Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
File: ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa (raw, json)
Hash identifier: P2dlz9AjzEfBJ8rIV8nek1HaCqgEWvem0gDFhxOXIkk=
Subject key identifier: 6E:90:3F:B8:FC:02:8D:26:F0:9F:D8:35:63:CA:D8:EA:94:31:A9:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71833C8EBE7BF00363B5253D46FC4C5D3643F156
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
Signing time: Tue 30 Sep 2025 00:01:19 +0000
ROA not before: Tue 30 Sep 2025 00:01:19 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:83:3c:8e:be:7b:f0:03:63:b5:25:3d:46:fc:4c:5d:36:43:f1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:01:19 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=9b6156319f9dbcafc6193ec9080aa5abe108e3a25dbd4f93fd42bc2e831be98b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:15:b0:8e:9b:f5:8c:08:d8:2c:2e:e0:e4:53:
17:f9:81:f5:55:68:29:48:c4:98:11:d8:51:a0:f3:
6e:74:80:00:e2:6f:c8:45:be:7d:81:72:57:94:3d:
2e:e3:97:52:d9:58:5a:2f:f3:e6:2d:89:7d:e9:b1:
38:0a:81:ab:9e:34:f7:69:69:ce:f8:9c:c3:40:60:
96:b2:c2:c1:d0:43:37:22:8e:d7:41:51:53:18:13:
7c:3a:21:a2:44:61:90:d1:fd:74:c8:83:49:10:75:
c0:0c:b9:c2:5c:a8:8e:5d:94:90:47:df:00:85:56:
46:fe:92:fb:d6:ee:5c:15:bc:dc:e7:58:9f:35:2e:
03:18:7b:e6:9b:c3:ec:12:46:c8:6b:b8:bf:ad:a9:
9a:5f:8b:65:3e:5b:f9:03:76:42:da:18:b0:dc:d5:
d2:91:ae:b4:1d:3e:50:d6:13:2b:aa:c9:0a:3e:ea:
47:c5:39:8f:d4:84:a4:8a:c4:e1:4a:d0:e5:04:9f:
5a:b7:60:e4:2d:a3:61:67:89:8a:7a:ad:36:d8:ba:
2d:fe:e9:ee:ad:f6:f4:bb:e0:37:a3:79:34:2f:79:
fb:f7:3a:9f:fa:40:29:ad:88:ae:bc:b1:47:e9:2c:
82:f8:6c:be:42:7e:13:91:e3:8f:d8:f4:ad:4f:5c:
9b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:3F:B8:FC:02:8D:26:F0:9F:D8:35:63:CA:D8:EA:94:31:A9:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:45:f8:ba:64:2d:33:37:fe:20:12:7c:27:72:0c:7e:9f:89:
87:cf:76:a1:d6:43:45:ee:3b:ca:b8:1c:14:d0:f2:0d:54:cc:
fd:b8:d0:1b:83:26:21:b4:98:72:37:f5:bd:cc:0a:b7:6a:ca:
51:8b:df:e5:73:15:cf:37:05:11:a6:f9:dd:03:74:61:e5:5c:
b6:d6:eb:33:69:4d:5d:27:56:cd:cc:65:95:3c:84:12:73:c0:
d0:2d:16:1c:11:4f:cb:59:61:8f:a0:69:9e:d6:72:f7:4b:eb:
08:56:d4:74:00:17:7f:9e:b9:65:0d:f0:d5:17:0f:d6:43:c0:
4f:81:7b:78:63:31:7e:53:bb:1f:bd:67:db:61:1c:0e:a5:92:
e0:18:bc:df:cd:52:9a:59:57:b7:7c:b5:a3:fa:87:b4:74:61:
72:8e:66:0f:f9:2a:53:c3:d9:41:2e:ff:96:f9:60:f4:d8:27:
c8:6a:db:68:ed:a9:e9:97:9f:5b:5e:f1:28:76:9c:da:e6:f8:
7e:48:86:d7:1f:3b:3e:dd:be:56:5d:e2:70:5d:37:bc:85:39:
c3:df:e0:3b:fe:90:e5:36:23:e2:79:e9:93:b9:a1:f8:34:53:
08:c1:4e:dd:c3:e8:14:b8:e0:a7:b4:fd:53:bf:17:95:f8:39:
5c:83:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 20:22:10 2025 by rpki-client