Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
File: d91181aa-a710-47af-96f6-c6d4bd7176fe.roa (raw, json)
Hash identifier: 8hECEXPulYnz/djKogjKgMaKwj1caLiu09GAT+leTek=
Subject key identifier: DF:CE:AC:C1:B4:43:8D:E2:4A:AE:C8:C4:A7:3D:46:51:B0:4C:4E:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 138F14DF8A3B477251B92A4D66B13892B5C0AC7A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
Signing time: Mon 29 Sep 2025 15:12:40 +0000
ROA not before: Mon 29 Sep 2025 15:12:40 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8f:14:df:8a:3b:47:72:51:b9:2a:4d:66:b1:38:92:b5:c0:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 29 15:12:40 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=21ed5c6c773aeb2002b9c7286b4d35310d2926e59e3760ab2adabca0eed169c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:88:28:d2:96:b3:a0:90:1f:11:31:43:23:
29:71:ca:28:83:1f:14:92:f6:7d:d0:ea:a2:b4:74:
18:9b:b9:bc:6e:96:4f:8c:75:e7:68:f7:6b:41:e8:
f8:5c:84:c9:7f:aa:7a:72:7b:74:54:bc:e5:a9:64:
0a:54:2e:86:48:50:15:65:50:52:73:d7:e0:14:6c:
b6:9f:6c:65:ae:08:c8:f6:6d:7b:10:68:5c:32:35:
4d:f0:4f:0d:70:cf:5b:a5:ca:67:36:cd:3e:a6:89:
e3:20:21:04:f1:8e:0b:5d:77:a5:5a:6c:b4:c1:1a:
a8:07:f0:32:af:5b:07:a5:19:02:53:9c:c2:46:a6:
ad:9f:2b:61:7e:a9:85:54:0a:90:1a:c6:6b:ff:20:
74:17:a4:75:4d:a4:47:d3:a1:9b:a7:a0:ae:4f:d1:
1a:a7:b1:53:15:81:63:6a:27:27:e8:ca:e8:d9:eb:
9e:ca:cc:e2:ad:e3:61:46:43:7b:58:3a:76:cd:93:
42:8d:21:f0:16:83:b3:9d:8d:3a:09:39:03:6b:a9:
ce:f2:37:6d:32:5d:10:01:e9:23:13:57:dd:67:82:
45:2b:85:33:23:82:ff:bc:e5:7f:91:10:28:86:75:
d3:d5:e2:e7:43:ff:77:09:f8:d4:90:30:3c:eb:59:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CE:AC:C1:B4:43:8D:E2:4A:AE:C8:C4:A7:3D:46:51:B0:4C:4E:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:96:90:34:ff:eb:5f:5e:11:19:3a:c2:42:7d:b2:c7:6b:1c:
64:b3:82:14:53:19:68:f3:a0:57:6e:7b:9d:ba:d1:34:78:92:
63:b0:1a:83:50:22:fe:45:b3:8a:14:5c:24:13:5b:9e:90:3a:
97:4d:22:71:d3:14:0c:07:d9:c6:e5:99:6d:5c:0e:31:01:be:
c6:3c:23:56:18:88:09:33:41:7f:1f:5c:2e:8f:6f:7e:e9:9e:
89:fc:0e:36:98:4a:9a:8d:11:d2:16:84:b6:81:54:51:3a:47:
c3:10:77:73:02:9e:da:61:35:a5:b6:39:d5:92:54:e8:46:4c:
67:9f:34:f7:7d:44:30:c6:51:15:eb:71:87:f4:54:0a:8c:4e:
8a:00:6c:e0:06:30:2c:e9:a8:ba:ae:36:0c:6b:1b:60:41:4b:
3e:b0:80:32:e9:e1:d7:a9:cc:67:1a:23:83:b4:79:a9:62:a0:
7d:6c:40:12:48:73:e1:3b:54:d3:dc:f6:15:c5:09:20:9b:23:
53:51:d2:c0:bc:c6:58:65:f7:ee:fb:4c:48:8c:b7:79:cc:1c:
c4:c6:be:b4:07:92:37:d8:98:ff:bb:61:4a:36:2b:85:ea:9c:
f1:00:d5:99:aa:78:c6:cf:6b:0e:04:6e:87:f8:af:be:56:ec:
4f:cd:b1:a0
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUE48U34o7R3JRuSpNZrE4krXArHowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTI5MTUxMjQwWhcNMjUxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMWVkNWM2Yzc3M2FlYjIwMDJiOWM3Mjg2YjRkMzUzMTBk
MjkyNmU1OWUzNzYwYWIyYWRhYmNhMGVlZDE2OWM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHQIgo0pazoJAfETFDIylxyiiDHxSS9n3Q6qK0dBibubxu
lk+Mdedo92tB6PhchMl/qnpye3RUvOWpZApULoZIUBVlUFJz1+AUbLafbGWuCMj2
bXsQaFwyNU3wTw1wz1ulymc2zT6mieMgIQTxjgtdd6VabLTBGqgH8DKvWwelGQJT
nMJGpq2fK2F+qYVUCpAaxmv/IHQXpHVNpEfToZunoK5P0RqnsVMVgWNqJyfoyujZ
657KzOKt42FGQ3tYOnbNk0KNIfAWg7OdjToJOQNrqc7yN20yXRAB6SMTV91ngkUr
hTMjgv+85X+RECiGddPV4udD/3cJ+NSQMDzrWTQ3AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU386swbRDjeJKrsjEpz1GUbBMTnAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q5MTE4MWFhLWE3MTAtNDdhZi05NmY2LWM2ZDRiZDcxNzZmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBCnDANBgkqhkiG9w0BAQsFAAOCAQEAlZaQNP/rX14RGTrCQn2yx2scZLOC
FFMZaPOgV257nbrRNHiSY7Aag1Ai/kWzihRcJBNbnpA6l00icdMUDAfZxuWZbVwO
MQG+xjwjVhiICTNBfx9cLo9vfumeifwONphKmo0R0haEtoFUUTpHwxB3cwKe2mE1
pbY51ZJU6EZMZ580931EMMZRFetxh/RUCoxOigBs4AYwLOmouq42DGsbYEFLPrCA
Munh16nMZxojg7R5qWKgfWxAEkhz4TtU09z2FcUJIJsjU1HSwLzGWGX37vtMSIy3
ecwcxMa+tAeSN9iY/7thSjYrheqc8QDVmap4xs9rDgRuh/ivvlbsT82xoA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:05 2025 by rpki-client