Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa
File: f971657a-2046-44fe-8bba-1d18534128a9.roa (raw, json)
Hash identifier: Zc8VhUJPRjKOkjt3jScFMwX6TMAVjXCdumGwkxFjEbg=
Subject key identifier: 07:1A:8D:83:81:83:D4:16:E6:82:34:43:DE:40:78:D0:D0:68:82:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69D96C35FD51FAAF8D7B9A444AC7269A6A00CB27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa
Signing time: Wed 12 Nov 2025 00:50:49 +0000
ROA not before: Wed 12 Nov 2025 00:50:49 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 5.179.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d9:6c:35:fd:51:fa:af:8d:7b:9a:44:4a:c7:26:9a:6a:00:cb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 00:50:49 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=b43143cedd4a97fdc2e21aaf00ef5b43828b751fbee4a367e36683c49c7bdb2d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:86:81:a7:6d:75:db:32:27:46:a9:18:ea:
81:20:cd:1c:55:51:aa:7d:0e:e1:57:ca:ab:92:5d:
bb:4f:24:01:4a:1f:bf:88:d4:2d:96:f5:0c:d1:91:
54:79:fd:a8:c7:cd:45:e1:92:e2:87:d5:2d:ec:6e:
df:fe:64:61:0d:55:12:cf:cf:de:7f:53:8e:0a:29:
2a:92:a9:53:bc:a9:36:a2:45:98:e7:b0:b0:34:bb:
56:f2:61:1e:61:7e:90:5d:06:d3:5a:00:d3:e0:fd:
79:98:0f:9b:9b:44:17:73:36:b4:ba:90:a0:2d:a4:
50:d2:e3:51:ec:42:37:58:34:26:c8:33:48:86:b0:
64:9f:54:dc:1e:24:8d:f1:4b:1f:cf:73:00:4a:98:
69:f7:67:43:35:ee:dd:58:96:d8:f5:7f:42:4b:74:
8d:91:8f:f9:0e:32:0b:b5:ca:20:77:70:37:20:e3:
0d:2b:2d:12:1e:08:9b:f3:f3:9f:99:2e:5f:3c:0b:
fe:18:bb:c4:01:e5:a5:58:65:dc:c1:05:d8:ab:02:
b9:90:94:9c:6b:5e:5c:31:c4:a9:63:40:b6:50:21:
65:c7:61:ec:ef:80:89:67:c3:fc:81:5b:61:ef:33:
f5:a2:c5:fc:3a:48:87:50:85:4b:9e:66:9b:fd:1f:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1A:8D:83:81:83:D4:16:E6:82:34:43:DE:40:78:D0:D0:68:82:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f971657a-2046-44fe-8bba-1d18534128a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.179.96.0/20
Signature Algorithm: sha256WithRSAEncryption
34:ed:38:69:c8:24:a9:a0:96:ad:55:05:ae:d4:a9:fc:14:1a:
e1:a9:19:99:6e:7f:5e:0a:32:00:42:bb:15:2b:ac:69:45:36:
b0:10:39:b2:b5:c5:c0:8d:c7:f2:55:dd:be:52:64:b9:2d:30:
c3:d3:a8:29:e5:b7:d2:10:2f:96:9a:b8:d5:0a:a7:3b:41:c8:
7f:f6:26:46:57:c2:bf:3a:87:d8:f7:8c:a6:5b:47:a6:d9:e2:
bd:0c:23:6a:2c:20:18:65:b2:ea:96:0e:12:12:a2:90:ef:7a:
13:98:32:3d:56:fc:e9:7f:6c:69:6a:50:b3:21:60:aa:4e:e8:
e3:10:8c:02:0e:5c:68:0b:8e:fb:7f:83:2c:4a:7f:10:c8:4f:
64:aa:d0:bf:00:0b:11:87:52:6a:fd:59:6a:f9:ef:ce:a0:6d:
e9:bc:88:05:bb:3d:6c:83:0f:c1:88:8b:eb:ef:83:16:65:3c:
0b:7c:f6:e8:ec:1a:8d:8f:a8:1d:49:09:5b:fd:e4:d4:a3:97:
0c:d8:df:93:37:74:a9:89:7c:45:60:fa:bc:ba:b1:0f:ba:1b:
68:0e:9e:5c:c0:46:58:a5:6f:d2:be:0c:77:fa:e4:4b:bd:84:
67:83:fb:bf:13:59:c0:dd:cd:84:c4:df:df:4a:17:d1:b0:80:
d9:15:04:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:44 2025 by rpki-client