Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ad355b-68df-4df5-8a82-2b2abd8df92d.roa
File: f5ad355b-68df-4df5-8a82-2b2abd8df92d.roa (raw, json)
Hash identifier: xh0wrkCOoGSteU9QGb7z4mVNq6RaL5hHijSQ4c20f2A=
Subject key identifier: 98:69:DF:68:0D:A9:39:89:BF:C4:E7:3D:90:E3:31:88:6D:B2:2E:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 670215CB908C0B8C505A63118F49E151077C3669
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ad355b-68df-4df5-8a82-2b2abd8df92d.roa
Signing time: Wed 15 Oct 2025 21:38:14 +0000
ROA not before: Wed 15 Oct 2025 21:38:14 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.92.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:02:15:cb:90:8c:0b:8c:50:5a:63:11:8f:49:e1:51:07:7c:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 21:38:14 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=0661a70041d7f7d23e1ccec30fc7f5944f720a3d31caed0c675dfb83b5685cf3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:72:e5:a4:bb:eb:64:4b:e1:e9:3d:0d:df:
11:be:bb:42:fa:bd:a4:38:8d:c6:c1:42:74:63:e6:
65:8c:b9:46:40:96:46:fa:97:5a:d8:02:ce:09:70:
0d:58:20:7d:8b:6d:a9:fa:c4:97:f1:26:a5:65:d5:
97:52:56:22:c0:93:da:95:1f:4b:0c:8e:f4:0a:b6:
59:81:29:e4:b2:3d:ff:9e:53:f4:53:be:ab:f6:8e:
48:f3:a0:13:35:6c:ce:e2:fa:08:4e:ec:40:b8:f3:
63:93:44:cd:6e:d9:31:96:be:9b:60:e9:9d:5f:9b:
33:9a:3d:79:e8:d5:22:96:e6:59:70:ef:98:bb:46:
57:18:f9:8d:25:30:14:6c:2a:73:57:36:60:47:06:
cd:32:7e:b3:23:5c:ca:52:83:4f:f8:18:7b:cb:cc:
55:87:d3:50:6f:53:44:54:0e:20:eb:4a:d2:da:bd:
f2:e0:0d:d8:ba:82:4a:6c:a0:d9:08:7f:7a:fa:9d:
9f:c3:04:63:be:2f:92:32:b6:76:b1:b0:0f:ac:dc:
20:84:3f:09:1c:f5:1f:02:79:99:5d:08:e8:6d:41:
1c:1d:35:58:a1:87:36:45:b7:de:12:b8:a5:ba:ca:
d9:b2:c2:fb:35:ce:03:8d:6f:d0:3e:9c:ae:6d:cf:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:DF:68:0D:A9:39:89:BF:C4:E7:3D:90:E3:31:88:6D:B2:2E:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5ad355b-68df-4df5-8a82-2b2abd8df92d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.92.38.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:31:62:6a:e5:cb:25:76:5c:5d:16:74:00:a6:10:91:fe:a8:
6c:24:ca:ff:ca:36:db:70:92:d6:e3:43:4d:69:1f:0d:ba:d9:
45:1d:2d:44:68:3f:69:ee:47:b9:9c:e4:cc:d3:bc:43:98:a7:
16:85:7a:f0:e3:b4:31:55:7e:59:f6:1d:f2:ad:f6:70:11:6e:
7d:a6:32:cd:65:73:6b:80:2f:e5:af:20:87:ef:67:cd:84:68:
0a:ff:ed:e1:0e:da:82:c1:0b:b5:8c:78:4e:66:c0:70:f0:5d:
4c:77:1f:6c:36:72:cd:3d:34:5b:97:23:c0:31:56:5f:4e:0c:
65:e4:26:a4:3a:b0:73:1a:85:69:f2:8e:09:3c:6d:9f:e9:17:
ee:98:07:6f:52:78:d8:c8:78:48:09:cc:a9:67:d7:bd:bf:cf:
b4:d2:e2:0c:cb:1a:5b:84:1d:92:84:1c:0d:a6:bc:de:42:81:
e7:31:1f:58:4d:9b:cf:33:a6:3b:cf:b2:6f:64:0d:59:fa:ac:
74:8b:7d:68:13:d4:1a:5f:af:9a:86:2b:00:02:ed:1a:4a:12:
f9:b7:23:eb:02:26:5c:aa:dc:83:16:82:72:62:12:9e:db:d1:
a9:66:64:b2:88:9a:f0:30:88:b0:0e:f2:80:ae:61:0f:e9:a8:
ba:93:49:5e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZwIVy5CMC4xQWmMRj0nhUQd8NmkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MjEzODE0WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjYxYTcwMDQxZDdmN2QyM2UxY2NlYzMwZmM3ZjU5NDRm
NzIwYTNkMzFjYWVkMGM2NzVkZmI4M2I1Njg1Y2YzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0GHLlpLvrZEvh6T0N3xG+u0L6vaQ4jcbBQnRj5mWMuUZA
lkb6l1rYAs4JcA1YIH2Lban6xJfxJqVl1ZdSViLAk9qVH0sMjvQKtlmBKeSyPf+e
U/RTvqv2jkjzoBM1bM7i+ghO7EC482OTRM1u2TGWvptg6Z1fmzOaPXno1SKW5llw
75i7RlcY+Y0lMBRsKnNXNmBHBs0yfrMjXMpSg0/4GHvLzFWH01BvU0RUDiDrStLa
vfLgDdi6gkpsoNkIf3r6nZ/DBGO+L5IytnaxsA+s3CCEPwkc9R8CeZldCOhtQRwd
NVihhzZFt94SuKW6ytmywvs1zgONb9A+nK5tz7Q5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmGnfaA2pOYm/xOc9kOMxiG2yLhkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1YWQzNTViLTY4ZGYtNGRmNS04YTgyLTJiMmFiZDhkZjkyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADRXCYwDQYJKoZIhvcNAQELBQADggEBALYxYmrlyyV2XF0WdACmEJH+qGwk
yv/KNttwktbjQ01pHw262UUdLURoP2nuR7mc5MzTvEOYpxaFevDjtDFVfln2HfKt
9nARbn2mMs1lc2uAL+WvIIfvZ82EaAr/7eEO2oLBC7WMeE5mwHDwXUx3H2w2cs09
NFuXI8AxVl9ODGXkJqQ6sHMahWnyjgk8bZ/pF+6YB29SeNjIeEgJzKln172/z7TS
4gzLGluEHZKEHA2mvN5CgecxH1hNm88zpjvPsm9kDVn6rHSLfWgT1Bpfr5qGKwAC
7RpKEvm3I+sCJlyq3IMWgnJiEp7b0almZLKImvAwiLAO8oCuYQ/pqLqTSV4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:45 2025 by rpki-client