Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa
File: d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa (raw, json)
Hash identifier: cRPk27smnGj/TAa32x4jAUHdoQXWd9gxlwer1kSk+qE=
Subject key identifier: 33:E3:CE:0E:35:66:FA:EF:85:7D:7D:F9:03:E7:57:AE:A5:2B:D9:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20B58330255301D408E8E2DCF67193B22FD0633E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa
Signing time: Tue 11 Nov 2025 01:01:46 +0000
ROA not before: Tue 11 Nov 2025 01:01:46 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.178.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b5:83:30:25:53:01:d4:08:e8:e2:dc:f6:71:93:b2:2f:d0:63:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:01:46 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=b4f5bdee7760da923d83066a72a67ab39b816091b336ed7c88c18ea16dbe297d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:d0:ef:6b:07:fe:f3:1b:81:4a:7c:24:0c:
11:ec:4e:63:23:14:9f:3d:98:2c:7b:21:57:d5:b4:
73:0e:b4:c6:4a:05:20:ac:2b:15:86:b4:f1:0e:b1:
c1:6a:47:08:8a:66:de:6d:ab:46:64:64:c6:10:48:
6c:c5:b3:0e:e8:5d:96:94:16:4c:df:6c:58:f0:6c:
ad:8b:e6:95:d2:d9:07:e6:e8:3e:a4:68:95:f8:31:
14:a9:3a:36:0b:3a:a9:6f:c0:33:da:ec:b0:85:f3:
f9:dd:72:9d:94:2f:d3:df:51:b0:af:54:91:9c:1c:
ac:3a:33:b4:5e:c5:2d:9e:0e:37:b8:3c:d4:84:dc:
a3:79:48:63:c4:03:11:f9:15:be:4a:41:21:42:f3:
9c:fc:46:25:d7:ce:fe:31:89:38:83:1b:4a:0e:6e:
80:cf:89:c8:75:ec:2d:a8:a3:b5:5f:bd:95:36:06:
5c:aa:c9:27:fd:e9:8d:22:71:65:fe:4d:6c:42:b2:
47:34:68:7c:27:49:9b:0d:6b:bc:5c:5f:61:66:cc:
c7:00:67:b3:7c:e2:d0:75:85:4e:84:c2:f7:c0:4d:
3a:46:4c:a1:4c:90:32:4e:85:ed:cd:fa:05:d0:1d:
a4:e2:06:c3:60:a3:4c:66:cc:37:ae:5c:fb:3c:53:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E3:CE:0E:35:66:FA:EF:85:7D:7D:F9:03:E7:57:AE:A5:2B:D9:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9a6d2b4-6eb6-4846-9180-7b5ff8440cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.88.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:40:0e:b8:17:ad:58:2c:ba:82:88:64:98:59:0d:e8:0f:a2:
dd:20:c2:a2:18:b4:87:6f:53:5b:53:ef:28:45:a1:43:b5:ac:
e2:f4:bf:0e:86:aa:ac:15:eb:d6:3e:2f:08:15:31:3b:7a:f9:
b0:f8:5f:f7:66:54:4f:d9:cb:68:23:2d:27:38:a0:b5:79:99:
f0:09:74:b2:e8:86:87:fa:80:ef:f1:7c:f0:fe:f8:d9:42:48:
da:9a:6b:79:f8:74:4d:6b:27:f6:b1:5d:d0:2e:fb:e2:c0:f9:
77:a6:e8:71:39:16:45:a7:98:f3:91:74:eb:ae:53:de:88:c3:
f7:cd:3a:30:57:da:35:fb:75:f8:5c:f8:8e:eb:40:f9:05:49:
d3:7a:88:ec:b4:29:26:6d:02:81:30:46:88:84:21:03:f2:e0:
14:eb:56:74:94:26:b0:d8:af:ec:92:a7:01:73:d2:42:11:8a:
6b:a0:f7:c7:07:b9:cc:0f:fd:de:f7:b0:79:f6:fb:12:e4:e4:
80:09:d0:e1:a0:88:0b:30:03:8a:2e:ac:26:63:d1:f4:b4:51:
55:e0:9f:75:2a:d4:55:99:74:39:3b:9f:ec:6c:8e:f1:76:d1:
42:83:d1:14:dc:7b:22:7e:9e:25:d9:c9:ad:50:ac:42:bc:02:
ad:fb:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:59 2025 by rpki-client