Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa
File: 4f822f75-fc14-46c1-a803-e47f23928368.roa (raw, json)
Hash identifier: fLDFmw/KvFogJU63K7RKkFoJ4ru/2+QhaGDZkBhNFHw=
Subject key identifier: C1:FD:A2:1B:E1:B7:5C:E5:DA:74:49:75:95:0F:A9:A3:15:C1:A1:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 797EADE180830615FB37751944E62F8E3A494B55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa
Signing time: Sat 15 Nov 2025 00:21:07 +0000
ROA not before: Sat 15 Nov 2025 00:21:07 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.174.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:ad:e1:80:83:06:15:fb:37:75:19:44:e6:2f:8e:3a:49:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 15 00:21:07 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=6e5d7497f343e349a6a002a4aff683fd63be434b5d6f0fe63603feef1348614a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:d7:05:c0:1a:0d:3f:24:0f:9c:2b:0c:a5:
23:97:2a:9c:5b:94:84:dd:b1:91:a1:ae:f6:08:6e:
70:67:e6:5a:49:a1:2c:ff:77:28:52:1c:95:90:f5:
ca:71:a9:21:37:91:33:7d:a8:04:68:82:19:67:75:
45:ff:31:98:e3:69:7f:ac:f6:91:c6:68:0a:5e:b7:
ad:f0:58:0d:f1:61:43:71:1c:56:fa:8e:31:75:d1:
65:a9:65:6c:a8:ac:34:39:41:79:a5:b5:11:e5:52:
fe:b3:da:0b:46:90:8c:c2:8f:24:84:ea:be:1b:a3:
f1:67:d0:68:3e:54:80:e4:dc:f5:5a:b4:6b:35:46:
9d:df:5e:23:31:1b:be:c8:0d:66:d0:8b:5a:6f:f1:
e6:3d:35:fa:87:8f:89:2d:e7:38:74:31:97:85:ef:
1b:28:77:74:13:12:49:7d:a7:59:59:19:3c:50:2e:
fb:f4:f4:b9:e3:47:25:9c:0c:75:8f:f8:e1:db:7c:
41:9d:85:13:4b:9a:86:d6:73:b4:13:34:7f:a4:db:
af:84:ee:6a:76:5e:4b:26:60:05:24:1e:5c:1f:ce:
2f:ff:77:77:ec:92:2b:fe:f0:b5:9e:b6:f8:c9:de:
16:95:10:93:73:9c:38:36:fd:d9:29:2f:6e:1d:4c:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FD:A2:1B:E1:B7:5C:E5:DA:74:49:75:95:0F:A9:A3:15:C1:A1:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f822f75-fc14-46c1-a803-e47f23928368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.174.131.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:d3:e2:b7:65:78:1d:af:b0:ce:60:1c:ae:24:8c:e4:fe:3f:
ba:0b:ad:22:af:3d:da:5e:42:9d:00:96:02:dc:17:c1:7d:19:
56:4b:ac:e3:fc:6f:cf:8e:71:06:f7:f8:ed:f6:73:f3:7d:4a:
7e:8c:cc:6e:2d:da:a8:2f:3a:05:28:28:cc:87:62:92:b6:6e:
4b:9c:c1:17:e4:7c:43:6f:1a:23:71:94:84:08:08:db:f7:36:
27:9b:36:8b:2a:d4:ee:82:ca:1a:c3:3f:89:b7:a7:44:f1:b1:
ac:b3:99:6b:10:79:36:da:e0:b9:28:0f:a8:b9:80:50:c1:e7:
de:72:5e:bb:45:b6:b7:8b:87:47:d5:72:71:f2:4e:75:4a:9e:
ca:e3:8a:4f:d1:9a:86:f7:87:76:88:8c:58:55:98:a2:79:ab:
5c:e6:96:92:3e:65:c3:3d:f8:ff:ed:ca:d9:bf:73:5c:3b:fd:
fd:43:29:43:ea:b0:f0:d8:a1:80:90:ba:af:91:1a:2f:39:1d:
1e:22:6c:cc:35:12:5c:84:63:4f:15:55:88:6f:95:6e:d2:a6:
09:61:7c:0d:87:47:94:03:99:37:aa:b8:8c:83:48:ae:f2:3e:
e2:5b:eb:59:89:92:d5:47:a7:28:11:4c:dd:e1:9a:1f:7b:54:
89:de:eb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:35 2025 by rpki-client