Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa
File: ae07341a-9b16-4a51-8c28-769fa383023e.roa (raw, json)
Hash identifier: RVQ4UI77V/pYva3gpQiEU5MQ1nJhxBdLhs1YsD/cem8=
Subject key identifier: CA:A4:FF:A3:7A:88:35:F3:9B:89:AB:D9:2B:37:08:AA:CE:C9:FD:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3929594A05179C3D98AA4889881650FAD4EE1C07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa
Signing time: Fri 17 Oct 2025 00:39:17 +0000
ROA not before: Fri 17 Oct 2025 00:39:17 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.23.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:29:59:4a:05:17:9c:3d:98:aa:48:89:88:16:50:fa:d4:ee:1c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:39:17 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=1f644079db1c61a4025feafcdfeaf1085ed703624b9cd1d60edde038f29b0222, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:a9:1e:82:49:e1:93:95:f0:ae:96:54:40:
64:e0:f8:ec:eb:48:0a:97:a4:b4:b5:0c:49:c7:fd:
86:b1:e5:62:df:0c:3d:e0:57:40:95:1b:ae:8c:d8:
fc:0c:33:4d:e3:af:80:ba:e5:29:9a:cc:98:16:90:
92:42:d2:a4:04:79:c5:78:fe:97:b6:6a:2e:1b:b6:
44:ed:a0:1d:c7:3e:c1:df:b0:a4:cb:71:af:ca:15:
a2:91:08:ba:aa:51:6a:87:4d:1f:60:cd:cd:e0:5e:
e1:33:45:09:57:07:8f:20:0b:36:f2:25:ec:81:79:
ef:b2:83:cd:b6:65:85:2d:7e:b1:06:10:fd:c4:a8:
a8:c1:33:6f:99:7b:82:21:b8:5e:35:c5:e3:bc:c0:
de:b3:45:ec:0c:63:73:2c:0c:4e:cc:46:3c:e9:80:
cb:f3:9e:88:6f:ae:03:9f:94:03:a9:07:eb:72:88:
24:ee:5b:26:c5:78:15:20:1e:fd:dc:79:af:9d:9c:
d7:bf:42:f6:45:ec:cb:53:30:f6:e7:17:bd:63:b4:
1c:dc:06:4c:76:a4:e7:8c:e0:66:52:4a:2e:cd:58:
92:07:48:2c:ac:ca:e2:13:9b:26:5f:b4:19:ee:de:
fe:4a:88:d4:16:05:d9:17:24:8f:7c:27:44:17:94:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A4:FF:A3:7A:88:35:F3:9B:89:AB:D9:2B:37:08:AA:CE:C9:FD:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae07341a-9b16-4a51-8c28-769fa383023e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.23.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:d3:62:be:3d:11:56:4e:ec:4a:54:8f:a7:b1:28:ca:b5:5c:
70:ac:3e:8a:4d:ae:d0:45:87:dc:9e:12:6b:09:2c:63:53:f9:
68:c5:6c:3e:b0:42:0e:f9:c8:77:5c:19:19:49:86:99:6e:cb:
f2:fd:c1:9a:db:33:c3:85:c1:a9:d9:bf:c5:e0:4d:72:ba:e8:
cd:ca:86:d4:c2:fb:b5:ed:50:9c:1f:0d:c6:bf:46:cc:3f:0d:
dc:df:c2:0d:dc:eb:1b:37:b8:bb:e8:d1:75:78:cc:14:9f:ad:
61:75:6b:0e:62:5d:51:b9:48:b1:fb:1d:d1:dd:5f:4f:96:ee:
05:ee:82:f2:50:bb:79:dd:6d:e5:9d:d5:f8:28:6a:a8:b4:db:
53:d7:d8:ce:55:7b:50:62:cd:1b:ca:cf:d1:4f:0a:88:2f:ab:
d8:c5:8c:ac:38:cb:08:bc:4f:4d:e8:b0:35:c7:ee:44:4c:38:
28:10:7e:45:52:82:27:e4:d1:a3:09:96:d1:d9:ac:44:f9:e4:
77:db:3b:a0:66:e6:46:70:62:65:02:bf:eb:6b:83:f1:72:5e:
a4:c2:96:61:eb:85:a2:fa:65:b5:48:2b:c0:02:5f:f1:ac:93:
91:9d:79:24:cc:bb:37:6e:8f:11:f7:62:88:8c:dd:a5:5c:97:
86:15:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:27 2025 by rpki-client