Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
File: 3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa (raw, json)
Hash identifier: k13DSrEujCFCcuzct9yPGOlJDcxwTqDXdc3ibIN6sOk=
Subject key identifier: EA:98:F9:E5:26:DE:71:7F:F3:71:7B:5D:B8:D5:1A:1A:72:CA:5F:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71910BADDA92C47081FFB361666FD913C781A047
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
Signing time: Wed 22 Oct 2025 00:10:57 +0000
ROA not before: Wed 22 Oct 2025 00:10:57 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 63.246.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:91:0b:ad:da:92:c4:70:81:ff:b3:61:66:6f:d9:13:c7:81:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:10:57 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=feb9df4bb1ddf62e1273f5a88e44df196f2d87e124cb7b26896dda0a70103a6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:9c:1a:3b:56:e7:03:e4:86:d3:16:8b:93:
12:d2:68:9b:12:67:fa:15:74:dd:54:76:56:d2:fa:
69:97:ab:c6:4a:4a:23:0c:88:89:47:8f:76:93:bd:
dd:30:c8:e1:9d:f8:9b:ab:fb:6d:33:d4:d3:73:a1:
25:dd:c3:c0:61:4a:e7:80:d8:d3:22:bf:09:fb:06:
d3:6f:86:04:f8:2f:a2:0d:af:1e:a0:b0:51:b2:0c:
1b:53:68:26:1e:96:c0:e6:99:ee:85:1f:4e:91:30:
b9:c1:79:46:f4:c6:c1:1b:d9:6d:3b:37:4c:80:ee:
34:fb:1e:09:2e:ad:93:01:03:79:2a:3c:9d:73:c1:
35:73:4c:14:7c:26:b1:81:0a:40:b6:ab:95:0a:38:
89:ad:83:ea:5b:0a:8c:71:ce:90:bc:48:bc:29:bf:
85:90:01:c0:53:a7:6a:95:b5:72:4d:18:21:cc:1f:
44:09:79:8e:75:f1:6f:67:2f:28:31:43:a7:64:f5:
ca:31:d3:1f:2c:e9:76:bd:dd:ff:fa:2e:f0:35:65:
90:b4:5a:bb:82:cc:36:c2:30:ab:0e:a5:7a:c9:6a:
45:93:58:14:47:9a:8d:98:ac:f0:d3:1b:10:60:4c:
38:d3:f3:5e:1b:05:a7:a2:69:04:c8:98:83:f9:69:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:98:F9:E5:26:DE:71:7F:F3:71:7B:5D:B8:D5:1A:1A:72:CA:5F:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3076cf1e-83f7-445d-b25c-dfb7b558c7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.116.0/24
Signature Algorithm: sha256WithRSAEncryption
16:b7:a8:79:b8:fa:30:55:5d:7e:e0:dc:0e:d6:49:85:d0:9a:
82:88:68:24:dc:50:a8:77:1d:db:0e:52:a6:99:07:be:bc:7b:
b9:d6:2a:8d:f1:f6:b4:d0:3b:1c:4d:91:54:28:13:30:62:b8:
06:1e:ba:a6:a9:6b:8c:98:05:5b:f9:b1:e6:ef:84:d4:e1:30:
c0:73:6b:80:9f:3a:5f:83:1d:3d:61:8f:60:8b:8a:dc:17:df:
a6:a9:2c:4c:b6:0d:92:9f:57:3c:94:85:3c:54:b0:25:84:52:
b7:7d:44:bf:dc:73:f7:60:2d:23:ee:f5:0b:67:65:14:ba:22:
d7:bb:35:7f:49:39:fe:34:4b:09:9c:bc:6c:27:c5:8e:7f:cd:
f4:0d:29:f0:a6:71:68:f4:84:5b:3e:db:dc:8c:ea:b5:d5:22:
d0:86:dd:a3:88:6b:b1:4f:a4:ac:10:cb:5a:f3:d0:7e:e5:f5:
af:73:b8:ab:0f:b3:85:c4:45:a1:7a:55:50:8c:3a:29:96:92:
f9:ca:54:4d:5c:ec:3c:9b:ff:b4:84:c1:2a:c4:77:67:95:f6:
55:d1:65:55:ca:08:d8:6c:f9:30:e0:d3:88:a6:c6:97:ad:c8:
97:3a:b6:14:d3:bb:e7:18:9d:a7:3b:90:23:b5:47:00:6f:4d:
24:be:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:55 2025 by rpki-client