Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
File: 24fc63bc-3295-48be-b7b8-25e6b313cd42.roa (raw, json)
Hash identifier: U4PMJoLs09ZaywMdcdM6Aab7Ye+93mrKl6B/AfEE/+A=
Subject key identifier: 1C:1F:00:23:EC:66:CA:47:64:BE:AD:F3:FA:91:3A:B1:BB:01:35:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F0D762ABEC7FF055ECF2D99879A49A848693A9C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
Signing time: Sat 01 Nov 2025 00:30:58 +0000
ROA not before: Sat 01 Nov 2025 00:30:58 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:0d:76:2a:be:c7:ff:05:5e:cf:2d:99:87:9a:49:a8:48:69:3a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:30:58 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=d33ca838b27ac0c8ebb7fdfe38e6fe023966cdb2bebd2a2370f55bee51610ed6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:bf:a4:94:cd:4c:01:30:a3:24:84:82:d6:
5a:c4:1b:e5:2e:60:44:78:9a:ea:f7:9b:72:aa:22:
cc:e2:dd:41:96:a3:ce:99:3c:a0:3a:fd:77:67:3b:
fd:7b:9e:97:f3:53:a9:c4:c5:d1:a8:74:40:e6:58:
f4:48:16:c0:79:40:36:2b:2a:27:0b:59:d0:0b:09:
b6:2e:d2:82:bc:86:61:24:66:57:95:c6:b3:ae:91:
fc:25:78:05:3a:ad:f8:46:a6:1a:8c:5c:05:eb:4a:
7a:a8:74:f2:c1:24:dd:22:e9:86:8d:6c:6e:40:19:
5d:fb:dc:21:f2:da:00:65:bb:c8:20:25:fd:ad:a9:
81:ae:60:88:97:a8:da:b7:04:2d:b4:be:e3:61:9e:
a0:c1:38:4d:19:09:ea:5d:78:aa:b4:fb:71:21:c0:
4c:4c:c3:64:d1:c7:3e:db:cb:d2:ad:48:25:e6:7c:
a8:26:d6:d8:d1:f5:61:4d:20:c9:89:43:4e:31:72:
38:eb:3b:71:16:46:c8:7d:21:01:d9:b4:64:0b:92:
80:51:e0:25:89:82:07:e6:d4:3a:80:49:69:3e:37:
9d:3d:5d:89:2e:9b:05:54:f6:56:dd:d1:8b:28:33:
74:4f:fd:eb:85:62:d0:db:fa:0c:ce:cd:c8:33:bd:
06:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1F:00:23:EC:66:CA:47:64:BE:AD:F3:FA:91:3A:B1:BB:01:35:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24fc63bc-3295-48be-b7b8-25e6b313cd42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.227.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:ba:61:69:03:96:af:34:eb:ca:67:a4:3e:6e:22:2a:c8:7e:
7b:2f:b3:63:d1:a0:fe:88:72:63:64:31:f4:bc:d1:c9:3a:51:
65:b3:f5:64:38:46:5e:52:3d:f6:1d:98:b1:58:42:75:5c:22:
37:cf:0d:ab:b8:c2:86:e8:21:55:c5:48:6b:b3:da:8c:3d:02:
eb:c7:ad:b9:08:db:e3:a6:66:22:2a:01:b5:12:8f:a9:e2:68:
26:82:52:d3:0b:ab:95:86:ef:b3:b4:ef:90:c1:40:e6:e9:0c:
5e:79:1c:d6:fc:b4:22:70:3a:2f:21:ce:29:ca:83:ae:a3:91:
0f:67:c3:9c:5e:3b:59:81:86:a5:6d:b0:01:ee:b0:27:5d:e4:
e6:4d:9b:73:c1:e2:51:82:90:46:c2:d5:fd:c5:54:9c:6c:b4:
7a:6a:95:76:4f:89:bb:cf:8b:9f:f7:ea:4a:19:d4:f2:51:c0:
b9:86:1e:a2:72:46:2f:c9:c9:53:b3:79:ce:c4:6f:93:92:31:
f3:e5:e6:03:07:e7:e4:86:5a:d5:cf:a7:a8:32:1d:1a:7d:a9:
38:9e:2f:31:ed:1c:25:92:20:3b:f5:3e:ee:a5:c5:30:b5:40:
a8:a2:8c:9b:48:4c:6a:72:de:52:ea:41:35:fb:c6:f3:5f:31:
c3:11:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:53 2025 by rpki-client