Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df6ae826-6377-4f40-be4e-dd625b1b34e8.roa
File: df6ae826-6377-4f40-be4e-dd625b1b34e8.roa (raw, json)
Hash identifier: usL/y78bRlAS67szZYn1j2YGgtlP72aG2f4rGIaEfIg=
Subject key identifier: 87:12:DE:4D:8B:53:23:C3:26:67:68:FA:8E:BB:F5:13:03:5F:B8:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 637822097D282C7CD0F87691C72D445E245FEA97
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df6ae826-6377-4f40-be4e-dd625b1b34e8.roa
Signing time: Sun 19 Oct 2025 00:10:42 +0000
ROA not before: Sun 19 Oct 2025 00:10:42 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.58.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:78:22:09:7d:28:2c:7c:d0:f8:76:91:c7:2d:44:5e:24:5f:ea:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:10:42 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=548fa86cb7fdaf4ecbe0998d750a468521d1bfc8e719bf0d3be771e8dff68c4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f2:06:37:10:0a:26:d6:44:0f:dc:88:58:58:
26:d4:c6:1b:5d:7b:f6:e5:5f:d7:68:a5:19:7b:27:
be:fd:e5:22:bc:46:f1:be:62:60:4f:1b:70:2a:3e:
9d:57:b9:da:18:29:a2:64:1b:12:b1:e2:8c:43:0a:
f4:4d:fd:09:1f:5c:70:55:57:1c:a9:85:04:27:f8:
13:b8:92:b7:85:4a:fe:aa:1e:05:44:2a:51:9d:3b:
49:d7:f2:f5:ec:c0:5c:ff:d8:08:31:77:c8:ea:0f:
86:18:69:4c:88:29:73:ac:04:74:06:9a:ac:3d:af:
00:c1:fc:0a:a1:a4:15:f6:2f:7e:1c:b2:b2:3c:01:
24:5f:6d:32:3e:21:98:ba:be:21:33:5a:e5:49:23:
41:48:45:9f:50:cd:f5:ca:23:bb:f0:20:20:8b:a7:
ed:8d:8e:41:17:c8:e9:e5:23:5a:d3:6c:cc:30:9a:
5a:6f:a1:31:3a:53:17:e4:a2:f1:f9:a3:45:c8:43:
80:38:eb:35:1c:0b:e8:3f:6d:a0:57:0f:06:80:94:
3a:4f:72:7d:9a:5d:ce:f7:ae:17:de:ad:39:97:70:
26:21:fb:33:c4:76:bd:1c:63:0a:ae:a0:2c:d8:b4:
ab:6d:0c:03:02:10:5f:be:f2:3d:d3:32:5e:dd:41:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:12:DE:4D:8B:53:23:C3:26:67:68:FA:8E:BB:F5:13:03:5F:B8:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df6ae826-6377-4f40-be4e-dd625b1b34e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:16:5c:8d:ba:53:9f:b9:0a:82:54:f7:96:2a:e6:d4:c7:43:
23:73:df:fc:0f:46:da:5e:35:63:95:f9:d3:7e:7d:7f:40:5d:
ed:2e:65:39:4f:4b:bf:58:22:3b:94:ab:e9:c9:3a:e8:8e:73:
9f:66:9e:ac:83:98:bb:cd:24:2c:72:62:e6:1d:db:0a:ce:b7:
e5:9b:29:d5:7b:39:23:c2:dd:dc:d6:48:f9:3d:ee:bb:72:39:
0f:d7:80:96:2f:0c:b0:e3:6c:67:d5:e6:a1:08:c9:62:0b:31:
ac:cc:36:60:25:21:4e:5e:8a:83:18:a5:d7:d5:77:2e:2d:33:
2a:8b:41:7b:86:52:a5:06:6b:fa:d2:3d:fe:f3:06:8f:69:59:
45:c2:fe:ad:de:01:9f:fa:92:16:4d:23:ff:d8:c8:05:36:21:
f4:b4:dc:7b:17:43:d6:62:e2:43:4c:ff:c0:dd:52:3a:2c:d8:
bd:5c:30:9d:e0:c7:a1:4d:13:98:80:74:30:24:2c:04:12:ba:
3b:b6:06:af:e5:28:b5:f3:64:d3:15:ad:6e:7f:2b:b1:11:4d:
c6:5c:e5:63:2a:69:e2:08:7c:c6:76:75:0e:26:2c:e5:9e:39:
18:30:94:14:9e:2a:7c:bd:89:43:23:1d:9f:be:3c:f8:a5:fb:
7a:c1:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:34:00 2025 by rpki-client