Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8199865-7f35-4980-b711-3a4d02ddaab2.roa
File: f8199865-7f35-4980-b711-3a4d02ddaab2.roa (raw, json)
Hash identifier: 352wbiex7JEaAOyuPnC0gkZeFQEhxeo6+ZXctKUqLrQ=
Subject key identifier: 16:15:89:03:98:51:F0:88:56:92:30:D2:0F:B5:68:BA:72:5E:6B:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79B2EEBB4DFAAF059D7CA17BE640A01BB2FDAA6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8199865-7f35-4980-b711-3a4d02ddaab2.roa
Signing time: Tue 28 Oct 2025 00:20:05 +0000
ROA not before: Tue 28 Oct 2025 00:20:05 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 198.185.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b2:ee:bb:4d:fa:af:05:9d:7c:a1:7b:e6:40:a0:1b:b2:fd:aa:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:20:05 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=0e3fbe742116dc69e7fa8177893eb822a5b57876e18480d6bc3f6c1d43a5dda9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:9e:58:6f:c2:3e:8b:f0:c9:dc:73:92:4e:
06:a7:3f:38:5a:37:c0:db:58:fc:f0:47:19:39:94:
52:af:2e:1d:25:83:52:5a:52:27:1f:6e:de:6a:07:
7a:81:d9:fd:a5:84:51:c4:22:3a:19:a0:cc:63:e8:
83:d2:b5:c6:8e:33:51:50:bc:f5:6b:c4:23:b1:33:
ff:44:e7:05:38:24:27:66:82:df:aa:0d:b8:61:fa:
66:5a:86:d8:7c:53:dc:1d:3a:7d:c8:d5:32:11:82:
e6:b8:6a:33:15:9d:f4:c5:49:74:1c:ee:27:93:14:
a1:ea:01:f2:44:c0:2b:06:97:c4:a2:0f:74:50:ad:
db:cf:55:29:ee:85:34:f6:70:6b:2c:78:7f:9f:6b:
76:96:37:ca:3e:bf:0f:30:dc:38:19:4d:3a:76:d6:
4c:da:df:b0:36:45:f5:17:30:ab:d1:f5:3c:fe:19:
92:56:2e:1c:1b:45:ee:70:bd:04:90:8d:15:36:c5:
78:34:26:2c:96:07:72:e4:67:1f:6c:e0:c4:c3:ec:
2f:8f:fa:a6:82:92:a8:dd:95:52:11:73:3f:13:84:
ce:45:72:d9:ed:52:ab:5b:f5:30:e5:9c:ae:2f:9c:
e4:95:9f:ce:6e:6c:d8:5f:3c:45:d9:0b:b6:c0:79:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:15:89:03:98:51:F0:88:56:92:30:D2:0F:B5:68:BA:72:5E:6B:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8199865-7f35-4980-b711-3a4d02ddaab2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.185.0.0/22
Signature Algorithm: sha256WithRSAEncryption
99:57:37:74:81:9a:51:30:5e:48:6d:d8:90:f7:15:e0:4d:fd:
c7:b4:02:2a:a3:0b:79:f5:33:c5:1f:dd:90:8e:59:61:97:c2:
d5:7d:5d:2f:95:46:31:b8:dd:cf:d0:7b:76:6f:5b:ed:fb:a6:
ef:51:41:cc:88:b8:90:d1:a6:c9:bb:17:d8:63:0f:c8:8a:4b:
1e:ed:bc:aa:a3:54:c0:06:e7:f1:a3:8d:5b:fd:e6:a8:9b:54:
44:2f:5d:dd:b6:a2:4e:ee:f7:d9:e6:d4:d0:b7:fb:c2:b9:37:
7d:8c:5b:01:7e:8a:b8:cf:fa:1d:47:f0:cb:df:71:6d:0c:46:
e5:05:00:52:af:30:33:83:89:90:37:88:49:1b:cd:c3:71:42:
5f:e2:37:54:0b:c1:6c:2f:2b:03:9f:5c:fd:a3:b8:76:73:5a:
63:61:77:1c:73:63:1b:78:43:2a:27:c3:cb:35:1e:18:bc:43:
26:93:41:71:50:bd:2c:87:cc:a9:3c:c7:2f:2f:81:98:5c:53:
15:31:0f:30:0d:a0:b9:f5:6e:79:81:c5:51:dc:bf:81:0e:6b:
f8:0d:37:b3:ba:2c:a0:c7:bd:55:b8:bc:99:87:92:0f:d1:d9:
fa:15:af:47:e9:78:f2:24:34:de:9c:02:61:fb:53:f7:35:ac:
c0:27:22:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:47:58 2025 by rpki-client