Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
File: ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa (raw, json)
Hash identifier: 5jex9oiJuHjFvUdqQwrY9LGGacJ3/0f2ZtnPpN7U0aM=
Subject key identifier: 64:89:18:71:61:AE:30:20:95:1A:BB:C7:3E:40:AD:9E:ED:A6:06:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C98B0AD769C1D6D3AD2805C86D89D334B9280EE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
Signing time: Sat 18 Oct 2025 02:41:40 +0000
ROA not before: Sat 18 Oct 2025 02:41:40 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 40.176.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:98:b0:ad:76:9c:1d:6d:3a:d2:80:5c:86:d8:9d:33:4b:92:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:41:40 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=d12ea8cd4fb22bd3fc4ea08a4b77cae78c9ccb40ed8e1afe43d37c4f54777129, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2e:f7:5e:88:d9:93:8b:3b:2e:0b:52:72:1c:
31:fd:83:63:03:ec:86:c6:c3:c0:30:b9:bf:df:87:
df:6c:c3:6f:f2:2f:dd:0d:5a:69:95:9f:99:8f:e1:
5f:39:12:aa:42:e6:fc:27:4c:57:b4:fa:58:70:aa:
b2:7a:20:38:7e:17:17:dd:84:cf:a1:05:99:c0:8f:
85:e3:88:5d:be:0b:cd:3a:d8:d0:d1:68:8d:12:ae:
4c:60:a1:c8:ae:20:15:16:1f:e9:d9:d4:08:87:86:
91:4d:98:6f:ba:96:44:5c:a9:fb:b6:5a:0f:15:2b:
f4:e9:5b:93:51:1b:c7:7d:ec:f7:e2:f2:9c:2f:cf:
34:2a:a0:66:da:15:01:e6:e1:46:c5:33:6d:ec:52:
e4:cd:90:15:b7:06:00:5e:c8:af:fe:7e:e5:a8:34:
0b:6d:ee:bc:51:9d:51:04:ad:df:7a:eb:9d:07:13:
bf:e2:cf:db:16:1e:cb:8d:39:c4:11:a5:8b:49:d0:
ba:cd:d1:82:1d:b0:c1:7e:88:aa:94:eb:ac:c3:85:
e7:aa:f3:6c:80:6c:fd:ac:c3:d0:3c:ac:b7:05:ba:
d1:00:24:24:c2:b1:40:fe:53:92:86:5e:a0:b6:b0:
53:85:04:c2:11:ed:be:8c:ed:35:51:d8:8c:f3:c3:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:89:18:71:61:AE:30:20:95:1A:BB:C7:3E:40:AD:9E:ED:A6:06:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf275ae-7935-4f0a-b4e1-9b0bd0532ac8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.176.82.0/24
Signature Algorithm: sha256WithRSAEncryption
41:96:3b:f5:fb:88:e1:a2:3a:50:3d:9f:25:ea:03:3e:4d:e5:
bb:3e:14:1a:50:61:93:7d:61:0a:16:3e:cf:34:90:0f:8f:6c:
63:ad:15:8c:87:aa:f4:72:b8:cf:90:41:de:25:27:19:c6:84:
86:2d:20:25:eb:04:33:d5:02:2a:a9:89:fb:1b:da:e1:a4:8f:
70:10:18:75:c5:15:84:71:35:59:fa:53:4e:81:46:77:a4:8d:
d0:18:8b:85:8e:15:23:fc:7c:d5:7e:da:f7:53:63:80:83:d6:
7b:01:d2:3a:5e:c0:76:95:9b:82:c3:04:6a:9d:04:f8:ee:69:
27:00:ae:83:2b:f5:1f:91:e1:77:cd:5c:b1:30:bd:c2:7c:c2:
09:94:57:da:c0:87:04:4a:d8:c3:68:9a:63:e1:76:42:fd:b0:
d2:54:6b:86:47:fb:75:66:93:ed:eb:4b:27:72:6c:97:d0:8c:
30:1d:73:c4:4c:b2:15:23:91:6e:2c:12:64:f6:98:c9:22:76:
53:6e:30:50:ed:dc:72:45:0e:e5:20:2e:48:f5:8f:db:ec:c2:
6f:fd:f6:99:1b:89:12:a1:2f:ef:a6:f9:64:8c:f0:38:e2:af:
eb:db:08:92:a5:63:d6:da:28:94:bf:86:2f:3a:69:40:50:6e:
09:73:01:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:37 2025 by rpki-client