Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9abcbcc-98f9-44ec-8ae2-6c183c7e5a05.roa
File: f9abcbcc-98f9-44ec-8ae2-6c183c7e5a05.roa (raw, json)
Hash identifier: DGfFkwtCgd8GYTrUBc4kjRA/RhbbiQGnQbhPnEiKNoQ=
Subject key identifier: 52:27:95:5E:5E:63:94:A4:E0:8D:C0:D2:93:E1:AB:09:F5:F2:3D:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 617634B8801D2004384D16F2C57008E1EBA93432
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9abcbcc-98f9-44ec-8ae2-6c183c7e5a05.roa
Signing time: Wed 15 Oct 2025 20:38:27 +0000
ROA not before: Wed 15 Oct 2025 20:38:27 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 206.214.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:76:34:b8:80:1d:20:04:38:4d:16:f2:c5:70:08:e1:eb:a9:34:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 20:38:27 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=a78d1d35fb590c3d3d0e5df37acd2cc9369b88f8628139dfdf70d19d1932218d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:86:a8:a9:79:61:fe:a9:a4:ce:01:a9:b2:c5:
2a:04:f7:41:3a:c1:6a:b5:75:75:b4:2c:b9:ad:3d:
3c:4c:cd:6c:32:3b:5f:b7:f5:f7:21:54:df:21:24:
32:58:9a:5a:60:74:47:1e:2a:3c:43:a4:84:03:4e:
20:95:7a:b8:f8:2f:dd:61:3b:d3:22:1e:15:1f:12:
28:de:e0:04:00:2c:09:f2:e6:8b:fb:31:69:32:03:
7a:fe:41:d6:27:9e:90:0d:b4:b3:e5:0b:38:e4:9c:
a6:fd:c2:d4:92:d3:ec:2e:e7:cc:a1:a8:38:7c:74:
7d:d8:a3:12:8a:a9:94:3a:a0:56:85:1e:30:27:cb:
07:54:43:00:5f:00:55:07:30:8a:51:c7:21:1e:55:
5f:ae:6b:2a:ad:d0:f0:9f:2e:56:fd:c7:28:ac:7f:
2e:71:cb:5c:4f:2a:12:96:3c:31:27:4f:9d:be:31:
4e:67:d9:bb:77:e3:b6:0e:c3:ba:18:41:52:11:5a:
ad:ff:b7:9f:8c:ac:6d:7e:41:a3:be:5b:5a:a6:b1:
c6:0b:f8:5c:65:0a:80:67:91:8f:9a:7c:b5:e2:d9:
f6:5c:83:ef:b2:ff:5c:b9:b9:d8:1e:2f:51:18:cd:
62:61:33:0c:45:28:df:b8:44:ff:65:d2:eb:cf:64:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:95:5E:5E:63:94:A4:E0:8D:C0:D2:93:E1:AB:09:F5:F2:3D:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9abcbcc-98f9-44ec-8ae2-6c183c7e5a05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.214.192.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:54:93:01:1e:98:d4:bf:01:cb:65:da:c4:88:66:c3:f1:d6:
16:2e:37:a6:6b:e1:ae:ee:57:fc:1b:94:6f:6e:4f:80:33:e5:
ff:b0:dc:6e:97:e0:63:9b:44:d1:3c:3c:ec:0e:d9:37:84:2d:
3f:4c:92:e9:b6:09:a9:10:a0:db:65:a6:6e:a9:42:ad:10:23:
0f:31:a8:f9:5f:9d:03:75:64:9a:6a:82:89:71:51:04:94:33:
6f:68:92:4b:70:8c:d3:65:b9:fe:af:98:de:b9:2e:08:a7:92:
ba:ce:b9:a1:12:71:49:e2:76:6f:aa:14:c5:be:a9:c3:e7:ae:
88:4c:cd:41:ad:88:c7:da:fb:ca:5b:ab:41:12:64:53:fb:73:
43:ca:9f:66:78:67:25:15:4e:7c:15:f2:b7:5d:39:8e:83:e8:
7b:74:1d:26:82:6a:31:71:fc:93:c2:ee:3d:b3:9a:0b:8d:c9:
aa:df:de:6e:7e:81:78:35:a5:9d:06:23:f7:a7:01:ef:c9:61:
20:a7:d0:ed:f6:80:7f:c6:b9:01:50:37:77:f9:e2:1c:ad:a3:
99:e7:d2:90:46:16:ad:a2:41:95:9d:19:77:5d:48:7a:1c:01:
2b:9c:a7:c4:39:67:fd:f5:0d:60:6b:d1:e9:95:59:b2:c1:3f:
80:49:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:46 2025 by rpki-client