Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa
File: e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa (raw, json)
Hash identifier: dzYjDAw074mO0kuXsJQ3isSVVSlgocMfFZ9CVHSuOQU=
Subject key identifier: 80:7C:F1:DD:82:AF:A8:2B:C1:D9:81:F9:F3:DB:65:D6:D0:D0:C2:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A9EF0AEA12E7E162DD5030B6733665C0F09EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa
Signing time: Wed 24 Sep 2025 00:32:51 +0000
ROA not before: Wed 24 Sep 2025 00:32:51 +0000
ROA not after: Wed 29 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9e:f0:ae:a1:2e:7e:16:2d:d5:03:0b:67:33:66:5c:0f:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 24 00:32:51 2025 GMT
Not After : Oct 29 23:59:59 2025 GMT
Subject: serialNumber=36ed506175d196c0a07094f6fadc2ed4ed497a385f08c22ce03dfd110865c19d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:98:27:fa:81:70:3c:39:d6:bb:25:75:ff:e6:
fb:d3:e2:e0:ed:eb:a1:08:7c:19:d4:19:d3:2e:ef:
65:8d:71:73:26:ea:90:a8:19:12:2e:9c:18:a5:64:
37:02:bc:e3:ef:28:aa:72:d6:9a:1d:f4:25:85:57:
43:b9:75:3a:4f:2d:a0:97:d7:34:d8:05:55:7d:f0:
89:a9:22:6a:ec:ca:2a:c4:35:eb:8e:aa:7c:ab:79:
fd:f3:96:a5:01:18:08:ce:47:24:da:5d:2f:0c:03:
a7:dd:f2:99:6a:5b:c3:db:b6:c4:62:7c:db:09:05:
af:71:93:6d:78:ae:e4:9c:06:20:42:12:4a:f2:d9:
a5:8f:98:b1:8c:a2:13:cb:5e:89:c5:33:2d:4e:79:
ad:02:1e:93:35:9b:35:84:7a:d5:76:0a:a7:0d:65:
42:37:75:f8:49:b6:eb:95:3d:d9:2f:88:9c:bf:8b:
86:4b:bd:70:3c:5d:53:1b:ee:b3:63:4b:9a:6d:00:
83:d7:47:8b:21:57:d7:51:70:87:3a:70:20:52:08:
48:8f:ec:c7:67:68:0f:38:1d:92:fe:69:5d:85:ca:
53:d0:2d:cf:13:d3:10:f7:e0:08:27:3b:c1:8c:fc:
d0:5b:95:2b:e7:40:d1:f0:90:1c:43:dc:07:97:f0:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7C:F1:DD:82:AF:A8:2B:C1:D9:81:F9:F3:DB:65:D6:D0:D0:C2:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1012fe3-2b30-4243-b9d5-c2edc037d75a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.240.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:ce:d6:3b:56:04:4d:28:89:71:0f:a6:e2:1d:2b:05:fe:e9:
69:78:18:95:00:eb:ab:fa:83:2a:85:66:1c:f9:17:b5:c3:bd:
43:0b:1d:fa:04:91:9c:0c:52:a5:c1:e0:ec:fe:c5:86:d5:ac:
13:19:ac:36:a7:49:15:9f:47:81:2e:6a:6a:1c:ab:44:d7:dd:
21:d0:88:92:75:bb:c6:ad:b6:29:50:03:46:05:0b:58:9a:91:
06:72:6c:19:a0:36:a7:83:a1:42:4d:2c:6b:cc:f0:d4:59:7e:
49:97:d7:6e:fa:1b:75:b4:10:81:d4:78:ea:64:7b:3f:54:4b:
f7:92:4f:bd:7c:eb:58:07:d0:67:4c:c6:eb:f7:1a:b2:18:bc:
67:9e:b5:78:a7:a6:11:89:0a:e3:f5:e1:c9:ec:73:29:6b:e7:
d1:d2:4d:8d:39:aa:87:49:9a:92:b6:72:34:84:cc:60:8e:77:
66:5a:97:5b:0b:79:d4:80:ef:39:ff:22:28:24:d3:8b:8b:d7:
1d:ba:04:9e:59:6b:71:43:32:0c:3c:88:05:60:15:44:09:39:
72:53:dd:2b:45:13:de:be:36:fa:79:df:2a:38:22:d9:ad:0f:
f8:11:31:62:60:c7:68:ef:b7:42:86:6e:51:1d:78:34:90:d5:
f6:00:5a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:52 2025 by rpki-client