Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d552e3dc-88c8-4d6e-8825-3635c23da3fd.roa
File: d552e3dc-88c8-4d6e-8825-3635c23da3fd.roa (raw, json)
Hash identifier: WvCiU+UyBlYvUTEt/3fYSdaUUkUsRf93aZutdaQ+T4s=
Subject key identifier: 2E:D1:8D:E0:90:0F:62:5F:C6:B6:E1:8E:07:12:E5:A4:59:DC:AC:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6599B527CAA1807F0169F3019ECDF7CAE7D7EB28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d552e3dc-88c8-4d6e-8825-3635c23da3fd.roa
Signing time: Fri 03 Oct 2025 00:01:29 +0000
ROA not before: Fri 03 Oct 2025 00:01:29 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 148.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:99:b5:27:ca:a1:80:7f:01:69:f3:01:9e:cd:f7:ca:e7:d7:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:01:29 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=d56ddad9f4f2b1437be916832fd1588f0ccca3ff4e9da6b389004f643f89d60c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:d9:db:82:7e:84:80:f5:37:8c:29:1f:eb:
10:24:35:c7:19:5b:31:51:6a:ac:63:5e:6e:26:b0:
0f:4f:f1:bc:5b:af:ef:5e:d4:a6:4e:50:d9:2d:49:
71:12:e8:06:c9:bf:c2:95:a7:4b:d7:d2:e8:75:a1:
18:ea:c9:ae:d2:d0:a6:2f:bf:e5:a5:bd:29:07:a4:
43:bd:66:ed:bd:3e:b0:d4:12:91:4c:30:02:8e:cd:
30:cb:8c:0d:ee:09:cc:9d:13:1a:0f:a9:c5:f3:5a:
2b:e3:d6:72:36:b2:be:3e:c3:c5:be:62:70:eb:a7:
08:fb:7e:76:d8:6e:2b:ed:22:9c:24:5b:5d:00:e1:
96:85:ea:23:a3:67:ff:af:4d:5a:06:97:e5:53:e5:
cc:3e:66:85:09:f4:68:09:e4:eb:25:c7:f1:0a:58:
ba:bf:09:3b:57:44:06:35:2c:a4:d8:46:20:95:e4:
73:51:3c:a1:03:3f:fb:69:d8:e3:14:f7:7a:9c:f5:
fe:8b:86:63:62:1b:07:9d:70:8d:65:5a:ec:92:2b:
d8:23:a5:3d:78:7b:84:52:8b:54:32:88:3d:db:03:
b5:74:80:1b:a2:3c:ae:c1:b9:ff:ac:90:78:65:d6:
08:13:a3:30:af:26:4c:91:fd:71:ec:2d:04:51:50:
10:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:8D:E0:90:0F:62:5F:C6:B6:E1:8E:07:12:E5:A4:59:DC:AC:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d552e3dc-88c8-4d6e-8825-3635c23da3fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.154.0.0/16
Signature Algorithm: sha256WithRSAEncryption
22:ba:52:08:66:ff:f6:47:d9:0a:36:52:75:da:12:0c:59:31:
6d:e8:c9:58:e5:e6:3c:d0:d4:2f:92:7a:f3:ea:de:8f:20:dc:
01:18:ab:59:21:4f:65:ee:59:a4:3a:f0:91:a1:71:4a:c9:57:
2c:16:12:df:3c:2a:21:74:0a:42:5a:34:6c:93:63:ac:5e:9e:
01:b1:bb:b9:34:06:cc:31:8b:cf:3a:bb:a1:ef:e2:99:24:1b:
8e:67:52:13:24:b2:ce:89:d5:b6:79:d5:8a:b6:9b:bf:43:92:
96:16:17:01:73:68:0d:fb:d3:99:aa:82:a0:71:a0:b2:60:47:
07:1d:5b:74:de:2a:ed:90:d9:5b:b7:82:93:ab:90:a8:ad:df:
78:0f:08:ae:94:be:55:59:28:7e:7f:0d:68:82:8b:7c:cf:bf:
bc:a8:32:14:06:8f:99:dd:b7:44:f8:8c:d1:ea:f5:fd:67:65:
ad:8d:ac:9b:41:3e:cb:5a:66:e6:b5:4f:38:84:80:29:d0:19:
a1:23:7c:2d:df:29:a9:d7:da:75:de:be:c5:06:cd:c8:84:36:
d2:37:31:1b:44:d7:2a:9c:89:d6:45:0d:27:81:56:61:aa:92:
eb:22:14:bd:fd:c8:d6:e9:ab:36:29:06:f3:d8:3e:bf:20:97:
2b:0b:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:27 2025 by rpki-client