Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
File: 7f655dc6-89d0-4748-9c62-d3bc957b920c.roa (raw, json)
Hash identifier: x5r7yoG9LiKq/EesMBcCDULVQZLPYWOr+SFr0cF5Qwg=
Subject key identifier: 96:51:A1:2C:F2:E4:95:76:4A:B0:74:BA:5B:40:76:6C:B0:65:D6:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 101FBE16B98CF00A3A66A3BEDC9FC7740A23A5BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
Signing time: Mon 06 Oct 2025 16:12:00 +0000
ROA not before: Mon 06 Oct 2025 16:12:00 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 44.223.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1f:be:16:b9:8c:f0:0a:3a:66:a3:be:dc:9f:c7:74:0a:23:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:12:00 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=4af0ec344c734464a52d93d7afb6b3f709be9e4276f40eb9ce6f3f1967f03eb1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:7b:79:81:f0:34:b6:bb:94:67:b8:1a:d2:
c6:52:bd:bb:8a:62:e3:a8:86:a4:36:ce:1d:44:53:
fc:3e:55:a1:29:de:23:5b:63:52:37:96:9e:66:70:
cc:e8:a0:d6:b6:60:5b:12:a8:2f:8b:b1:41:4b:48:
9e:d4:e3:4b:88:e1:02:f8:df:32:77:09:d2:56:ac:
74:6f:a4:76:b9:fb:3c:0f:4f:45:02:61:cf:3c:50:
df:f0:ed:72:88:c2:ab:0a:3a:15:2c:12:9f:0e:a3:
2d:06:02:19:e3:0a:77:93:a5:84:67:17:9b:aa:2e:
51:54:af:f1:32:d8:d3:5b:09:c6:cc:c3:1d:59:dc:
f4:3f:e8:fb:47:1f:0a:52:1b:1b:11:47:5f:2e:d1:
d1:a1:57:d7:b9:91:46:ec:ac:6e:2c:49:bd:04:fe:
ba:d1:90:94:39:ce:0e:a9:e9:70:f0:25:25:35:b1:
7a:b4:1a:44:2b:38:09:41:5a:78:cf:70:1e:91:d1:
cc:c1:ed:97:82:67:e9:42:4a:13:af:a5:88:a9:0a:
fb:57:73:24:31:dc:35:59:f6:87:5c:f4:5b:84:41:
0a:d8:52:42:fd:41:33:51:b7:03:56:39:9d:ca:d5:
c1:99:31:15:0a:c7:58:2c:a3:29:0a:cb:51:ff:be:
0f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:51:A1:2C:F2:E4:95:76:4A:B0:74:BA:5B:40:76:6C:B0:65:D6:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.223.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b2:3e:8d:f3:1f:7c:d9:1f:af:c1:60:f9:65:38:cb:7c:aa:
f0:df:74:0d:e5:18:1c:84:43:82:2a:0e:dc:f9:7b:e6:57:92:
95:f2:a1:a8:76:58:92:b3:1b:fe:fd:2e:0b:0f:a8:9f:70:24:
9b:3c:17:35:ae:37:ff:a7:65:d8:82:2e:57:68:39:8b:c4:39:
87:16:99:74:f1:f0:75:8d:d1:7e:8b:99:1c:eb:94:06:4b:c9:
a8:f3:03:06:dd:04:b6:83:61:61:ef:55:c0:d8:72:30:e1:38:
52:73:3d:4e:5f:c7:9c:36:6f:63:4b:b3:15:82:d0:c0:a5:5e:
aa:a6:73:bf:ef:b3:a4:df:43:0f:ab:4b:fb:8f:3c:73:1c:f3:
f3:54:9c:03:65:27:7b:e5:98:96:0b:bc:21:06:f6:fe:94:18:
2c:41:57:48:45:df:0b:68:b1:f7:d4:e5:28:6a:2b:33:f3:c3:
67:40:8f:be:46:36:8e:79:7d:84:76:40:0e:b7:ac:74:12:f2:
33:ed:3c:30:a2:79:0e:7f:6c:0e:58:8a:56:c8:2e:0b:f8:93:
3a:4b:a5:a1:e3:1a:ae:f4:b1:7d:a9:2d:d8:69:aa:c3:8e:38:
a6:f0:3a:6d:64:12:86:d1:8a:56:6e:de:48:b0:44:3c:03:94:
82:ba:d5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:18 2025 by rpki-client