Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ff031-0274-4a94-beb6-01a51a71ee61.roa
File: 550ff031-0274-4a94-beb6-01a51a71ee61.roa (raw, json)
Hash identifier: Bu/a+EFXVsKCWC2ZOOtl2V+3Wtnu57Z7v+6Y4yovM4o=
Subject key identifier: 74:E3:37:4E:D5:C3:93:98:6C:BA:82:26:83:74:07:3D:4B:0D:5B:6D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5010DB2A4E5161799D428E1E3E99DC4F9A1DDA1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ff031-0274-4a94-beb6-01a51a71ee61.roa
Signing time: Fri 31 Oct 2025 00:30:06 +0000
ROA not before: Fri 31 Oct 2025 00:30:06 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 13.128.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:10:db:2a:4e:51:61:79:9d:42:8e:1e:3e:99:dc:4f:9a:1d:da:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:30:06 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=606fe9d2d550a4588af78833066d21c5d18b57c6005e54f82d496b7e07e424a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:40:c2:65:b5:b3:4f:12:41:ab:1b:38:16:
ba:4c:0a:3a:c0:9b:bb:b1:6c:b6:b4:63:ad:41:51:
96:7c:6e:42:e8:96:2d:ac:2a:6d:d0:e8:72:d2:e5:
b2:b7:33:32:ac:93:34:ed:d9:84:7b:cc:77:4e:79:
98:dc:9f:cc:ce:a3:3b:e8:ea:15:90:e8:30:b5:92:
18:67:af:d9:99:96:92:ae:5f:59:de:40:fc:ff:f9:
4e:36:8c:6d:00:ba:bf:b5:94:e8:78:2a:a3:fb:bc:
b6:a4:40:77:b8:b3:22:7c:04:dd:89:e4:ff:82:f1:
f3:38:1b:b8:80:1c:20:6e:fc:23:df:55:6d:c2:4a:
bd:4a:d4:ac:2b:46:32:66:0a:c9:48:1a:c9:d5:8e:
1d:6d:c8:df:b3:b1:10:ef:8c:0f:45:95:0c:1a:fd:
f8:f9:05:42:d1:2c:67:66:7a:65:98:02:c9:65:38:
f9:d7:0a:63:a5:c0:f4:11:03:c5:11:44:04:ad:ef:
5e:bb:aa:4e:1e:4f:1b:38:ee:f9:d4:1a:31:2e:03:
c4:83:a1:07:fb:46:56:d3:59:f5:f7:c1:d9:a3:7a:
83:19:8c:37:de:d8:19:f7:85:42:91:48:c8:c6:8f:
57:33:7c:47:8d:cb:2a:c9:fb:38:5d:64:19:2e:22:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E3:37:4E:D5:C3:93:98:6C:BA:82:26:83:74:07:3D:4B:0D:5B:6D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/550ff031-0274-4a94-beb6-01a51a71ee61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.48.0/20
Signature Algorithm: sha256WithRSAEncryption
d7:05:a7:27:c7:cd:a7:30:d1:65:8f:e6:1e:07:f5:be:40:6c:
ce:80:fc:c6:51:59:bd:44:5e:c1:9b:4a:a3:d8:0d:4e:af:a9:
37:8a:a3:95:28:e7:f5:f3:a0:71:f5:89:84:70:10:4f:59:db:
52:81:ef:bd:39:00:ca:94:74:22:f7:e2:e8:1a:7b:8e:9e:41:
20:40:ea:7c:52:5f:8d:16:12:0e:8d:36:31:54:13:b5:66:ac:
c6:a0:cb:7e:6a:34:57:6d:14:ef:0e:02:43:b6:da:1f:ee:e0:
f7:e4:ce:66:a5:08:1a:07:81:f3:7b:8f:ef:72:ca:bf:a0:1e:
e9:02:6d:9a:41:9b:5b:2c:85:6f:aa:35:ff:6f:4d:72:af:40:
b9:f5:39:77:3b:71:59:a0:c8:b4:cd:b7:22:91:20:e7:61:ea:
dc:ee:4b:98:fa:a9:77:6c:08:80:a4:d8:f6:58:db:6d:9c:f9:
9c:73:ee:a6:81:7c:5e:7a:1b:84:ef:6e:7f:f5:10:3f:ef:63:
0e:95:a2:25:07:f0:02:29:2a:e7:80:61:1e:01:41:ee:99:e3:
bd:12:6a:28:5f:f1:8e:72:a3:19:a2:82:a9:3f:87:83:89:b1:
79:47:98:ac:0b:66:ab:4c:94:c3:9a:64:4b:f0:5b:28:be:b8:
90:ea:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:46 2025 by rpki-client