Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc79231-5d39-4bd2-9e8a-70d0ec4734db.roa
File: fbc79231-5d39-4bd2-9e8a-70d0ec4734db.roa (raw, json)
Hash identifier: Ck3Jb0RcPTOisCzZC90xHZH40RPDceezabO43yTtkbk=
Subject key identifier: F0:A4:80:AF:F0:52:D9:99:EF:01:9C:56:E9:2D:E3:D2:9E:3D:98:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0814B7E07768BAE44F1256E66EB266DE4B674662
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc79231-5d39-4bd2-9e8a-70d0ec4734db.roa
Signing time: Fri 07 Nov 2025 01:00:06 +0000
ROA not before: Fri 07 Nov 2025 01:00:06 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:b7:e0:77:68:ba:e4:4f:12:56:e6:6e:b2:66:de:4b:67:46:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 01:00:06 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=8ddf0c3a3ff2728ae02d985e337c01ab7ae9d9891720aa78943cd98ed71c047e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ee:00:a6:3d:2b:e8:f9:a0:e0:8e:e7:a0:4e:
d7:74:e2:7f:93:dd:76:1d:63:54:95:3c:18:2b:17:
c8:3a:9f:47:76:d8:64:ea:35:95:4f:d4:37:94:40:
51:f2:e2:45:bb:9b:b6:b3:91:5e:84:56:c8:a9:02:
a9:30:b7:6b:16:8e:29:73:3d:ea:a8:5f:83:24:81:
a9:38:29:e3:37:2b:88:8f:9b:ab:46:f3:75:61:f6:
82:bc:da:23:1c:7e:4a:1f:fe:1b:e7:7a:5e:fd:ef:
fa:6e:20:2a:9e:0e:eb:d6:1c:ef:49:75:e3:a6:5e:
08:46:5a:35:6b:f1:74:14:21:bc:f9:99:8f:67:5d:
dd:d6:87:ca:ec:a6:19:1c:21:19:3c:9b:2a:cb:b0:
24:90:6b:22:08:f1:41:45:18:3f:30:c1:3d:39:b6:
6e:0d:8b:c8:64:38:df:3e:27:28:4b:71:b8:9c:98:
d5:01:d9:6f:ea:35:e2:c4:27:57:a2:97:db:6f:bc:
cc:3f:a0:dc:ba:f2:6d:50:88:c2:f7:64:96:7f:e8:
d4:8b:11:75:12:9f:03:50:3d:9e:0d:8d:cf:90:4d:
5c:c7:62:5c:48:f5:a6:69:2e:ba:ab:34:23:26:1a:
2e:48:38:23:00:af:68:bc:c6:05:10:a8:3f:b7:8d:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A4:80:AF:F0:52:D9:99:EF:01:9C:56:E9:2D:E3:D2:9E:3D:98:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fbc79231-5d39-4bd2-9e8a-70d0ec4734db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.26.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9c:e3:b1:d6:b5:50:5b:0c:2e:a9:f1:9a:4e:8c:71:4d:3f:
b2:89:5a:1d:6b:c5:e6:7a:d7:1a:72:aa:a7:24:23:c7:87:29:
12:64:cb:ad:75:ab:15:9f:70:11:49:05:9d:e8:8e:b8:9a:ea:
d6:f4:9e:b2:90:bd:ea:4b:ea:f2:ac:2a:a4:96:69:a4:16:03:
2f:70:22:5f:64:fb:d1:2f:a9:c6:46:8f:60:78:72:57:2d:7a:
15:ee:c1:ed:27:bd:58:d0:60:41:4c:90:dd:70:fe:23:9c:76:
52:fb:24:1d:38:ff:e2:5f:42:2a:26:2d:75:3f:a5:85:7d:5b:
81:84:06:d3:32:6f:e5:84:0f:8f:bd:5a:e6:e2:9b:83:e3:cf:
46:b4:59:e5:f9:14:81:2f:05:66:e2:98:29:89:cf:25:23:2e:
70:a1:bc:6f:42:af:f3:de:1c:d4:e2:49:13:fd:5f:ed:ed:a6:
88:f2:d2:aa:c3:db:6e:6a:a8:12:42:b2:70:ce:a6:b0:d8:1e:
1d:84:2a:a0:42:1c:3e:13:df:e7:64:75:95:4e:81:e2:38:89:
53:21:0f:53:26:df:37:60:cc:a3:94:8e:fe:2c:af:5a:92:8a:
6e:ea:3f:fa:cd:7a:32:d7:07:9e:09:0b:53:77:d0:03:ba:08:
a7:0b:12:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:30 2025 by rpki-client