Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8aab46c-bd5c-48b1-add7-6f55ffc2ef94.roa
File: c8aab46c-bd5c-48b1-add7-6f55ffc2ef94.roa (raw, json)
Hash identifier: 9hu2/ErKcv0xpR5wgHuc2h6DtXuL/XgbrW6cAbUCNUo=
Subject key identifier: C6:0D:0E:EF:8D:D1:D8:60:55:BC:DB:93:2C:F5:C3:7F:39:EA:EB:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4001628ECC98A21539B848E8CCA0F7FCBAA97656
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8aab46c-bd5c-48b1-add7-6f55ffc2ef94.roa
Signing time: Sat 18 Oct 2025 01:20:04 +0000
ROA not before: Sat 18 Oct 2025 01:20:04 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 204.236.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:01:62:8e:cc:98:a2:15:39:b8:48:e8:cc:a0:f7:fc:ba:a9:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:20:04 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4188e7aa99d9a132d6335456a3a91d571b16b725b914572b7f512cb5d0b5e12a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:c7:b4:41:e0:59:3f:cc:85:fe:2b:af:d5:
0d:29:9d:43:c8:e3:f4:5d:04:42:23:cc:82:0e:25:
43:ed:7b:5c:0e:c5:a6:b6:5c:8f:b0:d8:7d:46:1a:
b4:38:e6:19:37:be:de:98:44:20:14:95:0b:c4:8f:
67:e2:da:58:94:2d:56:1b:44:7a:b3:f0:a3:6f:a1:
27:43:ce:ea:b4:ee:a2:bf:dd:45:b0:6e:95:36:93:
70:04:83:13:f5:a1:a6:62:7d:13:95:2b:a2:f4:32:
f5:86:af:2f:4f:86:fb:a9:d4:87:04:f4:5f:07:66:
77:c1:e3:12:46:70:c6:94:c3:e1:ba:b9:00:59:0d:
68:2e:8a:fa:e2:2e:79:50:5a:ef:92:0c:84:8c:96:
76:38:4f:02:39:b6:6d:6b:ff:be:31:e2:12:a9:28:
ce:eb:32:9d:bb:b4:ef:ee:69:17:bc:0d:45:5e:7f:
74:3b:60:3f:4e:44:a5:36:62:b2:fa:b6:c6:cb:03:
04:3d:86:21:af:bc:dd:98:31:d6:58:d6:86:04:3a:
35:80:e7:9c:3e:3a:8e:69:66:ed:15:0d:bb:1b:1b:
60:27:9b:9e:c3:44:8a:ec:b1:dd:e9:cb:75:55:5e:
ff:d2:b6:38:5e:3d:18:f0:04:9b:e5:b1:c6:a8:4c:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0D:0E:EF:8D:D1:D8:60:55:BC:DB:93:2C:F5:C3:7F:39:EA:EB:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8aab46c-bd5c-48b1-add7-6f55ffc2ef94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.224.0/19
Signature Algorithm: sha256WithRSAEncryption
72:0a:71:e4:66:b3:91:7e:ca:17:31:fb:cb:4d:e9:69:50:e8:
94:77:63:e0:32:69:68:a2:88:4f:a5:10:20:05:f4:c6:aa:8a:
b0:27:6a:1d:f7:98:d9:47:ac:1b:67:cb:26:2c:b5:c3:85:9d:
7c:2e:ad:96:e0:c6:33:11:08:41:23:bf:18:e7:58:44:c0:f9:
1c:a1:91:2d:a5:52:a3:1b:05:95:55:7f:8e:d7:94:91:5f:f9:
3c:33:42:fa:5b:ad:ba:cd:49:ae:a1:32:c0:f9:b1:90:eb:9f:
79:17:1d:81:9f:31:99:cd:30:49:7c:f6:3d:d8:f0:7a:ba:9d:
6d:8a:71:6e:4f:15:85:d1:fe:3c:e5:b8:b7:00:d8:15:b9:f9:
ff:e1:d0:86:62:bf:da:f0:08:02:0f:16:62:35:95:b3:bc:d3:
9d:92:fe:7a:22:78:48:98:34:fa:54:de:c5:87:2b:b5:73:18:
c1:13:e9:c9:08:3f:85:bc:49:0b:df:d8:02:92:59:11:36:4e:
de:ad:c0:85:d2:53:a7:6e:e4:8e:f4:f5:09:43:6a:5c:b9:a7:
65:d7:19:88:a7:3d:a6:4c:fc:94:3c:22:b9:27:aa:3a:1d:d9:
8d:2a:6c:de:70:67:45:3e:34:9e:c9:fb:d2:30:79:2a:b5:f8:
ba:7a:57:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:22 2025 by rpki-client