Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa
File: 616180ed-29ae-499b-8a01-013d569d9163.roa (raw, json)
Hash identifier: NbK1KOR0WNUzpT2zngZ1ObTS8mV/3bEidswQ0dZnk7w=
Subject key identifier: FE:CD:BE:14:65:2A:EF:C9:D1:24:7D:9C:75:10:EA:64:DD:F4:51:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11823491ACA8C9DA3C745DDA9CF863E718CA2EF6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa
Signing time: Tue 21 Oct 2025 00:00:10 +0000
ROA not before: Tue 21 Oct 2025 00:00:10 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 98.80.238.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:82:34:91:ac:a8:c9:da:3c:74:5d:da:9c:f8:63:e7:18:ca:2e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:00:10 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=d7bbd5e6a700c3e21bc8c4ae590b75e7b7adb3192f91812b05147f108d267766, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:67:fb:f1:a3:4b:45:f8:12:93:ac:cb:5e:
5c:ab:0b:95:aa:12:23:34:ab:86:49:b1:ba:0e:17:
cb:18:2c:47:a8:66:20:03:b7:1d:54:d2:00:a1:72:
55:c5:6a:6b:19:09:12:a5:52:8f:49:b1:6a:58:0f:
3f:96:95:0a:0c:21:5c:05:b8:e7:13:6e:9d:f1:e9:
f4:a7:cb:a4:3b:de:c9:ec:42:74:49:b3:31:b6:a4:
a8:56:d2:9b:ba:d1:93:40:9a:b6:5d:1c:e8:c9:eb:
6d:d9:c7:30:78:a5:a8:e0:08:53:2a:d0:82:f4:79:
aa:29:51:d0:c6:1e:39:c0:09:6b:28:f5:b5:21:a8:
ea:6b:a0:7e:bb:6f:e0:c1:eb:31:46:99:e6:48:b1:
aa:b5:fa:f4:a4:25:bf:cc:0e:42:f5:82:71:9d:d7:
1a:6d:58:15:54:0a:88:a5:13:d4:4e:c8:ac:4e:57:
c5:2a:25:20:48:cd:fe:e0:85:41:05:d2:21:65:cc:
ab:e0:b3:15:5a:89:6a:fd:e3:db:9a:bb:f1:bd:9f:
fd:7a:a9:8c:0c:6a:21:0b:c0:03:c3:cd:18:85:fb:
e6:6a:ca:1b:4c:51:36:dc:5e:25:f0:48:76:0f:99:
6e:df:b2:66:44:a5:34:c7:32:ce:55:b2:f0:e4:8d:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CD:BE:14:65:2A:EF:C9:D1:24:7D:9C:75:10:EA:64:DD:F4:51:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616180ed-29ae-499b-8a01-013d569d9163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.80.238.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:38:08:64:a1:07:36:7d:4d:e5:6b:0b:39:2a:c9:d2:b3:9b:
67:d0:d6:b7:51:32:51:85:29:87:ce:7c:21:92:4c:86:b3:3f:
b3:4e:99:03:75:0f:14:76:b9:a3:99:a6:9e:9f:96:1c:ef:10:
b9:3c:e2:a1:0c:84:b5:3e:2b:53:0c:80:1c:09:34:3c:42:60:
f6:0c:10:23:28:de:ff:6b:0f:8a:40:45:29:1d:43:0d:af:d4:
60:10:f8:eb:22:12:07:8e:43:5d:5d:b3:5f:70:79:77:9c:77:
df:12:ce:9b:95:e7:b0:b0:58:e2:fb:6c:39:e7:01:32:47:09:
7c:fd:dc:7d:56:a8:e9:43:14:4e:5b:e0:b1:77:ee:bf:60:60:
25:95:b9:2c:1a:ad:93:e6:db:89:80:31:3f:5d:2f:cc:9a:92:
ee:da:be:9a:b9:fc:b8:4f:3d:78:d0:3d:19:3e:bf:5d:93:fc:
80:12:5d:e0:8d:48:f0:67:1d:fe:7e:20:03:9c:6c:b1:8b:e5:
e2:17:96:e7:cc:6c:4c:e0:23:67:7f:9a:6f:0f:b4:ed:77:3d:
80:5c:82:99:a6:9f:e3:f4:ad:24:48:1a:be:e4:da:52:14:52:
d5:5d:7f:5b:49:5e:49:7b:f2:d1:fc:c8:f5:3d:bc:92:98:7b:
36:79:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:45 2025 by rpki-client