Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4227170-2265-45c8-950f-f4e81e32653b.roa
File: a4227170-2265-45c8-950f-f4e81e32653b.roa (raw, json)
Hash identifier: 9zPzHg/fZ9murbzGAOxtQ/PrAOboZlJzXf79nMDTUBE=
Subject key identifier: 6A:52:6B:E4:DA:37:A8:71:1D:56:E5:79:5D:64:73:92:40:AE:3A:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 315194E18A2A72802D912E3DCE10E3A31F7E7F9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4227170-2265-45c8-950f-f4e81e32653b.roa
Signing time: Fri 03 Oct 2025 00:42:57 +0000
ROA not before: Fri 03 Oct 2025 00:42:57 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:51:94:e1:8a:2a:72:80:2d:91:2e:3d:ce:10:e3:a3:1f:7e:7f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:42:57 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=245942d96ede54ecb3e9040a7a0b47be49f90bd89a0dd5c6023f4e863364136f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:1e:ee:54:3c:b7:31:ca:1f:ca:2b:24:3c:
52:9c:8e:53:14:c6:be:bf:17:3f:a5:55:2d:73:86:
87:7f:25:ef:12:dc:1e:6d:66:74:00:20:8f:77:42:
4f:c8:0f:2d:25:19:50:90:06:7e:0b:27:66:3c:77:
ab:58:1f:bb:a8:17:bf:f4:c0:10:50:d1:64:42:ee:
78:c8:c0:db:91:df:b3:f2:a3:59:cc:fd:dd:f6:68:
32:15:c6:fd:bf:1f:c1:b6:10:ed:2f:79:b0:08:a8:
e2:34:cb:ad:49:31:92:fc:e5:a3:ba:24:55:63:0b:
03:4f:1c:ae:3f:53:7e:4e:b8:63:c9:1c:d4:27:d3:
f7:4c:e3:79:33:4b:84:3a:be:7b:92:ff:e4:20:04:
46:6d:c8:33:48:c2:96:7d:16:ff:26:5b:b5:62:68:
eb:67:34:99:45:ea:c9:30:47:6f:ea:e1:20:14:cc:
5e:4b:6c:53:5a:3a:74:0e:c1:8f:7a:e4:7c:00:78:
e8:d0:07:9a:a8:17:ba:fc:af:6e:45:47:f3:19:cc:
95:58:6c:7e:6d:36:21:94:f9:9d:11:c2:9f:cf:d9:
01:64:18:68:26:5d:b0:9a:1f:83:7a:16:08:8c:b2:
b2:52:52:c8:b4:9a:7d:5f:75:b8:23:d2:68:c3:2a:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:6B:E4:DA:37:A8:71:1D:56:E5:79:5D:64:73:92:40:AE:3A:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4227170-2265-45c8-950f-f4e81e32653b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:57:85:34:92:7c:a0:bf:c7:b0:1e:b6:f5:3b:f8:54:3f:93:
e0:02:3e:48:f3:9d:1a:fd:53:44:6e:a1:c0:c5:96:25:47:0c:
96:85:0b:b0:36:7f:50:ed:4a:13:5f:dd:a8:51:e3:91:b2:f0:
64:29:08:f4:13:d7:18:3b:df:a5:ca:8c:ec:11:0f:51:5e:4f:
12:47:b4:a4:0a:00:2e:49:28:1a:7b:0b:d7:22:29:50:3b:d1:
1a:45:a4:1d:72:16:68:c7:3d:e5:d2:72:d2:5c:41:9a:bc:2e:
83:7f:b0:f4:54:13:de:aa:1b:ff:78:ea:e1:6a:92:69:c9:3e:
f6:a6:3a:e5:f4:4a:0e:8a:f8:ac:be:0c:84:bb:6f:38:7c:a6:
0d:82:11:dd:fa:6d:93:98:3c:db:5b:63:07:eb:46:cf:84:c9:
d2:45:33:70:61:b7:01:ef:e6:f1:fe:f4:b1:5c:e5:20:6c:b6:
d9:31:90:1d:77:6f:a1:24:ed:33:71:22:db:f0:28:c1:28:49:
d7:49:d3:19:35:0c:30:8a:7f:25:bc:05:96:60:0b:db:aa:0f:
1a:14:45:43:ba:1f:39:25:0b:e7:28:6b:a9:ac:06:eb:ab:71:
bc:fb:0c:d2:42:65:5f:ad:de:f9:06:33:71:ec:35:bd:ac:d8:
37:6e:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:27 2025 by rpki-client