Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
File: 36d79548-8ba4-4d88-8edf-6092cba143a6.roa (raw, json)
Hash identifier: mpk1m6cRnsD4dporbbsCjAAUpQQ1UglmL/J1uEXkwTA=
Subject key identifier: 9D:FC:95:87:90:75:FB:17:0D:67:E3:07:5F:CE:0A:CC:3A:87:5A:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C774D41AA632082585FA1B84DB20E6855C7B559
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
Signing time: Wed 01 Oct 2025 00:38:54 +0000
ROA not before: Wed 01 Oct 2025 00:38:54 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:77:4d:41:aa:63:20:82:58:5f:a1:b8:4d:b2:0e:68:55:c7:b5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:38:54 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=33490c8572aecb4895351bce66a643f21e4de35afc139e5d3e0ba995491002c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:15:19:a6:2e:1d:05:a1:fe:4d:08:3a:d8:03:
6e:bf:41:9e:37:90:fa:ca:42:18:48:fa:f1:b9:bd:
77:f5:38:cc:70:f3:af:be:ed:24:57:11:b4:de:c6:
59:f0:90:0c:ea:22:d2:53:93:d5:94:b2:91:9a:f8:
15:1a:83:b5:8d:53:90:81:71:ab:53:6b:19:25:73:
ff:ae:f7:1a:a3:e4:e1:4b:92:33:b5:31:e3:0b:96:
c5:3d:d1:97:30:5b:d5:d8:e9:90:9a:34:51:0e:59:
d2:37:5d:02:fc:f7:ef:35:39:67:44:fd:a1:ce:7d:
93:39:5f:0a:f8:ec:f4:e0:0c:3a:9e:b4:9c:28:17:
05:0d:dc:15:cf:60:f5:20:a8:33:0b:3c:90:26:50:
db:01:53:da:d1:f1:90:ed:eb:b1:33:bf:ad:05:30:
c1:db:60:8e:75:4a:14:71:ba:1a:86:91:10:e9:4f:
f4:c1:9f:06:cd:b7:db:3e:cc:c8:b2:34:52:3d:b7:
7a:9f:da:74:71:83:0c:bc:d1:d0:88:9e:d2:53:0c:
ea:15:62:40:49:1c:ed:35:84:e0:b0:3f:35:e3:0c:
35:ea:86:9e:7a:32:c2:27:8c:1e:a6:c5:a1:40:df:
c2:df:dd:97:2b:76:b1:10:35:83:66:2b:5f:0b:6e:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:95:87:90:75:FB:17:0D:67:E3:07:5F:CE:0A:CC:3A:87:5A:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36d79548-8ba4-4d88-8edf-6092cba143a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.113.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:53:b9:82:4a:1c:f6:03:91:26:80:2f:f8:37:b2:35:12:8d:
dc:83:97:23:42:b4:27:0a:b9:ac:73:e6:f9:c6:0c:a2:a3:0a:
a0:a7:57:ac:a1:5c:f9:12:7e:9f:91:90:1e:7f:08:77:35:4d:
3f:d8:3b:01:cd:39:bb:93:e0:6d:2f:db:03:85:9f:91:d9:38:
3f:85:ff:83:c4:e2:f9:eb:9b:63:31:a3:c1:40:da:e7:cd:1d:
20:67:61:99:42:68:98:79:e3:67:da:32:04:6b:06:8f:99:98:
12:e9:16:ca:4f:87:99:4c:2a:36:0a:25:79:37:50:da:50:11:
69:4c:9c:b0:54:44:25:fd:6e:e4:78:1a:41:61:2a:8f:7a:3a:
78:37:07:5f:5d:d9:da:d3:aa:0e:e2:15:6c:d3:f8:8b:e4:71:
ff:04:cf:ec:d2:ca:ec:7d:d6:23:0c:a9:de:ba:f8:13:ad:bd:
b6:35:20:15:9a:f8:56:96:40:12:8f:ee:35:cc:f9:40:4d:db:
02:ee:7a:59:80:90:cf:3f:b9:7d:81:a5:7f:82:af:9c:6e:f4:
10:6b:0a:3a:60:a0:d9:4d:da:6b:74:a6:40:b7:50:4f:56:75:
73:59:b4:34:d6:55:9d:c4:fc:82:aa:a6:3a:39:43:e5:27:07:
3a:9c:94:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:55 2025 by rpki-client