Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ff2feae-89d7-4a29-8db6-044c0900186d.roa
File: 9ff2feae-89d7-4a29-8db6-044c0900186d.roa (raw, json)
Hash identifier: 9J81nZJLswrGbygkmgqw8Ri05WsULa451a9QzcGaq+0=
Subject key identifier: 79:CB:88:FF:89:8A:75:77:B5:F3:03:9A:16:6D:F3:40:5A:85:2A:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C1E618C9AFE8114E53ACE645995A6FFD10EF99F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ff2feae-89d7-4a29-8db6-044c0900186d.roa
Signing time: Mon 13 Oct 2025 15:52:37 +0000
ROA not before: Mon 13 Oct 2025 15:52:37 +0000
ROA not after: Mon 17 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1e:61:8c:9a:fe:81:14:e5:3a:ce:64:59:95:a6:ff:d1:0e:f9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:52:37 2025 GMT
Not After : Nov 17 23:59:59 2025 GMT
Subject: serialNumber=34ed019bf029e1591495f35f8f61bfac0e02febe1c42e2f8147548a95455ffa3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ae:58:7d:67:94:9a:73:a0:06:a7:58:7f:9f:
7e:57:16:8c:2a:19:78:97:aa:7c:16:3f:42:4d:45:
aa:68:7b:f2:99:59:df:a2:92:09:af:1b:58:36:78:
6b:58:cc:e7:de:3f:44:78:78:4f:44:8a:89:54:ff:
b0:0e:6a:cd:88:ce:1c:46:8b:33:aa:4c:e6:fe:86:
40:41:db:e4:c9:40:bf:cc:e8:3a:07:fc:49:bd:c8:
2c:78:a9:3c:8e:e2:d9:34:5b:f0:87:89:28:e4:d2:
15:fb:82:22:1d:13:43:d0:54:fd:25:72:32:4a:fe:
1a:43:7d:40:9f:91:91:59:f8:c3:13:a6:76:bf:f9:
65:91:18:78:8c:c5:f5:45:97:b3:37:91:1e:e0:21:
5e:f1:37:9c:70:92:7d:cc:65:c4:30:12:96:ae:3d:
f5:6b:10:9a:e2:ce:07:79:64:6f:a6:2d:7b:66:ce:
2c:be:a6:09:ce:d2:23:07:73:43:bb:d6:ed:97:47:
a7:67:a3:f6:5d:99:60:1d:97:bd:35:3c:8e:9c:bb:
ff:94:c3:41:6a:77:06:a1:71:14:86:35:f2:c2:4c:
d9:cc:26:c7:34:8f:0a:56:f8:b0:1b:5a:86:49:02:
df:ef:a6:7a:f3:50:d4:84:c8:86:43:33:b9:52:7c:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CB:88:FF:89:8A:75:77:B5:F3:03:9A:16:6D:F3:40:5A:85:2A:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ff2feae-89d7-4a29-8db6-044c0900186d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.10.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:97:64:ed:5b:fe:fa:33:09:cc:17:27:ca:ab:66:16:b2:2f:
a2:6e:64:6f:52:86:00:9c:58:07:c0:9c:f8:d9:17:cd:bf:77:
92:71:a1:48:1a:0c:bb:46:99:37:3a:16:73:be:38:d7:51:ed:
56:e0:02:e3:c2:a8:59:46:ff:f8:ea:bb:ff:19:6d:14:71:58:
26:a4:3c:07:b8:71:92:90:31:af:a8:d4:60:1a:77:ad:c9:17:
0f:a0:96:d7:f6:e6:5f:66:6c:6f:45:50:35:26:ec:6d:4d:b2:
22:ce:52:51:70:a0:e8:30:f1:47:c8:95:12:c9:73:39:d5:c9:
77:1f:4b:10:29:a2:17:bc:8c:d4:25:17:02:bc:a6:a3:b9:5b:
39:ac:34:36:55:c0:c6:a3:4d:04:5a:36:27:44:02:02:8a:c1:
bd:35:24:90:80:a5:7c:3a:c6:02:a1:b7:d4:e9:65:a2:c3:ad:
f7:c6:a4:a2:30:2f:13:65:5f:2a:dc:93:85:76:5f:77:23:49:
3d:93:a9:57:c1:6a:74:6a:6d:a8:18:83:72:c3:0b:bd:b9:2d:
38:8c:9a:47:a3:bd:f5:94:55:2f:24:bb:d0:65:e4:91:81:94:
11:39:b9:05:92:f7:a5:6b:bd:74:90:12:be:93:07:12:64:e9:
5d:a7:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:14:07 2025 by rpki-client