Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
File: 3395fd69-93f9-4e45-8502-0694369b4d47.roa (raw, json)
Hash identifier: TP0HgmwoDBCebAN0mfHYFyCpM06po5MU+fPM4eF+0DI=
Subject key identifier: 79:EB:8D:5A:7B:91:22:E8:95:9A:93:67:17:1C:AF:EC:5B:C1:E4:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FE15BA5720147881FDA5655A0CC7AEF6F8BA34F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
Signing time: Sun 02 Nov 2025 00:31:16 +0000
ROA not before: Sun 02 Nov 2025 00:31:16 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e1:5b:a5:72:01:47:88:1f:da:56:55:a0:cc:7a:ef:6f:8b:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:31:16 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=47757ec6d684bf23577df3c6a0c6fa0ddf52ce5b23c7c8f4129cb3e4b7e029f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:3e:12:d3:4d:c8:5a:a7:59:8f:24:75:6a:
0a:92:e3:a6:40:23:5f:7a:08:7b:97:5b:bf:4d:d7:
56:3a:6b:d0:33:7a:1e:d7:a8:0a:41:31:c9:a8:8a:
f1:3d:a4:4b:62:12:3c:3c:62:a7:8a:92:50:33:4e:
7e:de:31:15:a1:b4:2b:ba:56:87:ae:c8:60:c2:46:
14:b1:5e:e2:0f:6b:c9:98:4f:9b:df:c9:74:1a:05:
50:7b:40:cf:cc:ac:f4:6b:27:26:54:47:6a:94:78:
51:e2:48:b3:5f:d5:88:09:55:fe:cf:48:c9:0f:3d:
b8:ad:90:b3:e2:31:d3:21:00:17:bb:4d:4e:a4:39:
b9:9b:8f:61:67:f1:55:75:ca:82:fc:2b:20:eb:ea:
73:50:5b:74:55:9d:70:69:dd:69:80:5a:fc:37:30:
3c:99:89:ff:1a:ca:51:fa:eb:49:a1:47:d2:4e:02:
d3:4c:c8:11:57:ca:34:0e:21:92:60:4c:83:b3:8c:
0d:26:c9:36:cb:ec:58:7d:c2:72:40:1a:be:de:1b:
28:80:e6:87:61:dc:c5:fe:fa:d4:66:c3:14:da:30:
08:12:1a:33:9d:dd:4a:d1:a2:ae:55:6b:2c:2a:c8:
15:81:21:01:d5:98:60:fd:ee:47:fd:f0:44:7e:78:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:EB:8D:5A:7B:91:22:E8:95:9A:93:67:17:1C:AF:EC:5B:C1:E4:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3395fd69-93f9-4e45-8502-0694369b4d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:35:e2:fa:0a:e5:31:f2:a8:4f:1e:52:64:72:f9:ff:d6:d1:
ea:aa:83:c0:f3:d1:d2:02:6f:04:9f:66:0e:5d:b8:a3:2f:28:
fd:63:b0:fc:05:9a:de:b3:33:14:ce:03:6d:04:af:5a:ee:92:
02:37:c6:01:ca:81:9d:a3:29:43:ba:03:58:ad:78:1c:d1:19:
ce:b2:70:5c:eb:09:ec:ef:42:47:6d:45:9e:06:cb:6d:92:f1:
26:1b:66:5e:f1:b7:28:9d:37:41:d7:07:b4:40:17:09:1d:3d:
57:db:7d:6d:28:79:75:7c:38:a2:c6:f7:27:66:48:b5:fa:7a:
6c:10:71:ff:69:04:38:d7:15:f1:69:9d:a9:d1:26:a6:7a:6a:
cb:77:02:d4:db:76:97:33:5f:9e:85:64:da:9e:17:88:53:87:
87:0e:68:ad:27:71:d1:a9:15:ac:e6:4c:55:7b:25:a1:36:ab:
1d:22:08:5c:8e:37:87:fc:88:57:f6:09:2b:74:eb:85:fb:6f:
79:a7:62:4c:e3:b5:ad:fd:25:ce:01:ad:18:f4:fc:f3:9f:a8:
35:58:4e:f5:78:93:45:7f:03:6d:89:ca:33:b7:39:a7:fc:e3:
fe:a0:50:db:af:f4:4a:d4:2a:27:18:43:51:cb:59:37:c5:aa:
e4:92:8a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:43 2025 by rpki-client