Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
File: 1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa (raw, json)
Hash identifier: yimRLPa3H2oWEDnpX4JywmEyP66X2fwyzIK42pp32Js=
Subject key identifier: 9F:16:93:02:5D:96:79:F3:8B:F4:33:69:2A:58:2A:F5:D1:60:7E:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4513171F4183895E3FDA8C4315EB985216C61D6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
Signing time: Mon 29 Sep 2025 15:13:33 +0000
ROA not before: Mon 29 Sep 2025 15:13:33 +0000
ROA not after: Mon 03 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:13:17:1f:41:83:89:5e:3f:da:8c:43:15:eb:98:52:16:c6:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 29 15:13:33 2025 GMT
Not After : Nov 3 23:59:59 2025 GMT
Subject: serialNumber=3b4d7c3db03020090d0bc4fe560e833d88cf09a035d1b7e02a413a04d449ea29, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:c1:8c:85:cb:bb:5f:5c:38:9f:91:ce:1a:
e7:f5:7f:9b:4f:52:cb:bf:13:89:9a:7e:ff:f3:82:
59:1c:33:50:22:6b:b5:cc:a8:3a:d9:35:ea:da:c1:
4b:c1:bf:81:87:c3:28:4f:e6:5c:7c:70:70:49:a3:
8c:22:e1:65:f0:e1:03:c0:8f:df:7e:60:e9:2e:16:
33:fe:a8:e6:ea:71:fa:6e:90:94:98:56:7d:3e:cc:
c3:ab:9a:33:af:f2:7c:c7:1a:cb:da:a8:7f:a4:29:
ce:58:2a:87:13:63:9b:3b:c8:4e:84:0f:3f:64:8f:
01:f0:52:b7:5f:96:73:c1:b4:10:3a:ed:c4:bb:43:
c7:be:13:d1:df:12:03:d3:93:f1:16:a2:80:f6:c9:
bf:f7:5a:13:f6:7e:e0:23:50:48:9a:82:ac:f3:01:
58:40:86:25:58:05:9b:36:74:02:66:0a:08:64:ce:
2b:ce:76:3c:7c:c5:2b:72:73:c8:da:a2:9b:8c:5c:
ff:12:03:d0:1c:93:70:bd:6a:30:09:ec:f4:95:08:
2e:ba:e2:b6:b6:d7:49:89:0c:f1:70:c3:1f:e5:78:
22:ca:98:21:60:6c:9f:82:3f:30:53:60:3c:c4:e0:
2d:af:3c:3b:37:6d:08:48:49:21:0b:ff:f4:93:c2:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:16:93:02:5D:96:79:F3:8B:F4:33:69:2A:58:2A:F5:D1:60:7E:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:d7:73:01:1d:ea:6d:3b:d5:42:90:6c:79:21:e1:51:4f:8b:
7b:7b:83:0f:dd:b7:f9:3a:b5:28:f5:78:7c:15:c6:8d:5f:ca:
48:6e:01:e6:78:82:09:74:41:d9:88:66:d9:1c:de:12:3b:17:
7b:d1:7a:8e:88:65:d8:79:9d:01:bc:da:e9:2e:28:f1:cb:65:
35:97:86:d9:8b:62:64:3a:16:25:7d:1a:16:c9:93:e8:fe:e1:
0d:f1:3a:85:f4:6b:a3:e1:1f:59:f5:c7:e3:1a:4c:f1:99:0d:
a6:ef:27:7a:71:7e:e2:53:3b:a4:bb:5c:3c:f4:fa:fe:6d:3f:
50:f6:42:89:14:b0:14:59:28:a9:38:bd:12:e7:32:69:95:25:
3d:a1:7d:b9:68:fa:f0:71:fa:a5:96:70:f2:88:a2:2e:14:de:
1d:2e:36:be:50:99:d3:dd:39:b2:96:b6:f1:53:24:9e:6d:c1:
85:b0:19:f5:1e:1e:a3:b8:60:3c:b1:06:ad:7c:9f:88:44:e5:
40:1a:fb:2a:ca:e6:0a:92:f3:b6:62:d9:d2:82:28:42:50:e9:
f1:fb:e3:51:9e:d2:15:7f:ba:58:5a:c2:97:b4:6a:69:da:dd:
4a:14:e7:a8:76:1e:9d:01:eb:a8:af:a4:7a:b8:2b:67:69:28:
4b:5f:ac:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 09:32:08 2025 by rpki-client