Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa
File: 948e4dbe-30d8-401a-a08a-9dd934e20639.roa (raw, json)
Hash identifier: IHXCttUYYFX3s7axZuFnaldJOq6f4q2jJNlSBt8doBA=
Subject key identifier: 41:8E:DF:0F:C7:98:4D:38:FE:FF:E5:96:F8:F8:79:39:EC:96:4A:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4FF446EC59C5AEC7EA80EB56015BCB4F5E13E348
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa
Signing time: Fri 17 Oct 2025 00:42:36 +0000
ROA not before: Fri 17 Oct 2025 00:42:36 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.184.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:f4:46:ec:59:c5:ae:c7:ea:80:eb:56:01:5b:cb:4f:5e:13:e3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:42:36 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=1a7a61f914b71639c29940e2410e494124ff168821c58fbab4837a824b3f429f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:11:44:dd:3c:c3:49:e0:7c:66:63:b0:f2:
bc:9d:28:eb:dd:44:2d:2d:72:b6:1c:14:71:84:40:
49:6c:9a:6b:21:d2:29:b4:9a:aa:3c:c0:27:92:7a:
2c:19:b1:49:87:1e:f7:b9:87:71:04:89:1c:aa:97:
61:24:47:7a:aa:4f:bb:3d:ed:64:81:e5:31:7f:28:
8d:c0:73:ea:9d:dc:37:87:ad:47:3b:99:da:d2:26:
9e:50:82:67:8d:4a:64:e3:df:e6:ac:10:2f:6e:93:
0a:41:6f:a2:1c:25:7a:bf:45:c3:9b:e1:e6:4a:fb:
04:d2:fd:70:fa:78:5d:a7:8e:07:a1:93:39:db:96:
d7:8c:51:fd:6b:84:a7:4c:53:04:65:a0:70:1f:a6:
8f:f0:84:39:69:8c:e7:9c:26:f9:cc:1f:a6:b1:5c:
40:09:c6:53:f4:15:94:9e:56:3e:15:5f:0f:b0:7b:
97:d9:64:79:78:ee:5e:cd:53:6c:da:27:d2:fc:94:
ff:76:be:8c:4e:78:8a:38:78:07:d1:48:77:75:68:
f4:0e:cb:1a:35:d6:cd:45:46:6f:05:0e:01:60:3c:
8f:a5:f9:e9:67:b4:bd:b6:4e:87:f1:0c:be:d7:f2:
04:f0:c0:94:b3:90:c7:e6:8f:8e:9e:47:7b:9d:77:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:DF:0F:C7:98:4D:38:FE:FF:E5:96:F8:F8:79:39:EC:96:4A:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/948e4dbe-30d8-401a-a08a-9dd934e20639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.184.0.0/13
Signature Algorithm: sha256WithRSAEncryption
00:73:44:f0:71:23:cb:c8:b9:97:a9:bc:93:44:56:a2:19:ad:
5a:85:9b:65:79:95:d2:66:a8:47:5d:db:af:65:03:ca:5a:7b:
42:49:cc:1d:08:91:82:1e:aa:89:fd:19:dc:97:d1:5b:5e:0d:
23:b3:e1:3c:53:a6:d0:c8:68:86:aa:4e:58:4a:88:b3:0d:fa:
e7:9c:87:6c:6f:b4:7f:12:7a:9e:31:8d:0b:0b:aa:c9:e4:94:
d8:52:0d:50:d2:3e:9d:01:86:e3:b0:b3:3b:36:d7:7b:aa:20:
05:89:ac:55:d1:69:ab:27:75:07:2c:fa:a1:6b:df:e7:29:a7:
3c:fc:ff:fa:01:f8:4a:dc:4b:21:53:d9:75:d2:49:6f:89:17:
c1:85:99:d3:4a:e0:7e:d4:9d:85:25:dc:78:ed:3e:8f:65:3b:
50:38:1c:36:7a:de:c3:d8:9c:f2:bd:4e:0e:30:3e:09:c6:fa:
a3:83:c8:df:28:91:e0:21:6b:43:da:8b:f7:48:f6:d6:eb:a0:
2c:2f:c6:4d:50:71:68:5d:db:e4:61:ae:24:47:bf:e7:34:81:
c6:09:03:33:6b:25:e5:31:01:1f:82:75:b9:30:e6:be:c5:03:
ad:e0:0b:05:44:25:d1:9e:1a:7e:a8:b2:39:6f:c7:00:31:ba:
a6:51:50:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:39 2025 by rpki-client