Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40a4288a-0451-4012-ae2a-013b5dba164e.roa
File: 40a4288a-0451-4012-ae2a-013b5dba164e.roa (raw, json)
Hash identifier: G954XT8tCYO2X2vRWJpYP2HU5erShS6v4XE/WAqUASE=
Subject key identifier: ED:9D:8D:D7:DD:C4:FC:70:07:C0:87:C5:D2:A2:06:1C:B4:32:93:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E60F28C6683887E7D7A9FB260E5D9050098C88B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40a4288a-0451-4012-ae2a-013b5dba164e.roa
Signing time: Tue 23 Sep 2025 16:34:20 +0000
ROA not before: Tue 23 Sep 2025 16:34:20 +0000
ROA not after: Tue 28 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.39.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:60:f2:8c:66:83:88:7e:7d:7a:9f:b2:60:e5:d9:05:00:98:c8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 23 16:34:20 2025 GMT
Not After : Oct 28 23:59:59 2025 GMT
Subject: serialNumber=7a1cd57592cd933b7ec7f4fc596236a11e06537337b420bd771ae9242ca190ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:8b:23:b2:c7:8f:a2:a3:31:7d:7e:d2:b1:
63:39:36:ee:f6:5a:ef:82:30:04:05:29:37:3f:27:
a3:5a:a5:8a:11:c0:20:41:09:b8:aa:06:35:a2:d3:
ed:4c:91:25:a6:0a:db:5a:4b:10:54:04:af:c1:71:
c9:55:a9:32:ed:d7:07:38:34:34:33:9a:07:3a:18:
08:1e:6a:75:54:38:c8:c1:fe:82:c7:23:8d:31:d6:
3e:bc:3f:fe:2c:49:1a:ac:51:8a:31:54:28:9d:24:
a5:77:49:0a:bd:a1:ac:f4:b6:aa:3c:af:ef:76:aa:
6e:78:24:67:9a:ba:65:26:80:5e:d2:63:9d:8b:e5:
ec:28:ea:18:2f:c6:da:16:ec:06:cc:5a:a5:7b:b3:
8f:8f:89:02:0c:3d:9b:97:c5:f9:e0:7c:e9:b2:53:
29:b2:dd:9a:f1:dc:e5:eb:b9:fc:51:bc:48:8c:80:
d6:68:7c:07:8c:8a:cb:7b:c2:4f:7c:8d:8c:a6:de:
1e:ab:b0:a5:36:f8:5b:a0:2c:90:cc:23:20:9b:cd:
76:1d:59:53:c5:81:fe:82:3d:9e:53:95:d3:f8:bf:
76:8e:2b:64:b7:a7:92:69:99:24:55:28:c7:73:e0:
17:b8:49:29:0f:2d:31:43:ae:32:17:0c:2f:3c:21:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9D:8D:D7:DD:C4:FC:70:07:C0:87:C5:D2:A2:06:1C:B4:32:93:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40a4288a-0451-4012-ae2a-013b5dba164e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.39.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:08:c7:b1:d9:6e:20:fa:82:99:83:72:d9:68:c6:fd:c7:46:
c7:31:84:26:92:fc:d6:64:69:e1:45:d1:46:ac:82:ec:32:93:
85:0a:1c:d8:3d:cf:d6:fa:f0:6b:57:38:69:d6:a4:72:8d:0e:
59:c4:6b:e1:95:e9:42:cf:e6:30:d0:07:48:25:cb:82:82:0c:
62:f4:dc:aa:53:0f:fc:08:c2:39:99:8d:57:e4:17:e3:e4:10:
0c:1f:9b:d4:7b:79:cb:96:2a:2e:27:63:4c:b7:eb:3f:26:10:
b3:46:1b:81:2d:4e:2a:00:b8:80:50:d8:55:39:83:6f:56:25:
30:96:dd:e5:67:78:21:57:49:61:4f:13:55:44:20:c4:f3:02:
d6:60:08:a4:ea:24:14:b8:5b:03:9b:f5:d7:75:9b:7e:ab:86:
f0:58:79:45:4a:d0:ab:0e:46:7c:b6:bf:70:99:57:8b:99:9a:
3f:2f:d0:b4:80:38:52:d5:12:3e:1f:12:e3:7b:79:c5:27:7a:
82:79:0c:04:93:86:b1:b8:42:33:35:e4:7f:13:06:2e:39:53:
a6:5b:97:60:24:0d:f3:02:ac:73:9e:27:17:bb:3d:84:31:0a:
be:cc:d6:1c:0c:14:97:3a:f6:e1:d2:da:52:5b:96:86:ef:40:
d1:ac:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:57 2025 by rpki-client