Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a2c900-c1dc-480d-be38-f514a130a52a.roa
File: c6a2c900-c1dc-480d-be38-f514a130a52a.roa (raw, json)
Hash identifier: TLIBep6F8DbFIV2e3HdFvIsUuLNIlCaJmBZyjqx0Z4k=
Subject key identifier: 07:90:8A:E1:8B:4A:F8:BC:28:23:E2:28:E3:5A:CD:B1:06:16:6A:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E044059E27C5B790AE5A290D644FF519BCB695D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a2c900-c1dc-480d-be38-f514a130a52a.roa
Signing time: Fri 17 Oct 2025 00:40:05 +0000
ROA not before: Fri 17 Oct 2025 00:40:05 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.239.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:04:40:59:e2:7c:5b:79:0a:e5:a2:90:d6:44:ff:51:9b:cb:69:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:40:05 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=25926deee2c7933f1f189b01d965d37e23830314635c89ca4d93f1678d726dba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:87:3b:3d:f7:c2:ec:01:2c:4e:01:5b:0d:
82:eb:b9:a5:a3:bc:47:f6:c6:44:5f:94:fb:8f:23:
79:58:70:bf:77:91:2e:76:81:89:07:72:ee:c7:05:
aa:3f:00:27:be:59:85:3a:33:0c:e2:c3:3b:b4:c3:
a0:b2:a5:66:14:4a:a1:79:3c:67:11:06:0c:39:81:
fe:70:f4:1f:30:05:a8:ec:8b:cb:8e:c2:4c:31:a7:
fa:76:4c:7b:dc:83:4b:6d:2f:c5:6b:8e:e2:6b:c8:
cb:04:eb:3e:16:eb:d6:1a:9e:75:3c:8b:d0:75:b4:
2a:67:59:6f:37:67:2d:4f:3d:5a:8f:10:87:be:47:
82:b1:e7:ae:bb:09:19:bc:b9:7f:5b:34:b5:19:03:
52:45:1b:a3:31:e4:51:8b:6b:7f:be:cb:fa:29:22:
18:b4:0c:43:95:49:54:e5:ab:88:54:5c:f9:85:ea:
4e:c0:9a:6d:34:08:94:6f:27:51:8e:82:12:8d:f5:
83:a5:0d:02:ed:06:0f:3c:17:5f:5b:cc:70:25:87:
91:49:3e:75:4b:b8:29:f3:fe:d0:81:b6:26:0f:53:
1f:2a:0c:6e:22:59:61:8d:ba:d6:63:cf:6e:4d:48:
26:d9:08:99:b9:a2:09:21:b4:55:33:76:8f:d5:cb:
12:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:90:8A:E1:8B:4A:F8:BC:28:23:E2:28:E3:5A:CD:B1:06:16:6A:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6a2c900-c1dc-480d-be38-f514a130a52a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.239.8.0/22
Signature Algorithm: sha256WithRSAEncryption
49:1a:dc:2b:c9:14:79:6e:71:3a:ac:bb:e7:cd:42:8e:b7:4c:
ef:a0:13:fa:32:26:2e:d8:63:6a:54:d5:1f:98:e0:1d:1c:9e:
7a:2c:d1:37:11:d0:be:a0:2a:f6:3e:bb:ab:c1:6e:a7:ec:39:
3a:e3:5b:f5:cd:96:d1:70:5a:49:b1:c1:0e:e1:43:a9:b2:f8:
f5:4b:14:6f:3d:3b:49:b5:5e:69:0b:14:a2:1b:23:a0:f3:09:
54:84:0c:cc:0d:eb:ef:08:7a:5f:ff:9c:47:e1:50:01:33:81:
30:3c:80:6b:49:65:9c:1d:b7:50:c9:cd:ef:b0:e4:f0:ef:5b:
c1:b4:c6:6a:12:23:5f:48:72:a5:e1:d1:c4:64:fa:c2:b5:4f:
87:3c:9c:48:f2:3a:7e:9f:d4:58:f9:3b:d0:94:4d:9d:a1:50:
4b:d7:47:ac:7b:76:44:38:c4:82:5c:4f:26:d7:02:1d:e6:9b:
83:4a:58:9f:55:8a:ff:25:17:8c:0f:c3:ed:12:fc:2a:be:42:
84:a2:51:57:62:49:79:ea:5d:5c:17:11:9e:82:8c:da:ad:ea:
23:72:bc:d6:6f:84:d2:47:a2:ed:09:06:01:83:6f:e3:bf:26:
14:f7:b0:9c:c0:ee:bb:b1:d3:d5:2e:be:dc:e9:2a:8e:7b:a8:
c2:82:f8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:52 2025 by rpki-client