Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
File: 5f22ad31-1c84-490b-a843-6ec8ce92d874.roa (raw, json)
Hash identifier: CfOmcEIGDC/3svVLCYA44uEdYbw+xyXP9vpTn/Ppo6M=
Subject key identifier: A1:44:39:AE:38:1B:B5:E6:A0:DF:EA:C0:90:51:69:E9:A3:00:BF:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7905710D3CA7BE21438534755AA266D3382F841B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
Signing time: Tue 11 Nov 2025 00:20:41 +0000
ROA not before: Tue 11 Nov 2025 00:20:41 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.179.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:05:71:0d:3c:a7:be:21:43:85:34:75:5a:a2:66:d3:38:2f:84:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 00:20:41 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=1bd95c8b7407c8fbd1d5d858ed72e7db903970e61568bbcca5f29808eca6a69b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:1c:f2:e8:73:1e:26:20:00:a6:76:5f:96:
75:1d:18:a2:9a:77:4f:0b:1d:54:74:4c:83:ea:9c:
94:48:9f:1a:e9:62:81:3b:82:42:66:da:a6:62:76:
2d:f1:14:ec:8c:12:cf:f2:6c:73:6c:fd:ae:6f:03:
5f:0e:e9:08:07:1d:f7:5c:5c:b1:39:67:33:74:e3:
53:b8:c2:39:92:6e:e4:f3:24:c2:b1:d6:ab:0e:e3:
43:d0:d4:cc:e1:54:7c:0a:12:27:4d:51:27:98:39:
d2:ac:94:68:e8:8b:74:1d:0a:09:31:5b:ca:e8:fc:
f7:80:fb:fd:ea:ca:d6:75:4a:33:10:2b:db:60:4d:
af:a2:dd:39:2e:d8:eb:5b:c3:94:11:37:99:fc:50:
3c:66:12:eb:1e:ae:5d:e4:69:09:7b:29:21:a1:cd:
b2:33:76:ac:65:4c:86:3f:4f:7f:91:bd:7e:e5:69:
51:66:42:82:02:e6:a4:0a:ab:c1:60:8b:65:12:5a:
46:4e:0f:64:20:a6:eb:52:b3:f7:3f:32:12:b8:d3:
23:cb:1a:d4:f9:46:98:4f:29:1a:c0:ac:92:ed:84:
85:95:8c:bc:c4:ad:2e:33:4b:c2:e1:13:c2:d2:f5:
d3:c8:c3:61:ce:0e:81:a7:dc:41:93:b8:8a:e8:dd:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:39:AE:38:1B:B5:E6:A0:DF:EA:C0:90:51:69:E9:A3:00:BF:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f22ad31-1c84-490b-a843-6ec8ce92d874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.24.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:95:2d:1d:23:2b:e4:ae:fb:b4:1e:29:1a:21:5d:7f:71:ca:
50:0d:42:f9:ab:e5:18:54:17:83:87:d9:b7:99:f8:bb:f2:b8:
de:a5:0a:fe:fb:95:e8:24:9f:15:44:eb:91:d8:02:dc:bb:46:
cd:5b:06:dc:e4:87:95:a5:bc:be:f7:5b:21:13:63:34:c6:d8:
93:8f:fb:d9:37:46:e7:a3:03:3e:67:a8:62:4e:4c:2b:df:28:
f8:4a:55:6d:13:59:cb:c3:10:87:8b:0a:11:4c:c4:ff:24:90:
69:08:f5:8d:31:61:7b:15:37:3f:c8:d7:35:f8:93:9e:23:5b:
6a:d0:c5:50:30:74:f3:43:8a:2c:58:41:aa:27:7e:75:cd:7c:
0e:b8:fc:ea:91:bb:7b:f8:56:7d:11:44:1c:7b:9b:aa:67:0f:
5b:5c:d3:18:a1:fc:c5:a3:50:00:1d:95:3e:49:0c:f8:55:48:
dd:fa:f1:98:75:17:73:90:6e:54:01:e1:6b:fa:dd:8b:5c:8b:
5c:78:f2:47:a8:ca:9e:b5:3a:e1:65:ff:76:c4:b4:41:7e:f4:
46:06:09:48:f9:11:b7:e1:95:51:60:36:4d:0f:d8:0d:93:fb:
4e:89:7e:d6:64:ec:4a:08:39:51:70:af:63:56:3a:60:c5:08:
70:f7:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:51:25 2025 by rpki-client