Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
File: ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa (raw, json)
Hash identifier: MuOeiWddTFUsehV0TUTSQCYpn/k0dZVHa+aLWXuuIXc=
Subject key identifier: 0B:D7:EE:30:C9:F4:03:77:C0:79:CD:76:BC:2B:EA:C0:8F:F2:A8:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2898E00A0F483AE3AB96754ECA624231B390183C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
Signing time: Tue 30 Sep 2025 00:23:05 +0000
ROA not before: Tue 30 Sep 2025 00:23:05 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 161.14.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:98:e0:0a:0f:48:3a:e3:ab:96:75:4e:ca:62:42:31:b3:90:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:23:05 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=1e102a699a9c4c994bffffc2c05bb19eea8d3219765a8cbcdb310ff23fe68f30, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:45:c4:ad:ef:13:5f:d9:6b:69:b5:94:3f:
19:ec:d1:55:0c:1c:f5:be:2b:e2:c7:f2:e7:3b:7e:
fb:4f:d8:51:ac:c7:82:e4:8a:f2:d6:98:69:ac:63:
07:dd:74:e1:3f:8c:c0:37:0a:1b:9e:42:82:92:3c:
2e:88:c8:d1:18:07:99:5d:d7:53:d2:7b:0e:9e:de:
5c:c5:a0:a1:71:7e:0b:09:52:15:ff:f1:bf:68:9a:
ba:34:fd:95:6b:a6:60:6f:0c:de:f5:75:77:60:8d:
41:62:e0:92:ef:6f:66:8a:de:2f:77:10:01:eb:6b:
02:f9:e8:2b:40:92:08:e2:5d:a4:bd:e2:5a:ae:ed:
a2:c7:64:1a:ed:17:48:61:bc:7b:2a:3b:3f:3a:60:
35:c1:b6:20:44:4a:a5:80:0c:85:05:83:f5:a2:53:
63:34:87:60:3f:b9:5c:56:28:84:90:a1:e6:aa:73:
8f:3b:2f:de:4f:c5:0a:ed:f5:f3:f0:21:54:a1:53:
69:e1:ee:16:b9:d6:d1:c5:df:18:1a:46:da:6c:c8:
6b:3f:c1:78:f0:d4:ab:92:aa:85:a0:93:ae:be:95:
44:8a:04:30:96:7b:29:22:a6:99:12:5e:61:a0:72:
d4:c0:7e:3c:0e:bd:2f:a3:61:e6:19:c9:cc:63:05:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D7:EE:30:C9:F4:03:77:C0:79:CD:76:BC:2B:EA:C0:8F:F2:A8:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca0e9264-bbd8-406b-9380-6af47bf1dd8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.14.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:3a:d1:dd:6d:50:ca:6d:a3:02:4b:b4:99:7a:7f:0f:4c:20:
24:90:f3:40:ff:64:72:8e:4d:9d:f4:df:d6:e8:18:ad:ea:21:
5d:46:1a:68:69:1c:e5:94:66:93:36:f0:57:61:c7:39:59:11:
85:d4:01:55:3e:2b:8f:fb:0a:b9:d7:4b:24:1c:26:44:d2:b5:
db:05:67:f2:1a:cc:cd:2b:0f:00:18:85:29:f8:c5:2b:4f:4c:
26:c1:f7:74:bb:f3:f9:e2:5e:a2:01:1c:10:38:8f:46:b8:6d:
55:b4:95:d5:ee:61:02:91:e6:3e:9b:34:c8:a5:f0:d3:f2:4b:
18:4f:08:3b:7b:5a:ee:08:37:a6:60:b5:b9:2f:8c:f4:65:c1:
69:98:67:21:f1:fc:ae:49:94:b7:d3:85:4f:55:51:89:a1:8f:
11:45:58:eb:da:8a:6a:90:cf:32:05:73:01:ef:e9:b2:35:45:
83:bf:88:d7:82:69:b9:d7:e1:e9:e1:78:72:76:51:2b:46:ba:
21:84:89:9f:bc:16:0c:b0:ac:3f:e7:a8:41:bb:12:00:2b:96:
a1:df:63:61:0c:43:65:3b:cf:63:b2:17:b6:eb:8d:d8:ec:5c:
2b:ad:e4:93:a8:96:fe:03:cc:38:7d:58:a2:e8:3c:01:d4:41:
b2:9c:11:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:51:11 2025 by rpki-client