Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2e8cc38-d7d8-41cd-b83a-124c755cfd53.roa
File: b2e8cc38-d7d8-41cd-b83a-124c755cfd53.roa (raw, json)
Hash identifier: KvwBRIrJ56yBW619MVPTZ309oyDN5pfpyQ1bvuX21Hg=
Subject key identifier: 5B:4A:79:58:82:40:A1:7A:A0:72:92:3E:47:59:0B:00:A2:7C:B9:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41210F54B7C4695892F6600C7B269AD5D3016C95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2e8cc38-d7d8-41cd-b83a-124c755cfd53.roa
Signing time: Tue 11 Nov 2025 02:00:10 +0000
ROA not before: Tue 11 Nov 2025 02:00:10 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 121.91.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:21:0f:54:b7:c4:69:58:92:f6:60:0c:7b:26:9a:d5:d3:01:6c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 02:00:10 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=fc914807ad34e1b09271e3c814c7ac4e2e9b4d31aeac5e0aaa08359375506ac1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:93:89:1a:a1:05:97:d8:e3:9d:4f:e4:bd:0b:
f5:cb:db:ff:5d:33:60:98:03:af:9f:ae:fb:31:49:
02:56:94:6c:38:a1:d0:09:19:6d:59:68:cc:55:97:
24:1b:b2:3e:86:a3:3c:8b:00:42:71:84:96:7a:d2:
21:d1:68:80:55:a2:76:d3:6d:61:0b:e9:31:32:d3:
e2:c6:60:a9:3a:9e:95:42:9b:54:b9:43:2e:65:66:
4a:16:b3:7f:4b:90:95:a4:9f:78:b2:cd:55:9a:65:
a6:73:5e:c9:75:95:10:27:e4:9b:2c:c1:83:fe:db:
54:55:34:45:63:7c:7c:f2:c1:68:27:ee:e7:e8:cb:
bc:fe:ca:f0:6e:f2:b3:9f:8a:d8:17:d6:fe:a2:7b:
b4:9a:5b:cb:ae:44:d9:5c:9a:06:15:9f:4d:db:7a:
32:c8:db:79:96:9a:f9:ec:9b:70:67:2c:29:2b:68:
d3:b1:ec:cf:65:00:9c:11:76:b5:5e:a9:c4:fd:e7:
44:2e:2e:95:9b:ff:00:00:5f:44:a3:ed:12:85:ad:
cb:77:bd:e8:61:49:cd:cc:47:a1:fe:9f:a5:12:07:
4c:af:b2:fa:54:7c:be:7f:4b:0e:e3:ea:af:04:65:
05:c9:03:c2:6b:86:dd:98:21:0b:0b:1d:72:97:6b:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4A:79:58:82:40:A1:7A:A0:72:92:3E:47:59:0B:00:A2:7C:B9:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2e8cc38-d7d8-41cd-b83a-124c755cfd53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.91.128.0/21
Signature Algorithm: sha256WithRSAEncryption
13:f1:69:e7:20:c9:b4:03:c0:3d:2a:1b:e6:66:7e:05:ff:ee:
32:b7:f3:8b:50:f1:ef:7a:51:fd:67:75:0e:d7:11:50:96:a7:
50:b5:3e:d7:42:0e:5a:24:5e:d7:79:15:0d:3b:82:8a:d8:e0:
aa:d2:2e:1f:e2:d6:60:25:b6:4f:8b:66:70:d2:36:eb:e7:72:
03:ff:84:b9:79:50:51:d6:49:51:70:7c:0c:89:71:3b:18:11:
03:69:55:b6:d9:62:90:50:3a:70:40:e3:3e:ea:b4:b2:92:e2:
26:5c:9c:62:17:5d:62:2f:f6:fd:08:b4:7d:20:89:90:fc:40:
e3:b5:17:a0:29:d5:fe:36:64:6d:42:20:4b:91:a6:72:26:8b:
b3:73:df:16:59:c4:a5:b7:8e:6e:6b:eb:5b:0b:fe:01:62:a4:
72:6d:d2:3c:16:76:96:43:7f:8e:67:84:fc:31:8d:6f:a9:46:
f4:ee:b7:c2:36:53:10:e5:8a:1c:69:88:5c:d9:aa:79:0e:1c:
d7:7a:7b:91:9d:88:c0:b7:41:55:e0:58:db:33:10:8a:37:88:
80:c2:f2:a2:ba:56:a4:1d:0a:70:96:52:f0:5d:53:41:54:ea:
02:68:7f:8e:e7:26:2c:e1:99:bc:d0:25:e8:0a:c0:64:ee:85:
e3:d0:32:ea
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQSEPVLfEaViS9mAMeyaa1dMBbJUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDIwMDEwWhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzkxNDgwN2FkMzRlMWIwOTI3MWUzYzgxNGM3YWM0ZTJl
OWI0ZDMxYWVhYzVlMGFhYTA4MzU5Mzc1NTA2YWMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqk4kaoQWX2OOdT+S9C/XL2/9dM2CYA6+frvsxSQJWlGw4
odAJGW1ZaMxVlyQbsj6GozyLAEJxhJZ60iHRaIBVonbTbWEL6TEy0+LGYKk6npVC
m1S5Qy5lZkoWs39LkJWkn3iyzVWaZaZzXsl1lRAn5JsswYP+21RVNEVjfHzywWgn
7ufoy7z+yvBu8rOfitgX1v6ie7SaW8uuRNlcmgYVn03bejLI23mWmvnsm3BnLCkr
aNOx7M9lAJwRdrVeqcT950QuLpWb/wAAX0Sj7RKFrct3vehhSc3MR6H+n6USB0yv
svpUfL5/Sw7j6q8EZQXJA8Jrht2YIQsLHXKXa9UlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUW0p5WIJAoXqgcpI+R1kLAKJ8udYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IyZThjYzM4LWQ3ZDgtNDFjZC1iODNhLTEyNGM3NTVjZmQ1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN5W4AwDQYJKoZIhvcNAQELBQADggEBABPxaecgybQDwD0qG+ZmfgX/7jK3
84tQ8e96Uf1ndQ7XEVCWp1C1PtdCDlokXtd5FQ07gorY4KrSLh/i1mAltk+LZnDS
NuvncgP/hLl5UFHWSVFwfAyJcTsYEQNpVbbZYpBQOnBA4z7qtLKS4iZcnGIXXWIv
9v0ItH0giZD8QOO1F6Ap1f42ZG1CIEuRpnImi7Nz3xZZxKW3jm5r61sL/gFipHJt
0jwWdpZDf45nhPwxjW+pRvTut8I2UxDlihxpiFzZqnkOHNd6e5GdiMC3QVXgWNsz
EIo3iIDC8qK6VqQdCnCWUvBdU0FU6gJof47nJizhmbzQJegKwGTuhePQMuo=
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:18 2025 by rpki-client