Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
File: 88f2ff63-7659-498d-b994-ed526db12b18.roa (raw, json)
Hash identifier: aPUnmnLMp5GpKoG174dgnxQP5kjZk9p3ycYbM61nIrU=
Subject key identifier: 4B:3E:A6:51:F1:69:A5:9B:9E:09:E5:7A:E3:6E:E1:93:F0:56:6F:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42F72AAF198AD683E3B4268A55D645964E6EBAF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
Signing time: Fri 03 Oct 2025 00:41:39 +0000
ROA not before: Fri 03 Oct 2025 00:41:39 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f7:2a:af:19:8a:d6:83:e3:b4:26:8a:55:d6:45:96:4e:6e:ba:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:41:39 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=60eab283e4b15ad5e38a97a843d59d992aa5ec56af8846c4c7613a9df6d28695, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:b8:d4:02:02:f0:85:09:90:b1:78:99:9e:
f4:06:ef:b0:d0:a2:a3:30:2d:d3:84:e9:bd:54:18:
94:ec:ed:e3:3f:cd:2d:94:5c:3f:d2:65:a7:21:09:
04:36:2d:d7:31:3f:4b:7c:c9:64:0e:a9:4a:c8:24:
ad:95:2b:11:6d:7f:e9:6e:5a:a7:9c:9a:3c:e0:14:
26:6d:be:17:11:c1:39:62:3b:6e:dd:e1:ac:0a:95:
d4:3b:8f:b6:9d:cd:31:a6:c4:1c:33:29:cc:1f:86:
8a:8f:e4:41:86:bd:72:0f:e4:65:ed:17:89:32:2d:
10:40:b8:1e:b5:9e:61:e1:9e:f9:4f:6d:4f:7e:77:
25:b0:81:66:28:b1:88:69:18:54:c3:3f:65:84:23:
86:c8:e0:61:9c:cc:72:0c:88:34:49:d8:fc:4f:85:
b6:f4:01:06:2a:de:40:80:7f:0c:8a:c4:62:c9:a8:
5d:58:8e:ed:2b:a9:82:f9:a0:f6:d4:e4:84:a0:3c:
d9:94:4d:71:13:1c:f1:9f:b2:0c:fc:20:bd:0a:18:
54:4d:a6:da:9c:19:98:f0:13:dc:c7:e6:5d:a4:b0:
33:ef:52:7c:85:88:5e:ec:30:03:af:b4:99:4d:4d:
54:81:6b:f2:53:86:d1:70:bd:0b:98:ba:02:19:2d:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:A6:51:F1:69:A5:9B:9E:09:E5:7A:E3:6E:E1:93:F0:56:6F:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88f2ff63-7659-498d-b994-ed526db12b18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
Signature Algorithm: sha256WithRSAEncryption
d1:40:0f:f5:65:5d:c7:4f:c2:22:1a:1d:92:df:6c:eb:79:45:
31:71:85:b9:ef:35:85:eb:ef:97:04:fe:3d:6a:1c:83:23:0e:
8d:35:be:14:8d:fc:a8:4c:57:99:18:94:d1:c7:5a:bd:21:13:
87:a6:b9:95:c7:d5:40:c3:e6:47:29:88:42:29:80:2d:a0:6b:
f9:9d:37:52:d8:a9:f2:b0:08:db:15:00:4c:a6:b5:77:e0:b1:
ef:df:2d:52:a3:ea:3e:4b:81:3f:59:3b:17:05:1b:94:30:67:
52:9c:da:d5:18:6d:d9:99:05:90:92:72:7a:f8:32:03:3f:e5:
5d:d2:9f:9a:d0:f3:b6:df:00:c8:ab:25:61:65:b7:9f:3d:0f:
44:0b:11:d1:f5:0a:79:3c:3a:ef:f6:93:53:96:bb:0d:b6:8c:
f3:a4:f7:0c:74:bc:b3:e8:ae:af:f0:75:24:66:d8:63:2b:09:
e2:91:fd:6e:f9:4c:8b:97:24:73:22:1a:10:f5:fb:3b:3f:3f:
a3:c5:e7:9a:47:a6:13:9c:19:d0:cb:fd:58:91:52:12:c0:a1:
e1:a7:0b:1b:84:83:ac:57:09:53:12:a8:3a:c2:cf:4d:12:65:
23:35:3c:b3:ba:39:90:3d:ed:e2:92:ee:8f:15:96:4d:ce:a6:
c2:23:c8:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQvcqrxmK1oPjtCaKVdZFlk5uuvIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MTM5WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MGVhYjI4M2U0YjE1YWQ1ZTM4YTk3YTg0M2Q1OWQ5OTJh
YTVlYzU2YWY4ODQ2YzRjNzYxM2E5ZGY2ZDI4Njk1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdxLjUAgLwhQmQsXiZnvQG77DQoqMwLdOE6b1UGJTs7eM/
zS2UXD/SZachCQQ2LdcxP0t8yWQOqUrIJK2VKxFtf+luWqecmjzgFCZtvhcRwTli
O27d4awKldQ7j7adzTGmxBwzKcwfhoqP5EGGvXIP5GXtF4kyLRBAuB61nmHhnvlP
bU9+dyWwgWYosYhpGFTDP2WEI4bI4GGczHIMiDRJ2PxPhbb0AQYq3kCAfwyKxGLJ
qF1Yju0rqYL5oPbU5ISgPNmUTXETHPGfsgz8IL0KGFRNptqcGZjwE9zH5l2ksDPv
UnyFiF7sMAOvtJlNTVSBa/JThtFwvQuYugIZLXBPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSz6mUfFppZueCeV6427hk/BWb2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4ZjJmZjYzLTc2NTktNDk4ZC1iOTk0LWVkNTI2ZGIxMmIxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANM36gwDQYJKoZIhvcNAQELBQADggEBANFAD/VlXcdPwiIaHZLfbOt5RTFx
hbnvNYXr75cE/j1qHIMjDo01vhSN/KhMV5kYlNHHWr0hE4emuZXH1UDD5kcpiEIp
gC2ga/mdN1LYqfKwCNsVAEymtXfgse/fLVKj6j5LgT9ZOxcFG5QwZ1Kc2tUYbdmZ
BZCScnr4MgM/5V3Sn5rQ87bfAMirJWFlt589D0QLEdH1Cnk8Ou/2k1OWuw22jPOk
9wx0vLPorq/wdSRm2GMrCeKR/W75TIuXJHMiGhD1+zs/P6PF55pHphOcGdDL/ViR
UhLAoeGnCxuEg6xXCVMSqDrCz00SZSM1PLO6OZA97eKS7o8Vlk3OpsIjyMM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:18 2025 by rpki-client