:43:e2:8d:d2:ce:f4:
a3:af:0f:03:69:dd:b8:ef:64:8f:e2:9f:eb:15:9e:ca:33:83:
a4:01:b7:1d:21:46:63:7b:ef:7b:bc:9e:5e:fb:a0:94:3a:01:
54:24:9f:80:ff:98:97:43:29:46:2b:5f:e0:0f:48:76:93:60:
d7:41:10:c8:4d:9f:87:32:bb:75:99:9c:43:cc:6a:04:8f:cb:
f0:57:ce:2b:80:ab:98:d9:5d:08:ea:8c:2f:2c:35:6e:6c:cc:
dd:4b:bf:5c:c8:71:4a:f8:6b:58:87:f7:11:35:de:15:14:f2:
f9:be:43:18:54:f3:79:f3:e3:c0:bf:94:9e:93:bb:c0:32:09:
26:42:a2:e2:eb:03:93:b1:a8:08:e7:a4:5b:32:b6:f6:41:f9:
29:27:83:aa:fb:8e:91:c1:ab:ca:bd:18:fe:8f:00:1e:97:b2:
a6:a4:05:63:7f:45:a5:9e:21:38:d0:a7:d4:af:17:85:4e:18:
7a:de:6e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:36:21 2025 by rpki-client