Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa
File: 115d2414-46b9-44c8-b622-794869ddcee0.roa (raw, json)
Hash identifier: ka3LPlSyhRxUMvF1G8NVU4Zm/KlKNAujGXMDP/o1vJM=
Subject key identifier: 6C:B0:14:E6:05:1E:20:D5:59:34:8B:94:B4:08:3B:30:50:FB:7D:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 569FADE9E47F83A136F2448EC8DD5F9AFC3A0237
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa
Signing time: Sat 25 Oct 2025 00:20:08 +0000
ROA not before: Sat 25 Oct 2025 00:20:08 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 162.254.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:9f:ad:e9:e4:7f:83:a1:36:f2:44:8e:c8:dd:5f:9a:fc:3a:02:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:20:08 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=6029fcb522f82bbe46c2a03cf81ec4d9c0b3e9d5f3c205d61555bb5310456f64, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:9d:85:1e:a5:69:35:a3:b6:47:fd:24:ec:
92:8c:a4:90:e3:1d:0f:16:97:07:4e:0e:64:a5:c3:
76:8d:13:b3:ba:74:28:1c:5b:fd:8c:ed:af:81:70:
1b:b3:06:d4:85:98:de:f9:03:10:2e:13:05:5a:dd:
58:34:b9:53:bf:ce:fa:56:89:19:6f:6d:5f:57:df:
b4:d6:22:0c:30:cc:55:fd:3c:d2:c4:d7:c5:4d:81:
d6:a8:82:a0:a9:1f:02:d6:be:93:51:63:f8:28:ea:
44:de:18:2b:79:9e:62:24:9f:ed:4c:ac:b1:d2:c1:
3f:e3:79:eb:06:65:19:46:5d:16:83:1a:7d:1b:6e:
a9:17:97:f8:52:e2:88:67:da:c8:de:d9:bb:cc:12:
a9:d6:e3:c3:31:ef:fe:bc:28:b7:53:11:ae:84:f0:
6d:a7:38:4b:a9:9c:65:d8:dc:1a:3a:f9:45:c8:2b:
19:6c:f1:5e:a3:83:55:84:26:9d:d6:81:50:aa:4f:
18:40:dc:f6:d1:fc:0a:f9:4a:88:3a:50:f0:b0:0b:
13:0c:01:5d:ff:99:f0:43:74:97:55:d2:81:46:71:
65:35:97:db:f0:26:51:ea:b5:85:c5:c3:f0:90:7e:
04:1d:34:fe:0f:5e:45:88:ab:18:de:49:fa:42:1d:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:14:E6:05:1E:20:D5:59:34:8B:94:B4:08:3B:30:50:FB:7D:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/115d2414-46b9-44c8-b622-794869ddcee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.254.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:83:0a:af:16:30:8e:a2:93:43:75:7d:13:ff:0b:75:ef:6c:
94:18:91:90:c8:1d:d9:cd:be:06:c5:ef:cc:d2:7e:38:75:70:
29:32:9b:5c:a7:74:0d:b0:5c:06:8c:d2:7c:01:6f:da:e7:ff:
be:f7:e9:e9:8d:45:88:64:67:85:3b:19:d0:fd:a2:a5:48:7d:
1e:13:8e:e4:3a:5e:f8:0f:f0:82:94:b1:ff:4c:c6:83:24:be:
47:56:ec:28:d8:fb:e1:6d:3b:7b:74:7d:7a:ad:41:e0:6b:6d:
82:c5:59:cc:73:28:4c:37:4b:b3:da:dc:9e:f8:80:bf:9e:b1:
0c:f5:1b:53:94:86:a0:3e:9f:9d:e1:07:ce:e3:8a:02:fc:b1:
41:90:98:8f:5a:a7:ed:ad:1b:b1:10:c0:43:42:69:f5:93:fb:
b1:53:fd:ca:2f:36:31:74:97:55:2b:59:6e:81:60:c8:f6:83:
dd:fc:16:46:57:ef:f9:ae:35:47:77:74:eb:0b:d0:cc:d6:65:
e7:d2:4c:ac:a6:70:1b:9f:75:39:50:b8:e6:62:b8:0e:c8:64:
fa:67:1d:90:79:06:53:16:3a:73:09:b0:9f:d0:45:3f:91:2e:
19:ff:f8:b8:f9:63:b0:4e:5b:a9:00:50:d7:9d:c9:8b:6e:40:
c9:a5:f3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:09 2025 by rpki-client