Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa
File: d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa (raw, json)
Hash identifier: EPXlx9cnJYJ7k8j7aDs8wF5Y6EzuhnK/F39761ZuBak=
Subject key identifier: 35:6C:E4:FE:E8:78:CF:52:62:04:82:CB:65:FD:03:A4:A9:21:02:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 096B787D60A59F512D905D8D407E7CC24CF714F2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa
Signing time: Tue 30 Sep 2025 00:02:11 +0000
ROA not before: Tue 30 Sep 2025 00:02:11 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 135.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6b:78:7d:60:a5:9f:51:2d:90:5d:8d:40:7e:7c:c2:4c:f7:14:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:02:11 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=1f8e4f91fa51778344b01886503b3739ccddd3620a718d1c26adbc6b5bf07202, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:4d:02:1c:d7:00:14:93:a6:dc:b9:02:b7:
aa:6c:a6:06:ba:bc:cd:f0:c1:da:68:b9:34:9c:d2:
b2:0c:23:d0:1e:4b:ab:14:62:4e:92:07:b6:5d:da:
9d:75:13:08:95:78:8c:8a:02:bd:6f:97:f9:29:25:
5a:85:63:49:e5:fe:b2:ea:93:b2:c5:03:e0:59:ce:
c6:be:35:53:cd:b0:62:4c:36:15:6d:e4:be:6a:56:
67:68:0b:fd:a1:20:7e:2c:14:a0:c8:47:19:9a:31:
29:43:e4:00:45:c6:5e:3a:73:e2:ee:8c:b4:31:04:
68:74:bd:84:bb:c2:3a:d2:c1:f9:0c:f7:6c:e6:99:
d4:df:56:71:73:48:71:7d:42:da:f0:d3:21:eb:08:
98:71:2b:7c:16:1a:28:e2:27:95:f2:d3:e3:fd:ab:
9c:d9:23:23:e1:4f:c0:73:b9:06:dc:66:72:17:10:
47:8d:e0:68:fc:2d:8a:20:46:60:e8:17:62:7e:a2:
b3:54:e4:5e:e7:ff:20:2b:1b:24:b3:05:1f:30:9f:
22:90:aa:80:78:27:0b:95:27:8b:d4:76:16:3a:1d:
2c:d3:91:84:da:a6:c8:39:1c:da:bd:76:81:f8:61:
eb:85:d2:88:b7:b9:a7:65:e3:c3:fc:76:71:e5:06:
b6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:E4:FE:E8:78:CF:52:62:04:82:CB:65:FD:03:A4:A9:21:02:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0cc2b9e-dea7-45d9-b0c6-98b0ddece309.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:4c:aa:e5:2a:0e:68:76:39:26:c2:80:fa:eb:2e:01:34:33:
04:4d:db:32:eb:ab:be:f0:a7:49:f5:a5:cc:67:f5:16:33:76:
5c:50:94:d2:da:2c:08:8b:1c:0b:88:95:4e:c8:1e:5a:be:be:
bc:fc:a9:19:ea:b6:84:12:34:59:9d:d7:b8:ae:70:34:cc:14:
c2:e1:85:41:6e:23:6a:03:54:c4:1e:55:96:78:83:3f:08:8c:
6a:93:4c:91:50:13:28:ed:55:51:41:ad:c4:be:c1:e1:8d:2e:
74:e1:76:17:0c:8f:43:67:d2:78:81:a1:0f:96:10:89:23:36:
48:17:74:fe:4f:6e:2d:ca:a2:32:81:7b:2c:86:39:3b:cc:7d:
48:6f:a7:9c:84:12:51:e7:70:f0:c6:f6:26:11:5e:a2:56:45:
45:f3:36:b9:ae:b0:b5:ed:1e:0a:43:a9:d2:c5:b5:60:0c:4e:
ee:28:d5:50:7a:1c:52:eb:e2:ed:b7:56:52:4e:87:80:db:51:
fa:f9:c2:04:cb:c5:2e:a3:55:ef:59:d5:9d:ac:aa:ff:92:a7:
e0:d3:54:7a:f8:b9:3e:6f:23:79:fd:7f:38:e8:46:eb:a5:03:
80:26:5e:83:89:98:7a:1f:82:df:77:84:7a:ef:2b:ba:1a:76:
ca:7e:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:26 2025 by rpki-client