Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa
File: c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa (raw, json)
Hash identifier: 56fWIBFjb1FFOF+mpnL4sI23M4YJwlBpPeEG8jTM8mk=
Subject key identifier: 14:78:3C:98:1F:1F:2E:1D:D1:8C:90:2F:85:5B:40:FC:20:B7:12:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 712529B35705E10E4E4CE1AC8855DB829BB9C1A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa
Signing time: Tue 21 Oct 2025 00:10:56 +0000
ROA not before: Tue 21 Oct 2025 00:10:56 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:25:29:b3:57:05:e1:0e:4e:4c:e1:ac:88:55:db:82:9b:b9:c1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:10:56 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a965f23db78aa463557c6d1a90132a5e0886a925264042c840fcacf273619b2a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:e4:15:6f:29:fd:14:eb:e7:8b:8d:f5:21:
df:ba:49:52:9c:aa:6f:79:95:98:57:2b:70:3f:a3:
17:2a:a7:1e:d5:28:fc:4e:7f:cf:f6:8c:dd:6a:1b:
f7:1f:30:46:eb:e3:02:33:5d:31:23:6e:a5:6f:5b:
fd:bb:57:f2:33:80:6b:d7:91:cb:d3:05:d9:2e:c6:
89:85:ac:3d:9f:aa:b3:b2:44:11:c9:cb:58:bd:e5:
b6:2f:05:9c:a1:ef:7c:95:1b:70:5b:58:ac:b7:f8:
c5:99:cb:63:68:86:aa:70:16:cc:e9:0a:23:44:cb:
68:12:3e:6f:b7:36:fb:1f:cc:3c:d0:30:d0:4f:b0:
dd:97:1d:63:62:91:a7:85:62:0b:15:ac:5c:71:3c:
4d:ae:9f:c0:cd:bc:90:88:46:9c:81:9f:0c:b4:ab:
f8:ec:80:95:18:41:ff:c8:a8:05:fa:ef:50:40:ed:
f5:aa:d6:39:ee:a1:ba:e4:7b:fc:0f:f2:38:df:8f:
60:88:b8:88:f8:9c:ce:e5:b3:cc:c9:46:c6:ea:c4:
88:76:ee:39:91:ed:38:55:c5:55:82:4b:45:fc:85:
cb:80:48:16:f3:b5:6b:dc:bb:29:ab:cf:33:46:ae:
1b:68:ef:dc:31:b7:c0:b5:13:61:1f:93:42:6c:48:
8e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:3C:98:1F:1F:2E:1D:D1:8C:90:2F:85:5B:40:FC:20:B7:12:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c481cb37-8367-4bd7-867d-2d5dabef6aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.38.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f7:7a:83:7e:d4:b5:4b:ff:ff:10:8b:8a:d8:0f:1e:a5:d1:
b9:8b:f0:03:e3:fb:4d:14:12:79:e1:6e:41:3b:65:a6:26:b0:
f3:23:c4:e0:cc:38:43:6c:d9:33:38:07:84:70:22:00:9f:66:
fe:82:2c:08:3a:2a:50:cb:1e:f5:c0:9f:93:ce:63:eb:74:62:
df:dd:d1:8b:28:ba:e4:8e:18:98:42:bc:16:7e:92:d6:14:87:
9a:e2:0d:cc:69:28:d0:1c:62:df:80:7b:ff:fc:35:68:24:16:
51:e7:90:07:d0:9a:b8:c2:bb:e8:91:ab:1a:e1:21:23:66:de:
4b:73:45:c9:be:b0:50:9e:74:0b:9d:d0:35:4d:51:0a:7f:ac:
19:11:08:89:b9:50:26:44:c2:7a:d1:fd:03:fd:e5:0a:04:fc:
0b:50:42:53:06:bb:90:c5:57:0e:e9:d5:0b:64:a8:a1:b7:03:
1d:c6:25:22:c5:3f:c4:70:4a:b9:b7:5f:4b:69:cc:e3:a9:37:
f6:64:a9:4c:e8:04:cb:ee:e5:e4:bb:2a:d0:ce:26:92:8c:a4:
29:d7:18:75:e9:41:2c:2d:58:cb:9b:a3:e5:6e:20:5b:89:8b:
cd:a1:c3:02:5e:fc:ae:ee:68:0a:2c:72:56:be:d6:d4:3d:fa:
01:b7:1e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:28 2025 by rpki-client