Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa
File: e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa (raw, json)
Hash identifier: aofzqamnZxvaqjDTtY80G5r7lm0+FVsjZAwNIFJMYyc=
Subject key identifier: B2:89:42:0E:E8:F1:D1:95:BD:44:93:19:1F:F4:2C:5C:B8:1B:BA:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09D81058C731C6E9828643052618F3983DDB3ECF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa
Signing time: Sat 15 Nov 2025 00:50:53 +0000
ROA not before: Sat 15 Nov 2025 00:50:53 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.5.178.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:d8:10:58:c7:31:c6:e9:82:86:43:05:26:18:f3:98:3d:db:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 15 00:50:53 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=f1a6fea77ebd71ad3659b7b1402313c79be80de04ef5e0824365d6a0cd73f530, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:ef:9a:17:f5:e6:af:97:99:0d:6f:56:eb:
1b:95:a0:93:6b:7f:d6:09:ef:3d:69:09:04:61:bd:
10:e8:dc:06:40:2a:b5:97:74:66:02:07:6b:f7:79:
76:22:97:61:fa:4e:54:6c:d9:c3:c4:4d:db:7c:d0:
91:b4:26:b3:60:4d:82:24:8f:26:27:dc:d9:c4:e6:
7d:ef:67:97:69:08:16:ea:a3:46:78:6f:70:81:a8:
86:91:6f:57:e7:d9:86:f7:c1:dd:c0:aa:16:2e:05:
54:fc:c0:a9:f8:4c:23:25:be:69:5f:3c:cf:a0:d5:
b9:1c:a0:17:6a:20:a1:b8:5c:32:40:2b:4a:2c:21:
80:fa:39:a6:98:00:d1:eb:83:fd:52:27:cf:86:1c:
fd:c6:78:d4:64:76:e1:37:e2:ac:de:00:4a:c4:1b:
78:6e:be:ba:eb:39:14:b2:4e:e6:dc:81:b4:17:dc:
37:02:b7:98:5b:ee:1d:6d:6e:6a:64:79:a3:cf:2b:
29:31:07:a1:2c:31:68:c4:df:56:21:44:1c:4c:a0:
2d:b5:13:a3:1d:1f:44:e1:3e:7d:1e:e7:03:3a:32:
fb:3e:e3:35:06:a5:16:2a:33:a0:b4:c5:45:27:4f:
db:9c:b6:ba:ab:de:81:b1:29:1f:92:b3:a9:6a:ce:
81:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:42:0E:E8:F1:D1:95:BD:44:93:19:1F:F4:2C:5C:B8:1B:BA:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6e768d9-afe4-43a1-9b88-2a57ab9d0e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.178.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:de:37:56:19:1f:10:fc:43:b2:0e:5e:ec:f8:99:ba:54:7f:
98:d2:89:12:ca:7e:bf:0b:1e:c5:b5:ef:db:46:29:56:7e:60:
6e:b5:1f:0b:c0:25:82:0a:9f:32:4e:d1:24:31:6f:3b:bf:57:
ae:c2:23:0c:e5:57:fd:d5:bf:9c:ca:51:9f:ed:29:6e:a4:1c:
8f:53:56:49:e2:8b:6e:fd:5f:6c:4e:9e:94:46:68:f0:c0:b9:
0a:70:40:78:04:a5:9a:a3:cb:ba:5a:30:8e:22:65:82:32:41:
11:e4:fc:87:2f:64:35:89:2c:fa:f4:ba:35:2e:ba:d8:49:19:
58:ad:13:41:e4:3b:e8:63:62:c6:83:17:48:6e:0f:9f:aa:33:
8c:69:52:2c:a6:36:6e:36:4d:be:07:de:f0:65:04:41:d5:9c:
94:dd:e8:17:9d:20:a5:4a:f7:f1:69:d0:e8:51:8a:90:56:f7:
29:2f:5e:d1:5f:6c:c1:fe:ac:26:cc:49:13:3f:8b:17:1a:b9:
e5:ca:72:7e:9f:a5:f9:fe:ac:a6:67:f3:e2:bd:76:9f:a8:7c:
82:ea:2c:09:fb:df:fe:3a:03:11:72:d6:c6:e0:8a:25:aa:a1:
38:20:64:1a:42:46:fa:4e:a5:41:96:b7:49:25:f3:6b:5e:e4:
90:2a:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:30 2025 by rpki-client