Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cabf8914-a66c-455e-b3c3-384f7a75c4a5.roa
File: cabf8914-a66c-455e-b3c3-384f7a75c4a5.roa (raw, json)
Hash identifier: uAQ+7+yF4oX58L6w31/xel7hQrl+0oCuork/0fSFpGo=
Subject key identifier: A3:3B:08:77:96:74:A3:93:3C:99:CB:35:02:98:AC:43:9A:3E:38:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E5FEA03C3235F45A5D00348EE94F185223228DC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cabf8914-a66c-455e-b3c3-384f7a75c4a5.roa
Signing time: Sat 04 Oct 2025 00:37:41 +0000
ROA not before: Sat 04 Oct 2025 00:37:41 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.174.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:5f:ea:03:c3:23:5f:45:a5:d0:03:48:ee:94:f1:85:22:32:28:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:37:41 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=d584ee53fc449d3c87b432c2f6cdae496b308f3d7cfd4d0f7fe552ccf8c74c59, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:de:04:33:90:35:11:eb:e9:1a:05:77:8b:
16:23:8a:0a:9b:e8:99:18:a4:81:3b:00:69:f6:db:
1c:26:b7:40:43:87:57:b1:2a:ba:a0:56:b1:a1:b2:
c9:91:d5:be:39:17:4f:53:88:71:e7:93:32:b3:b8:
08:27:c2:7b:af:78:49:25:a3:a4:70:73:57:57:ff:
2e:8f:55:ae:ef:83:25:16:b5:08:37:d1:ee:3a:8e:
b7:11:03:fc:9e:ba:b8:69:f2:21:55:a0:31:cd:3b:
b1:b8:5a:78:af:64:24:b2:c8:16:5d:c3:0a:97:32:
b4:de:3b:d2:90:8b:40:47:cc:39:34:d1:47:92:ad:
bf:5d:d8:46:e9:80:41:5a:df:2b:1a:64:10:bb:5d:
51:65:ef:3c:66:1b:c6:7e:2c:aa:3f:61:c3:00:ef:
1c:1b:2f:66:cc:48:f8:5a:ae:61:60:41:e3:00:a7:
02:b8:bb:c8:d5:72:90:2c:6b:43:25:76:6f:2c:7c:
9b:30:21:62:16:11:29:e8:35:99:52:0a:62:b3:5d:
8b:f9:61:f7:72:f6:3f:b4:0d:91:12:80:ef:34:86:
55:3f:5c:73:de:9a:87:16:c9:ea:77:80:83:7b:34:
15:22:f0:ee:e9:73:1c:3d:84:5e:0a:34:a6:de:54:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:08:77:96:74:A3:93:3C:99:CB:35:02:98:AC:43:9A:3E:38:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cabf8914-a66c-455e-b3c3-384f7a75c4a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.174.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1c:fd:71:e1:e5:15:9e:e0:88:03:64:42:8f:a1:fe:ae:a7:c2:
09:f7:4b:1b:ae:41:de:df:17:b1:f4:db:1f:12:82:43:18:a1:
9b:c1:80:e2:cd:01:cc:d5:79:dd:29:ff:3c:27:e9:dd:cf:b3:
4f:3b:7c:7f:d2:e6:d3:70:5c:12:e5:bd:09:f3:8d:19:95:6c:
36:84:b5:cd:48:f1:07:ee:01:b1:50:78:f9:c3:4b:6f:78:cc:
03:38:e3:d8:23:69:3c:ab:08:56:89:b5:e2:a4:2b:be:c7:27:
d7:80:c5:d9:0e:02:f1:f1:39:c0:e4:e9:c2:ca:d4:4d:a6:e1:
f2:41:e8:de:5f:e8:f9:e5:a2:0d:52:42:12:42:43:04:16:71:
7b:98:00:65:e2:62:2a:7b:64:5a:27:1b:7c:63:f2:9e:a5:f0:
28:e7:9c:53:1f:66:06:df:f2:99:fc:80:98:c2:af:79:4a:bd:
82:9a:7b:20:31:f2:92:11:e7:06:ed:99:86:63:af:e0:11:4e:
be:c5:46:b7:4e:14:60:62:ba:15:ed:00:a5:d1:8e:9f:e8:de:
0c:ac:27:d6:27:af:9e:62:ee:59:e5:45:d6:0a:b6:e2:f2:c2:
f5:50:a3:bc:a5:40:c3:1c:2f:55:9f:e0:73:0b:2a:34:03:6c:
fc:42:4b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:48:47 2025 by rpki-client