Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa
File: c22f83f9-6806-4731-9ee7-da3a022533e2.roa (raw, json)
Hash identifier: 7dCfM+oa+DMmuOq7C2ozOu0Ul6I2DjPPACHX8giQDvU=
Subject key identifier: C1:08:90:14:CC:3F:2F:D7:4E:3E:DD:8F:FA:37:63:B0:F3:2C:12:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4524A7F6B6E1CE2D478A2FE6E478B8D504344F73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa
Signing time: Tue 30 Sep 2025 00:21:09 +0000
ROA not before: Tue 30 Sep 2025 00:21:09 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 170.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:24:a7:f6:b6:e1:ce:2d:47:8a:2f:e6:e4:78:b8:d5:04:34:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:21:09 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=d532759d7cd79cc671d55cc07197155e66b0bd6fd2de2e13f5dbeaf4f1a531be, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:af:1f:ff:d4:4f:aa:58:0d:24:b7:51:4e:
cc:85:ba:db:f0:6f:50:da:0e:41:bc:c5:cc:30:b5:
0a:35:9b:0f:39:c4:da:68:78:9a:d7:f0:b4:80:1e:
9b:bc:82:28:03:7e:4a:8c:cc:52:eb:4d:15:a6:a5:
ce:b3:81:03:78:93:2a:86:82:cc:f8:73:4c:bd:3d:
92:f0:4c:76:2e:4c:5c:ad:07:62:3d:a7:76:90:53:
70:9f:c6:1b:8e:8f:21:cb:b6:68:f1:da:a3:3a:43:
73:fb:ac:0a:ef:96:67:bb:68:ef:48:a9:f8:e1:fe:
0a:3a:7b:df:86:7c:1a:8a:ed:60:74:a2:1c:e6:34:
34:ea:74:b2:43:21:91:66:79:4d:8f:11:61:74:49:
ef:fa:77:bf:c7:bf:c3:37:86:df:2e:f5:ac:b8:a1:
f8:2b:f1:4a:93:6f:7f:a9:eb:ce:c9:f0:31:38:ac:
f6:79:f2:a4:a3:f9:d7:3e:0f:4c:ed:16:f3:d7:58:
37:9e:fc:1d:c2:8a:df:fa:fa:61:bc:37:f9:c3:2b:
df:17:85:8f:fd:fa:92:9b:60:6a:06:61:f9:21:ed:
ee:23:9e:56:28:1c:7c:13:52:cd:91:89:38:e3:05:
5c:06:0e:08:ba:42:63:6e:bb:4d:7f:ad:c1:b4:ce:
d7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:90:14:CC:3F:2F:D7:4E:3E:DD:8F:FA:37:63:B0:F3:2C:12:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22f83f9-6806-4731-9ee7-da3a022533e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.15.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:b3:d3:0b:62:8e:8f:3b:74:c3:be:24:3d:30:02:10:99:93:
69:e2:28:65:da:27:f0:76:ab:ad:69:a0:3a:a1:d9:32:11:2c:
71:33:bd:25:6e:4d:9c:51:36:13:20:ba:21:b2:f0:12:d8:7a:
a2:3f:5c:b8:2b:4f:6e:20:30:0b:b4:de:b3:88:5f:8c:e2:c1:
23:43:4c:ec:fe:66:32:ce:38:a5:dd:63:d6:f3:03:3b:4f:cc:
81:0e:ac:34:2b:0e:90:e3:73:7f:09:02:21:b1:8d:94:a1:79:
11:01:8b:fc:22:c6:cd:74:6b:a8:39:95:f5:af:55:c3:25:12:
0e:a0:27:37:08:80:30:03:3e:e8:d8:d4:74:ae:2e:77:d7:19:
e1:b6:c1:69:62:64:77:e9:bd:5d:5a:9b:ba:4e:70:5d:70:88:
c5:66:4d:45:f8:d2:05:2a:75:43:d1:1a:7f:f9:85:2e:28:2d:
67:63:9e:26:1f:95:93:0e:bf:05:7a:c1:d1:48:1f:80:54:29:
61:5e:e0:70:5d:eb:e8:44:4d:e0:d4:c2:92:14:7a:74:2c:99:
c8:20:b1:70:f9:29:4b:e7:e7:20:76:0e:26:17:30:84:9b:03:
06:c1:61:d1:14:60:ef:69:2a:3e:58:86:1d:24:d4:8f:d9:6e:
22:69:a5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:38 2025 by rpki-client