Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa
File: 5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa (raw, json)
Hash identifier: B8Z5OCZrh/75bBluOZp0MYU7ePUNr+jTE1rYXW79Ql8=
Subject key identifier: C0:17:41:E4:46:F9:99:0D:77:B9:4F:E9:79:E6:6B:1C:CD:5D:0C:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27977A71E832F840116635A38B877FB8836B4658
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa
Signing time: Fri 07 Nov 2025 00:50:08 +0000
ROA not before: Fri 07 Nov 2025 00:50:08 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:97:7a:71:e8:32:f8:40:11:66:35:a3:8b:87:7f:b8:83:6b:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:08 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=33331b73c6d00971d5a5808baa70d2498fc151ffec1880b63ee51c128356b4f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b9:48:88:aa:2b:89:ea:7f:9a:95:89:25:fa:
72:26:e0:06:f6:3b:8b:e3:5b:ce:ec:b4:b3:31:7f:
ef:02:0c:01:48:a7:90:8b:dc:35:fc:bf:3b:6d:53:
f2:22:7c:78:51:4b:8e:6c:db:e0:27:54:16:8a:7b:
11:6f:37:3d:aa:da:3b:10:b6:57:15:50:75:95:ae:
ac:8c:ca:6f:c8:18:8f:32:11:be:3d:48:c7:42:95:
0c:5a:2c:d4:65:bd:bf:30:52:94:86:44:e0:53:04:
1a:ab:1d:d2:cf:e0:c0:86:06:6f:92:31:a7:37:a5:
29:13:f7:a4:e5:df:c1:d7:2b:40:52:ea:84:73:c7:
3d:2a:7b:01:a2:f9:21:56:7c:db:29:c1:39:63:fe:
e0:33:50:93:96:74:9a:99:25:70:ea:d7:82:88:20:
b9:99:25:5a:9b:2f:3c:2f:b7:dc:9f:11:b0:3a:bf:
d8:87:40:c4:29:98:fe:25:ba:89:8f:63:ef:e9:a8:
42:85:19:13:f4:0e:22:c4:d2:c3:10:26:bd:20:b6:
bd:ce:1d:85:cd:32:4b:a5:6e:e9:46:56:79:67:25:
59:55:b1:6e:a7:eb:8e:74:3e:fc:6a:7e:c6:ec:1b:
62:f6:52:9b:59:d1:8d:4f:3d:29:75:a4:eb:9e:f6:
cf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:17:41:E4:46:F9:99:0D:77:B9:4F:E9:79:E6:6B:1C:CD:5D:0C:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e3703a3-168e-4407-9bed-4ffb93a2c53c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
45:13:47:f4:69:a7:0d:81:57:c3:b1:d1:7b:bb:8d:f9:ef:57:
b1:4b:2d:ac:06:e5:46:e8:48:e9:e7:96:27:90:33:cb:28:d3:
55:18:95:4f:60:26:26:ab:b8:9a:d3:11:f3:d9:b2:2e:3d:0d:
72:67:b1:d0:ad:94:76:e6:78:36:ef:f9:9f:dc:09:45:a1:78:
78:5d:67:1b:9b:a6:62:e7:c1:52:d1:af:e0:51:c5:fb:61:33:
40:6f:95:17:81:86:98:c0:99:07:f5:9b:66:eb:83:07:4d:64:
da:61:bb:9b:b9:c1:f3:8a:29:2e:14:a2:ae:b7:fc:0a:fb:c9:
11:f0:11:91:78:97:e7:ba:ad:8c:2c:f0:51:d0:59:27:fd:3d:
ac:43:62:94:aa:53:42:00:cb:e3:cf:50:f8:84:43:53:a4:e9:
36:32:d4:4a:41:24:af:1d:17:b3:36:ac:b4:f1:95:af:ce:58:
be:97:b9:5e:a9:9a:6b:8e:f7:b0:fe:3a:68:57:09:39:da:7a:
fd:a1:d5:07:3a:5a:70:b9:dc:af:bd:f1:7e:84:de:eb:8f:ca:
65:c8:60:b8:f9:0b:15:8c:7b:bb:54:2a:10:3c:2e:f1:74:ba:
8a:23:7f:6f:ef:6e:62:9a:b7:cd:a7:f0:bc:1b:11:dc:3a:be:
65:4e:ca:dd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ5d6cegy+EARZjWji4d/uINrRlgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA3MDA1MDA4WhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMzMzMWI3M2M2ZDAwOTcxZDVhNTgwOGJhYTcwZDI0OThm
YzE1MWZmZWMxODgwYjYzZWU1MWMxMjgzNTZiNGY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCruUiIqiuJ6n+alYkl+nIm4Ab2O4vjW87stLMxf+8CDAFI
p5CL3DX8vzttU/IifHhRS45s2+AnVBaKexFvNz2q2jsQtlcVUHWVrqyMym/IGI8y
Eb49SMdClQxaLNRlvb8wUpSGROBTBBqrHdLP4MCGBm+SMac3pSkT96Tl38HXK0BS
6oRzxz0qewGi+SFWfNspwTlj/uAzUJOWdJqZJXDq14KIILmZJVqbLzwvt9yfEbA6
v9iHQMQpmP4luomPY+/pqEKFGRP0DiLE0sMQJr0gtr3OHYXNMkulbulGVnlnJVlV
sW6n6450PvxqfsbsG2L2UptZ0Y1PPSl1pOue9s/pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwBdB5Eb5mQ13uU/peeZrHM1dDD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlMzcwM2EzLTE2OGUtNDQwNy05YmVkLTRmZmI5M2EyYzUzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWwIwDQYJKoZIhvcNAQELBQADggEBAEUTR/Rppw2BV8Ox0Xu7jfnvV7FL
LawG5UboSOnnlieQM8so01UYlU9gJiaruJrTEfPZsi49DXJnsdCtlHbmeDbv+Z/c
CUWheHhdZxubpmLnwVLRr+BRxfthM0BvlReBhpjAmQf1m2brgwdNZNphu5u5wfOK
KS4Uoq63/Ar7yRHwEZF4l+e6rYws8FHQWSf9PaxDYpSqU0IAy+PPUPiEQ1Ok6TYy
1EpBJK8dF7M2rLTxla/OWL6XuV6pmmuO97D+OmhXCTnaev2h1Qc6WnC53K+98X6E
3uuPymXIYLj5CxWMe7tUKhA8LvF0uoojf2/vbmKat82n8LwbEdw6vmVOyt0=
-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:26 2025 by rpki-client