Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa
File: b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa (raw, json)
Hash identifier: cdpZGP5uDkFyhBP+vpsdNn7B3LFZnpYEJD23Q7Kx6WA=
Subject key identifier: 9B:FE:39:86:18:3C:AA:18:63:4D:16:F7:7B:A8:5F:3D:0F:C5:7C:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52E486420C56490E8B7D3C21A25413FB7521994B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa
Signing time: Tue 30 Sep 2025 00:11:56 +0000
ROA not before: Tue 30 Sep 2025 00:11:56 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 16.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e4:86:42:0c:56:49:0e:8b:7d:3c:21:a2:54:13:fb:75:21:99:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:11:56 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=cf06922605be5b8cac4450228022f776b8c780de6adca36fe6f9163ce861ee43, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:2b:e8:4d:48:56:b3:f3:95:b7:de:5f:6f:
df:93:e5:87:bb:9d:b3:9d:24:28:10:fd:88:b0:80:
c4:5c:6f:de:b2:48:34:b2:e1:96:3f:3e:33:fc:fd:
07:cc:7f:2d:17:a7:e8:73:71:7e:ec:8f:99:02:47:
11:ac:4d:95:21:7e:ef:24:cf:e7:bd:21:f4:ee:9e:
c5:a4:d8:2a:51:ec:98:6b:a6:4b:e0:53:66:4e:a7:
0d:50:bd:f4:bd:89:d2:c5:27:35:34:8b:56:e1:d8:
f5:6a:93:f6:80:6e:10:de:0a:81:66:e1:21:a9:18:
44:09:39:20:aa:34:3b:70:c5:0e:0b:6d:4f:30:b1:
ad:4d:4c:8e:99:f7:3a:f5:ae:0c:00:cd:d4:05:25:
39:67:4d:46:87:d2:aa:12:42:d8:70:7e:1a:8c:0f:
47:29:60:59:f7:09:9f:98:84:6b:2c:f9:29:20:89:
24:ab:56:c8:af:6c:1e:9b:fb:63:ad:87:08:a7:95:
ce:dc:2f:8b:1b:22:90:d0:13:ee:e8:95:4c:f8:c2:
e0:60:4e:3b:05:05:ee:cb:eb:26:bc:58:36:3e:a4:
3a:92:1b:9f:24:1f:7d:b1:ba:96:9c:50:4b:8b:c2:
4a:f3:69:05:f1:64:e5:84:81:76:82:8c:1a:cf:b0:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FE:39:86:18:3C:AA:18:63:4D:16:F7:7B:A8:5F:3D:0F:C5:7C:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9e2606a-70b0-45cc-a03d-b5a54fb9b75a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:0f:24:a7:ca:80:4c:32:e0:9c:4f:ba:6c:38:e4:7e:d1:1c:
0e:24:14:b2:48:f0:1a:27:88:24:69:18:60:16:38:ea:29:3e:
b1:25:43:18:9e:2e:a2:92:19:00:1e:bd:75:6f:df:f8:db:f1:
ec:87:d2:2c:fa:1c:27:7e:8c:74:fd:42:8c:1c:6a:bc:ee:f0:
13:64:ea:6e:05:37:5f:6a:93:28:33:77:ff:e1:88:55:5d:6a:
54:99:3e:c7:42:f5:1d:0b:d0:cc:d5:06:dd:83:a1:10:0d:ec:
45:e4:60:6e:a6:04:1e:e2:1f:b2:ee:d7:68:b3:0a:ba:56:2e:
50:fe:0b:db:c2:8b:81:e7:a8:a7:4f:a2:0c:58:c0:e5:b3:ad:
9e:38:88:0c:a2:e1:d8:8b:ee:9e:a0:b4:0c:61:63:39:77:8f:
bb:75:c3:a5:43:e4:dc:0c:c0:99:32:be:04:d0:58:43:28:d8:
95:f7:be:8c:46:05:16:57:a3:5f:36:9b:c2:1a:f8:aa:fe:58:
ce:11:be:b9:4c:fd:fd:52:34:57:8d:b6:6b:13:23:48:29:b9:
56:29:82:e8:72:eb:eb:45:ce:b4:8d:ca:7e:ce:b2:cf:d3:2d:
03:74:89:25:68:53:a1:cf:c9:f2:10:d0:ea:d6:d9:9a:93:29:
e6:70:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 19:51:22 2025 by rpki-client