Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa
File: ab23bc26-73f8-48bf-a790-eb5365c00757.roa (raw, json)
Hash identifier: MCJA8ctHB7a0lQARXfM//rq9kyDwYViOMkDNcTvQUZc=
Subject key identifier: D1:2B:F8:57:8C:A6:A8:9B:C8:38:10:60:8E:08:6E:E4:4E:72:22:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E8E746997FC74E1CD699154455D7BC1B190CD50
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa
Signing time: Wed 01 Oct 2025 00:52:05 +0000
ROA not before: Wed 01 Oct 2025 00:52:05 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8e:74:69:97:fc:74:e1:cd:69:91:54:45:5d:7b:c1:b1:90:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:52:05 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=682cd55b856333a60f27a0203be5de0c6173cc8c695ed86da87674fa6358cd64, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:1c:4d:b9:b1:c7:54:e6:6d:86:74:81:40:
7f:49:0d:ee:7a:e9:39:96:8f:01:ed:a0:d1:2d:c4:
4d:e0:d1:fc:a0:39:83:02:65:8a:82:8a:95:a2:24:
82:84:20:4f:c5:2c:1f:f1:fa:12:7b:f4:db:5b:a3:
a1:1f:48:94:97:95:1a:13:51:55:99:2d:47:f6:37:
ad:c2:9c:26:8a:79:ac:1d:83:96:0f:12:fc:1b:74:
de:c5:27:9b:5d:42:9c:db:39:9d:56:33:8e:06:ad:
7c:6e:3a:31:4f:83:9b:89:17:b8:fa:0a:a7:c3:47:
2c:4d:5a:e3:d0:0f:61:f6:d0:66:4a:36:14:f3:5f:
fc:dd:e6:cd:93:60:4b:c0:83:41:42:28:5d:f6:61:
8d:b9:8a:20:e1:b5:c0:99:20:0f:b2:a1:dc:6f:73:
3f:32:03:a4:be:b8:89:3b:a2:df:52:e6:9a:59:fc:
e7:04:76:9c:fb:29:e2:b8:5b:c3:16:84:a6:08:82:
25:32:24:21:f4:92:91:0e:7b:5c:b5:b0:04:c2:bb:
8d:e5:8a:9e:8f:b1:30:92:8e:7a:d1:60:fd:f2:f1:
d0:e9:7b:0b:fb:b6:d8:fc:4c:f2:ec:9b:fa:59:e7:
ea:b0:c6:d6:4f:c8:25:2f:13:34:85:a1:c8:1f:e9:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2B:F8:57:8C:A6:A8:9B:C8:38:10:60:8E:08:6E:E4:4E:72:22:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab23bc26-73f8-48bf-a790-eb5365c00757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.79.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:df:4d:70:65:7b:8d:d3:b2:84:96:1e:71:85:ec:61:43:b5:
42:9c:07:e3:15:c8:2f:59:f1:65:8e:a4:7c:37:a2:0a:81:d3:
e5:39:af:a5:23:3f:cd:88:8d:53:45:41:71:0b:c0:d1:ff:00:
21:08:de:c2:6a:6f:bb:82:f4:c2:98:63:13:0f:e0:20:4b:f6:
e4:7d:66:8b:fc:34:83:aa:1d:fb:a6:04:11:a0:e7:1a:ee:c2:
d7:41:60:82:30:94:0e:3a:17:20:09:cf:57:42:a7:0d:cb:d1:
27:7b:58:b6:dc:65:03:a3:ff:7d:c7:55:e7:72:73:24:4d:ca:
26:59:e4:c1:1a:72:12:8d:49:ab:29:d2:24:25:bf:f6:c4:1b:
af:cc:43:49:28:a2:e0:7a:34:29:ab:38:aa:05:6c:d5:5d:fd:
7e:30:f9:ec:29:ea:bc:6d:d5:75:28:46:d4:fd:3b:61:bd:71:
4d:03:8f:ba:55:9e:c6:8d:f8:cf:05:b6:a6:92:06:88:21:94:
f5:72:d9:76:f9:21:c2:7f:a7:c2:cc:f9:e9:cb:65:74:4a:64:
7a:1e:8f:91:b3:fb:d5:03:2e:02:64:8c:a6:c0:d2:e4:17:25:
97:c9:35:65:c7:b2:ba:45:62:2c:a2:3e:79:d4:f9:b0:c1:77:
cd:58:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:57 2025 by rpki-client