Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
File: 62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa (raw, json)
Hash identifier: q/ssgjKxwDozdbhWX1znfk2UVyXYg6xDrhhEgKE+dmw=
Subject key identifier: 4C:C8:39:CA:E7:2E:9A:65:08:1F:EB:10:AE:B6:6B:8B:23:EE:07:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DB9D9209780B86FC2D9B9B9E9F925BB420D63E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
Signing time: Wed 01 Oct 2025 00:38:56 +0000
ROA not before: Wed 01 Oct 2025 00:38:56 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:b9:d9:20:97:80:b8:6f:c2:d9:b9:b9:e9:f9:25:bb:42:0d:63:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:38:56 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=5157e746d82a72b38c2edd40dcad1988c1efdc0ed045601fb6cbc6bc8b2fe2dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:f6:87:81:b1:e2:9a:ff:3d:7a:23:19:6d:
cd:6f:9a:f7:e9:21:4c:34:c3:eb:37:ec:9d:04:8b:
c6:e1:70:69:74:78:f6:c0:77:2a:80:f8:86:ee:d5:
9f:00:55:a1:c0:07:0d:9e:01:d9:50:50:62:c9:5e:
e2:fd:da:4d:35:2d:b6:6f:e9:cc:01:41:ca:5b:0d:
60:75:8c:a9:6b:44:cb:20:d3:8e:05:58:4a:32:59:
53:cb:74:77:5a:29:3a:c0:1d:ae:6c:ec:32:10:53:
39:a7:fe:5c:ca:2b:99:09:12:e9:08:ce:90:db:a2:
3b:4e:ab:c7:89:f3:59:d8:b4:50:76:67:c1:12:ce:
ef:c9:e9:c0:3c:eb:ff:76:3d:0c:71:9b:bc:9b:40:
43:5c:1f:09:a5:c3:05:be:3c:e2:bc:2a:4d:38:01:
c1:76:9e:48:86:c4:5c:d5:fc:9c:fb:a1:d3:5c:fa:
43:87:94:bb:56:f1:74:fe:0b:3f:e3:c6:27:e1:7e:
31:76:ff:55:5b:b4:fe:74:fa:bb:21:6b:9d:a9:af:
bd:67:1e:90:f0:da:47:8b:26:91:53:8c:32:d0:d0:
dc:1f:23:24:72:59:38:fd:90:34:dc:64:6b:ec:b2:
2f:4b:be:1b:7e:0a:ff:d1:8b:00:e6:f5:17:57:e5:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:39:CA:E7:2E:9A:65:08:1F:EB:10:AE:B6:6B:8B:23:EE:07:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:2b:95:03:b9:a8:7c:67:8c:b1:5d:57:37:14:9c:ea:c5:cc:
74:c5:fd:57:70:64:a3:3e:f6:88:ac:99:1f:9a:a5:04:51:dd:
28:cb:e7:e3:24:40:04:b3:66:ee:d6:05:f3:8d:45:db:96:dc:
42:4f:39:4b:3c:c0:73:08:5f:84:3f:0f:7b:40:c1:14:2c:84:
17:7e:51:6e:a1:e6:5d:d3:12:e5:25:e4:2a:9d:d4:ee:50:f7:
f5:b6:9c:8d:df:17:cd:81:23:92:05:db:3f:8e:de:76:a2:61:
f1:78:63:5f:7d:10:4a:64:19:8c:d8:4e:f9:a9:a9:02:91:b5:
e2:78:91:94:b4:65:fd:1e:d8:10:05:55:ca:c6:8e:51:c0:aa:
6a:60:80:b5:ed:89:0f:38:db:0a:a1:7a:6a:19:8d:e5:a1:81:
b6:58:36:a6:1b:75:72:e5:bf:bc:a8:84:c1:71:e3:25:b7:f9:
c4:84:1f:14:0d:27:86:38:59:52:19:10:86:de:fe:27:a4:a0:
52:77:8e:ec:4b:19:90:a8:d3:dc:3b:21:54:4e:6e:fe:b7:14:
8d:7b:ce:27:4f:5a:ba:df:0c:60:f5:3d:d8:4c:85:ea:92:ce:
28:15:30:89:de:ed:e2:7f:74:6f:e5:52:5a:69:ef:48:9f:20:
8b:7b:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:46 2025 by rpki-client