Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa
File: a71a3d04-2b40-4706-a43a-9b48357fed2d.roa (raw, json)
Hash identifier: 1eD3JLfAnKytbIsGRaXxgkVJRCSJwmy1iaIu6F3RIjE=
Subject key identifier: 9C:85:07:03:4F:88:F6:DB:01:E1:59:89:81:03:23:DE:96:86:E7:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6187B83EC733646EB3C9737A6F75A9E55EFEC42B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa
Signing time: Sat 04 Oct 2025 00:39:03 +0000
ROA not before: Sat 04 Oct 2025 00:39:03 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 216.216.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:87:b8:3e:c7:33:64:6e:b3:c9:73:7a:6f:75:a9:e5:5e:fe:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:39:03 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=8174f19e286b0749993bd1e5821ba7ef52b037504910fb614028eadc162e9216, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:04:b1:d3:54:e4:00:43:da:71:01:e1:3f:
d7:cb:9f:5f:f5:92:84:30:d7:45:a3:31:1c:0b:87:
e5:99:6a:69:8a:fa:1c:9f:29:ef:8c:68:96:31:8b:
47:f4:83:b5:cb:36:bb:f9:bb:49:7f:1b:1f:ad:87:
ac:3a:bc:93:6c:23:b3:52:08:02:54:ed:11:42:b1:
b1:ff:10:63:ea:46:63:27:31:3b:7f:0c:80:f4:a5:
2d:89:b8:05:f4:f0:7c:0b:7f:84:5a:be:8f:45:8f:
bd:57:83:9e:49:ec:ac:cf:6c:8a:9d:38:f2:0a:f2:
3b:08:14:66:73:32:be:a3:f2:23:7d:53:63:f8:13:
c2:fd:6c:69:b8:43:70:ae:fc:71:ca:2e:c9:e0:da:
d9:20:5d:62:ef:27:20:df:d9:ed:48:16:9d:4e:d1:
21:c7:e3:2a:a7:f4:fa:8a:99:78:6c:fe:59:e3:32:
82:72:64:37:9e:89:32:64:c1:2a:e0:31:a3:2d:b7:
9e:dd:45:8d:a8:1a:4a:c2:3d:55:38:cb:8c:b9:8a:
63:39:7c:98:19:bd:1e:f2:be:d2:b9:8f:9c:16:8e:
0e:48:82:3a:e8:01:5d:d6:35:d4:14:f6:5a:ef:2f:
b0:a3:bc:f7:f7:18:e9:84:a9:86:37:57:cf:e9:9a:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:07:03:4F:88:F6:DB:01:E1:59:89:81:03:23:DE:96:86:E7:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a71a3d04-2b40-4706-a43a-9b48357fed2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.216.0.0/15
Signature Algorithm: sha256WithRSAEncryption
32:a0:03:9f:00:19:d2:df:5d:d4:6e:f9:92:ab:4f:b1:45:e8:
a5:fb:db:4e:e9:2a:ba:72:5f:15:d9:ff:04:2f:47:47:68:05:
e0:30:6a:65:f8:64:96:0b:10:05:00:6a:e8:67:80:5b:d4:72:
90:5d:91:c1:72:ce:b0:55:74:10:bb:43:86:74:ff:37:fe:4b:
ce:c3:3d:a0:6e:35:fb:68:5c:77:dc:2e:93:12:9b:33:94:d1:
b5:c9:23:71:c3:cd:c4:c3:07:de:1a:90:d1:be:44:b2:45:72:
7b:c9:77:49:02:b7:43:95:6d:fd:fe:63:08:8e:b0:14:64:80:
49:eb:66:41:cc:31:fe:30:f9:29:65:7a:ac:66:d7:99:bb:60:
9b:84:cf:1b:dc:60:65:75:3d:1d:fd:47:39:6f:c3:47:82:b7:
80:6b:8b:1b:6d:c2:c5:2d:42:7d:a2:26:9a:60:3a:c2:3c:f9:
15:99:f7:18:f7:2f:e0:a6:56:8b:d1:3d:1f:d4:f6:52:c5:df:
97:60:f4:d8:70:09:9f:a0:2e:8d:19:ee:fc:dc:01:e8:42:9f:
f4:ee:77:ab:f4:e7:59:3e:75:49:b1:f8:0f:f3:06:d1:a9:42:
73:51:be:b5:5e:44:2e:13:3f:7e:a0:91:c0:28:9d:5b:2c:73:
c1:0e:24:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:35 2025 by rpki-client