Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
File: d600ccd6-ff43-419e-9c88-f766b917445a.roa (raw, json)
Hash identifier: ZPvBAb8hc8yD/6gg9MMKV4m8TGs3Yf9Uwxkpq6IwzKQ=
Subject key identifier: AC:86:64:41:60:A1:43:DD:28:11:3F:ED:92:F1:79:21:7C:CE:53:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65C3AF3536E22BC852D8BABF357B0F66F3F3CF07
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
Signing time: Wed 01 Oct 2025 00:39:51 +0000
ROA not before: Wed 01 Oct 2025 00:39:51 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c3:af:35:36:e2:2b:c8:52:d8:ba:bf:35:7b:0f:66:f3:f3:cf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:39:51 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=876ed8b215d43b892bf040f6dfcfb2e4e8f36f0982888e39150e97b3b0fb2a7e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:3b:09:10:41:41:90:4c:12:d0:34:92:7e:
92:6d:f1:59:89:7e:80:d4:b7:39:44:47:4a:39:8e:
3d:1c:c4:17:bd:6e:c3:fd:68:f6:5e:52:14:fd:89:
75:01:1f:ea:bf:6b:16:14:2e:89:85:74:9d:b8:06:
90:4f:11:be:a0:4d:19:23:3d:ec:cc:6a:c2:73:19:
6b:1f:e1:26:1e:40:68:47:34:4a:4f:d2:a0:64:77:
fc:3c:99:a9:a0:88:c6:fa:9b:5b:60:e8:29:b5:06:
55:45:42:93:be:19:25:b5:a1:b7:76:2a:cf:3d:4e:
7a:55:71:bc:c9:8c:ad:e9:f1:eb:05:c9:90:4f:68:
56:93:81:e6:54:77:79:80:95:31:95:f0:47:2e:26:
7d:6f:0c:a2:81:a7:8f:a6:51:f2:f5:8d:1d:69:c4:
b7:4e:c2:f3:44:9f:db:80:91:93:b5:13:e5:e9:46:
b0:e9:5e:86:2f:e8:7b:f7:23:28:c2:26:53:6c:16:
d3:10:05:06:c4:68:d9:7b:db:85:dc:0e:56:f0:cf:
0f:fa:e5:e4:95:60:23:e9:c9:68:0e:81:32:b2:da:
12:c7:96:49:58:cd:86:27:b8:da:fd:43:34:ca:59:
82:b1:11:43:36:97:67:d0:ec:a6:56:b2:11:51:6b:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:86:64:41:60:A1:43:DD:28:11:3F:ED:92:F1:79:21:7C:CE:53:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d600ccd6-ff43-419e-9c88-f766b917445a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:d4:2a:81:74:21:f3:b5:e2:ed:6f:47:9a:e6:e1:56:9e:b2:
b1:bb:89:33:9c:9c:40:70:30:c0:6b:8f:af:5c:4c:cb:9d:a1:
34:f7:3b:c3:a7:00:38:3a:3a:4f:bb:69:50:e2:ac:6d:bf:69:
0f:7d:2e:16:22:3f:c4:0a:30:12:21:25:3c:e2:3d:0d:30:b8:
37:8a:06:d9:51:6a:ac:aa:d0:be:ac:46:27:5a:5b:d8:ba:7c:
2b:34:3e:54:fd:9d:d7:2b:b6:c9:3c:b3:36:2a:fe:57:f5:36:
a9:10:64:57:d9:fd:92:6a:6d:95:22:4c:aa:9b:77:28:43:39:
b8:9c:e3:93:6b:b2:6e:20:98:09:90:0b:3a:03:70:ae:26:f6:
08:4b:28:89:c6:af:4e:65:ba:5c:94:23:5e:38:99:0b:ab:77:
7c:04:f7:18:c5:18:2d:71:25:84:c6:5c:85:21:b2:a5:70:c6:
92:8d:4d:7c:26:d5:a5:aa:19:cd:74:d6:a0:94:fc:49:92:1d:
86:26:f5:3a:14:30:28:c3:a0:ad:07:f2:59:d7:e6:cf:f6:46:
8e:68:0c:1d:ed:47:8b:b1:bb:a2:58:d3:6a:d0:17:0c:d9:11:
26:e1:1c:08:26:2b:25:48:93:2d:2e:7e:e8:a4:7e:39:68:1b:
0a:53:2f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:01 2025 by rpki-client