Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76ac6f6-0637-40af-9612-f7277b58399f.roa
File: d76ac6f6-0637-40af-9612-f7277b58399f.roa (raw, json)
Hash identifier: tAuVoQHGQuutUBjK6rg5IvBiJznohjDeRGIG9QC7dy0=
Subject key identifier: 96:A5:1E:AA:B9:20:AC:E0:98:BE:10:BD:69:BC:2C:BB:75:E8:BC:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 038CED5200FDC2F7DA631D3A5A56AD474C1753F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76ac6f6-0637-40af-9612-f7277b58399f.roa
Signing time: Mon 06 Oct 2025 16:22:45 +0000
ROA not before: Mon 06 Oct 2025 16:22:45 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 44.215.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8c:ed:52:00:fd:c2:f7:da:63:1d:3a:5a:56:ad:47:4c:17:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:22:45 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=de2c6bc64d5c2505d91f3a71e52f55a938dd330de436f12987fb69c5bc8d1a4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:0c:0a:40:e4:a6:b0:a6:36:d1:0d:db:5e:
4d:83:9b:bd:8b:e1:87:f1:ed:0c:90:57:2e:be:0f:
6a:f7:04:e4:7a:0d:05:72:7b:bc:f2:8a:68:54:c7:
6b:0e:66:39:54:12:7a:41:e1:7e:39:e0:0f:39:7a:
4d:7d:27:aa:87:67:b3:b2:0c:69:21:9c:aa:67:dd:
c7:73:9b:ab:43:70:bd:e4:43:39:bf:fa:93:27:df:
f1:86:dc:cc:eb:49:2b:f6:1e:dc:af:54:b3:d1:3f:
48:8b:04:1c:1a:98:a8:68:66:53:83:fe:81:40:ec:
70:b7:4f:07:4f:01:da:a5:00:1d:bb:da:29:25:f7:
7d:b8:66:43:0e:42:8f:61:cf:f1:c8:d4:43:07:b9:
37:89:dc:05:1b:ac:bb:6e:8a:de:47:52:e3:3d:6d:
59:aa:f5:1f:2d:32:61:76:14:07:af:6b:f4:85:80:
e8:5d:5c:e6:c1:70:9e:0b:cc:70:df:5f:d8:a8:f2:
a6:e9:7d:13:05:ba:db:f2:9f:eb:b0:69:64:66:e3:
f1:44:d0:96:27:ef:e1:40:d2:fc:ae:a1:0c:85:62:
c0:9b:27:81:14:6a:b9:7b:bd:9c:a5:42:04:08:8a:
18:44:18:d1:4d:9d:8d:20:13:83:77:72:d7:7e:b2:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A5:1E:AA:B9:20:AC:E0:98:BE:10:BD:69:BC:2C:BB:75:E8:BC:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d76ac6f6-0637-40af-9612-f7277b58399f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.215.128.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:f5:18:f5:98:48:1d:fb:8f:a4:6f:ee:67:74:4d:e1:58:b9:
30:e5:d5:38:d7:36:9f:37:76:8f:f1:8f:c8:b9:6f:3a:82:87:
18:ba:57:a6:22:e4:c7:43:d3:4e:30:1c:e8:47:90:9b:83:db:
5d:de:f4:20:17:04:d4:17:14:e8:e3:3e:7d:e7:b4:3d:27:2f:
77:5c:8e:d3:72:c0:c9:9e:1d:5b:38:99:1e:c7:ef:69:9b:42:
1d:4d:64:82:a0:4a:b6:ea:84:40:f5:ac:cf:d2:3b:0e:63:6e:
e8:0c:55:cc:16:fb:02:64:4e:74:4e:d2:8b:d5:fa:a6:5b:cc:
1d:35:a7:cf:63:75:02:88:64:64:ca:01:ab:d6:c5:6f:ac:01:
04:b9:30:e1:f1:bd:43:16:fe:df:8a:bb:7c:fa:b5:38:57:5c:
45:ec:38:81:2f:2c:8f:46:c9:6b:f7:9a:d3:cd:de:83:87:90:
ac:83:d2:67:6c:c8:13:93:48:23:24:09:0c:d2:c8:52:63:20:
a0:87:f0:b1:02:9c:7f:bd:5a:ac:c6:19:58:b1:44:1b:7e:76:
9b:46:1a:b4:8a:d2:46:30:4d:c6:49:b2:0b:2d:65:ad:63:3b:
b2:bb:cc:19:e9:2c:e6:10:34:b9:02:03:4c:1b:e5:e3:cb:37:
2d:2a:e9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:18:48 2025 by rpki-client