Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
File: 8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa (raw, json)
Hash identifier: hoy/PUCVFDu4rOd1uKMef9yzVGO/orGn2e9ghxjLKhU=
Subject key identifier: 81:5D:4E:08:FA:C4:03:E5:73:46:42:4D:ED:C3:A5:F8:0C:B7:9A:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 524632B6DF05141AA30FB974FEC36886D18D6A9B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
Signing time: Fri 10 Oct 2025 00:21:36 +0000
ROA not before: Fri 10 Oct 2025 00:21:36 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 98.80.0.0/13 maxlen: 13
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:46:32:b6:df:05:14:1a:a3:0f:b9:74:fe:c3:68:86:d1:8d:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 00:21:36 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=6c3ace3e875e105ba8c0f6c31e23d72066d45bcc923f89d7cac21dcdce2d8a46, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:2e:8b:83:8e:35:5c:df:85:33:91:9b:1b:
79:68:21:c4:db:35:63:0c:3b:63:c8:6d:cc:35:03:
d1:e5:cf:71:c4:e6:55:e5:89:ec:be:7f:68:38:e3:
de:b0:06:4d:cd:97:6e:c6:3d:8a:bf:e2:6a:9d:b7:
ef:be:5d:2d:06:f1:e8:4a:f2:32:0f:45:fc:50:72:
52:fb:27:0d:b2:9b:28:24:da:24:d8:07:4f:cc:f5:
0a:8a:d8:69:6a:54:88:87:53:90:2f:23:11:e7:ed:
22:f2:ae:f6:82:08:a6:d3:9c:78:9a:6d:30:bd:4b:
a2:09:64:6b:6f:92:70:d8:14:77:9d:a8:86:95:4a:
f0:68:d0:72:10:09:98:7d:fe:2b:fd:a6:11:8c:d8:
bf:7b:39:a3:da:c0:13:bc:a2:69:78:c6:02:5e:ce:
de:d9:aa:8d:f9:43:a5:a8:0b:fb:49:5b:98:b6:eb:
cb:ea:f6:ff:ec:6d:6c:be:56:4d:b5:d2:5e:6e:46:
4e:e2:0a:e4:3c:ff:c9:02:fd:4f:15:79:a0:0c:b0:
10:6c:fc:97:8f:dc:d9:56:b9:3e:93:20:62:a5:79:
42:32:89:92:f6:eb:90:8e:71:c8:49:c2:51:d7:7c:
2c:77:8f:3a:8a:56:c4:1f:c8:99:d5:e2:44:26:28:
ae:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5D:4E:08:FA:C4:03:E5:73:46:42:4D:ED:C3:A5:F8:0C:B7:9A:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bcfcc4f-ad4c-4028-bfdb-ad205f7cb2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.80.0.0/13
Signature Algorithm: sha256WithRSAEncryption
d5:94:5d:e6:e1:00:71:c0:a7:05:d5:02:45:3e:34:1b:49:48:
5b:b0:0b:a4:31:9a:38:ca:c9:80:4c:a8:a4:71:db:c3:98:77:
cb:81:76:86:66:0f:df:9e:34:44:f1:6b:ea:20:97:ac:83:5a:
f6:85:8f:d0:0c:36:11:bb:37:5a:59:4c:92:cc:87:01:6f:b7:
3f:2c:45:f4:91:36:1f:a8:b1:c3:bf:ec:4c:d1:37:22:38:0d:
ea:b4:fc:36:64:4e:5a:e7:bc:dc:1b:a8:39:38:3b:06:76:1c:
0c:a5:ad:9d:a1:2f:c6:c1:04:c1:a3:dc:6d:6e:cf:79:4c:34:
d6:1c:21:b4:6a:7c:16:8a:cf:f5:ae:17:13:a6:33:c8:34:df:
40:ce:88:5d:0c:3f:a3:f2:7c:c2:5d:af:5e:45:3c:af:51:c3:
d4:d7:72:af:7a:85:ec:0f:a6:59:f0:20:ac:c8:a6:8f:6c:5a:
87:97:e7:ee:55:9d:bd:93:ef:81:61:2b:d3:f6:c4:f4:29:8e:
e2:ec:a9:0c:11:d6:45:59:cb:60:be:c1:e1:21:32:d4:29:28:
d2:b4:5c:3d:d1:a1:b1:53:f9:f0:28:2e:90:f5:cf:fd:90:27:
48:46:ef:d1:b8:00:54:24:3e:89:74:41:19:08:b9:4c:35:90:
9e:78:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:27 2025 by rpki-client