Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
File: bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json)
Hash identifier: h8gy2L7sLByaWh45ektTm15ndBTDEjWIsTocJdR2DEM=
Subject key identifier: 7E:AF:21:40:05:8B:FE:AB:7D:53:81:89:BA:92:60:CA:47:13:21:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 545C2940057286F45E96E642773384067FD3DE51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
Signing time: Tue 23 Sep 2025 00:40:38 +0000
ROA not before: Tue 23 Sep 2025 00:40:38 +0000
ROA not after: Tue 28 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.22.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5c:29:40:05:72:86:f4:5e:96:e6:42:77:33:84:06:7f:d3:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 23 00:40:38 2025 GMT
Not After : Oct 28 23:59:59 2025 GMT
Subject: serialNumber=b811071944610966687e27c76b134513e46489dd4c04bf390a8f4f1a93b39d8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b5:a9:ea:2c:c1:15:63:8e:d0:2f:ef:01:53:
26:d3:36:8c:35:e0:08:63:f0:94:a7:5e:c8:7c:cb:
95:43:2c:d6:c0:b2:10:a8:fe:e0:cf:ad:c1:af:3e:
fb:d3:8f:e7:e1:e6:3e:b2:76:54:6d:19:27:bd:ec:
07:6f:d2:ee:32:2e:07:d2:fb:6f:70:4a:f9:83:e8:
7f:e5:57:da:40:2e:45:f6:c6:bc:4b:48:4c:2e:c9:
bb:c5:f6:2c:bf:3b:c4:c1:d2:0b:82:1a:43:ed:7c:
35:c1:5f:2f:1e:c4:df:61:04:9b:f9:7f:40:31:cc:
8d:19:f4:31:77:a0:44:46:a4:eb:94:a9:83:ef:51:
e9:bc:fb:b3:ff:f9:cd:8b:79:81:3a:5c:5e:38:5b:
57:94:30:22:94:08:15:ac:0c:d7:85:d7:bc:8f:25:
76:35:8e:b4:6f:53:51:79:4d:e9:2f:a7:cc:f1:4b:
81:d7:ba:bc:24:77:f0:6b:ba:cf:9a:52:bf:c5:35:
53:0f:68:68:af:2c:e1:49:de:f2:3c:13:8b:96:b1:
42:71:85:97:da:00:9e:1d:43:5e:c7:fc:7f:af:88:
08:4a:ee:c1:b3:4a:8e:16:2b:d3:fb:99:ac:66:4b:
3e:c9:ae:10:03:35:59:5d:ea:4f:d2:72:13:3d:0f:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AF:21:40:05:8B:FE:AB:7D:53:81:89:BA:92:60:CA:47:13:21:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:1a:e3:1f:0f:79:a4:0f:73:70:5d:0b:d5:09:fa:aa:71:a2:
ef:fa:c2:79:3a:7d:03:ad:a7:70:d5:a1:97:80:a5:90:19:14:
6e:6d:47:6c:a6:07:1a:c1:8e:1e:9e:d5:79:da:ce:74:60:5a:
3a:6a:40:11:e6:8d:5a:f6:93:ff:c1:a7:b9:b3:e5:79:64:88:
9f:99:39:cb:38:dc:10:3c:c7:6b:bd:cf:9c:f4:d5:36:17:e5:
29:ca:fd:b4:df:e9:81:ad:30:a5:05:f0:c3:0a:6d:85:ca:d4:
4c:99:0a:67:e3:93:bb:d7:ef:bb:2c:93:f7:39:18:a7:7f:5c:
c2:5d:97:a9:ad:19:dd:44:4b:79:e9:44:fa:58:ce:8f:4c:e2:
cb:c1:3a:3e:d7:1c:9e:12:23:d3:45:67:d3:8e:bb:71:4c:33:
60:8d:d0:10:f5:fb:66:f9:42:79:ed:8a:f4:e2:29:ed:2a:3d:
63:ef:54:75:3c:d4:d8:44:f7:2d:7d:48:b0:8d:17:d4:34:e7:
dc:59:01:de:ba:55:57:53:37:c3:b8:4b:47:dd:67:51:15:30:
96:7b:e4:59:5e:22:32:cf:d4:87:42:19:72:27:b2:5f:82:d1:
ca:eb:c8:b9:fe:7c:c9:72:46:90:fa:5c:8c:ab:55:b0:db:69:
cf:9f:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:52 2025 by rpki-client