Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6cfdd7-e440-4f46-badb-238f56e1aab4.roa
File: bc6cfdd7-e440-4f46-badb-238f56e1aab4.roa (raw, json)
Hash identifier: xLvJJMxhKAe6cQIAlsSZIET2Zo33J1J+HddDUd/qEu8=
Subject key identifier: 84:9C:5C:0B:C4:EA:61:E1:2B:AD:38:5A:32:AB:A4:6C:1D:DD:0C:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39294F21968175114BEEC004500E02EDE4D67BD8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6cfdd7-e440-4f46-badb-238f56e1aab4.roa
Signing time: Tue 11 Nov 2025 02:11:12 +0000
ROA not before: Tue 11 Nov 2025 02:11:12 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 123.200.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:29:4f:21:96:81:75:11:4b:ee:c0:04:50:0e:02:ed:e4:d6:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 02:11:12 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=525c3c20887f7e66d3c914241890ea7419d877190c0d23e7b8408685187fa107, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:0b:79:c3:06:20:71:12:ee:8e:74:be:83:
fa:7b:16:36:41:83:02:55:82:9e:e7:37:58:b2:d0:
57:d4:b4:6a:d2:f4:02:d0:54:63:56:4d:3e:8c:ad:
47:6a:a1:6c:d2:e4:9e:bd:94:35:40:b8:8c:00:59:
c2:14:05:94:5f:a9:cc:61:9c:ce:3d:c6:db:57:12:
5b:24:53:e5:07:6f:84:f0:37:63:ee:7e:9d:63:fa:
a3:9d:ee:e8:96:7f:77:f1:a4:49:fc:9f:53:ec:b5:
31:a6:ce:c6:f0:1e:da:74:92:63:17:cd:4a:3f:83:
3b:38:c4:d4:47:b3:37:b4:4b:d7:c6:73:e9:3d:09:
49:4f:a2:25:ab:30:c3:ed:86:1f:5d:bd:83:76:69:
39:0e:b8:c6:14:b7:ab:9c:37:b4:cb:62:c9:96:81:
c0:3f:ba:16:04:45:4f:77:f9:89:f0:89:b7:8d:ff:
e9:d8:12:1a:5a:c8:e6:a6:ca:71:29:38:a6:47:b8:
2f:7d:66:79:77:b6:da:bb:75:54:13:76:89:b2:4f:
7d:67:09:1c:6e:0d:06:d3:7b:19:b5:2e:10:8a:9d:
72:5e:2c:40:c3:90:31:ed:c0:16:8d:ac:ea:20:c7:
8a:eb:c1:35:0d:23:cb:2d:4a:82:97:85:1c:03:5a:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:5C:0B:C4:EA:61:E1:2B:AD:38:5A:32:AB:A4:6C:1D:DD:0C:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc6cfdd7-e440-4f46-badb-238f56e1aab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.200.224.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:86:0c:69:0a:67:89:ba:d4:5f:84:a3:b9:16:99:80:21:c1:
6f:a4:ec:87:a6:9f:e8:71:86:09:61:44:7a:9a:97:20:8f:6c:
bf:a3:17:fc:27:05:0f:58:b6:7d:8d:4f:06:72:c8:97:cb:bb:
3e:84:7b:e6:ff:00:17:5e:f7:04:34:43:f7:ae:53:dc:36:1c:
bc:26:7b:d5:2a:de:12:a0:0e:ee:6f:35:f4:7c:6c:b8:57:5b:
66:85:1d:80:07:fb:1c:7c:99:53:34:fb:40:82:7d:eb:f5:d9:
e0:0b:8c:37:ea:aa:f4:7b:70:ec:f1:bc:ff:cf:45:20:cb:9a:
db:68:97:00:da:8d:11:e6:ad:b8:98:c4:b8:c7:8f:fe:f7:7b:
1f:20:23:da:b6:3a:84:01:69:92:3e:43:0e:e6:bd:bf:85:3d:
69:4b:c4:f7:8c:c0:3e:43:2b:fb:4e:de:97:89:5f:65:55:01:
ac:91:c3:6b:61:b5:2c:72:b8:89:91:ff:47:00:7e:28:77:23:
2d:32:9b:ad:aa:79:35:f8:9b:49:23:47:cf:9f:63:d5:fa:f2:
88:68:18:3e:2f:4a:ee:a1:59:ee:61:27:cc:b0:d2:4f:9b:d6:
9f:b8:f0:d0:6d:b7:b1:7b:74:91:3d:7e:e7:64:1d:ff:98:b2:
97:c8:2a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:21 2025 by rpki-client