Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
File: 06bef077-f186-4620-b0e8-edae475c1fe6.roa (raw, json)
Hash identifier: Og/TZLgfTLZDuAhJaDwrEZINTUkWe8UVoj1uV8B0dhA=
Subject key identifier: 67:79:9D:39:97:D2:73:C4:75:82:9F:06:2C:C2:93:38:3F:AC:84:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A50370DF5381BB4414AD37F1849ABB14C0848C2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
Signing time: Tue 28 Oct 2025 00:30:47 +0000
ROA not before: Tue 28 Oct 2025 00:30:47 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:50:37:0d:f5:38:1b:b4:41:4a:d3:7f:18:49:ab:b1:4c:08:48:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:30:47 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=7f5f9b17551ce8ec4e3242ef2bfcf08e4b3fd024d96b762c4b26b56048c0abfc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:a4:49:e1:96:d4:82:a7:be:2f:62:c0:37:
fe:1e:4a:97:58:b5:2a:60:ff:07:f6:e0:c2:69:dd:
5b:73:88:3b:56:fc:18:a6:e5:08:c6:52:df:b1:7b:
ec:dc:52:fd:75:29:ef:4a:97:28:2e:ef:ed:64:11:
10:87:2b:bf:12:00:cd:f0:95:55:c4:aa:80:d0:5a:
10:d7:6f:6b:ae:46:af:4a:ce:10:d4:68:45:54:82:
55:d2:ea:46:9d:03:01:06:52:61:b9:54:06:77:b1:
b6:a1:f4:b2:79:c5:e2:9a:90:af:b0:e1:90:1c:f2:
15:e9:6e:a6:b9:c3:36:a9:d3:c3:94:be:80:36:ea:
45:b1:99:e9:f6:63:b2:02:cb:40:b2:7e:f2:26:e0:
eb:ce:ed:98:c6:84:e6:ea:94:4f:a4:07:1f:cd:6c:
74:0c:41:85:82:5a:7d:12:70:a8:22:ba:cd:cb:e2:
9a:95:db:84:97:dd:33:43:9a:13:9f:22:23:25:a3:
cf:67:32:a3:4f:a3:ce:79:28:b3:f5:da:6c:ed:0d:
5d:1b:f1:24:7e:2a:d6:18:fe:91:11:2f:fc:81:e8:
8f:bf:f5:de:72:27:3c:0c:be:b8:be:88:22:23:09:
8c:2e:d4:e5:81:3f:d3:9c:97:1a:98:19:74:08:47:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:79:9D:39:97:D2:73:C4:75:82:9F:06:2C:C2:93:38:3F:AC:84:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.131.0/24
Signature Algorithm: sha256WithRSAEncryption
70:22:2f:5b:28:ca:1c:6f:ec:fc:a0:3c:79:ca:43:e1:47:3d:
9c:11:41:be:98:40:78:79:f1:1d:f8:e0:13:18:f4:ad:19:55:
65:c6:30:6d:65:a7:f5:46:f0:2f:10:83:f8:c2:2a:3b:48:c2:
91:6c:72:56:d6:d2:35:d7:82:e0:17:7f:1d:14:d9:96:9b:a5:
a0:b2:71:de:9c:23:a9:e1:e0:20:59:43:ec:4a:34:dd:0e:a8:
56:2b:fc:2e:c1:42:c3:cf:72:58:f9:10:03:ae:4b:96:1b:01:
d0:9b:64:e8:74:ad:7b:be:3b:af:cf:33:12:e5:11:8f:6c:4c:
d7:74:43:b3:77:c4:e2:1a:f1:5c:85:6c:a9:fa:fa:99:a9:e8:
da:bf:88:0c:25:38:5c:cb:c3:fb:ee:5f:be:2e:27:18:dc:40:
55:10:e8:c8:33:00:3d:f5:6e:d1:81:9a:1d:7b:b6:e5:e0:3b:
45:51:85:8d:b3:b1:76:55:88:91:15:5e:de:4a:ef:93:89:0d:
88:79:14:87:66:bf:45:9d:84:6c:3f:8f:b6:30:2a:59:2a:f1:
43:fe:12:af:eb:da:22:a6:d7:4d:9f:b8:72:53:2a:f9:63:de:
23:2b:d6:78:68:3b:30:a4:6f:9d:22:46:12:dd:82:e0:19:0b:
a6:1c:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:55 2025 by rpki-client