Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
File: 62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa (raw, json)
Hash identifier: wG5J8SnSJRF3n1lhxj9cD1EtmYWXFd7w0L3ktYjm9Jc=
Subject key identifier: 95:ED:A9:AA:AE:D4:DD:31:4B:B3:C0:F6:89:D2:E9:17:30:92:C0:6D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D88872B7C3D9B97CFC4190F5C62B48CCDCACE01
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
Signing time: Sun 26 Oct 2025 00:20:10 +0000
ROA not before: Sun 26 Oct 2025 00:20:10 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 56.114.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:88:87:2b:7c:3d:9b:97:cf:c4:19:0f:5c:62:b4:8c:cd:ca:ce:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:20:10 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=1bdc219d78983e4ce73e793da532e41909212a49fcbb3ff7294fc0a874b83b6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:fa:20:fd:97:6e:5a:c3:5b:83:00:b0:d2:
e0:65:e4:eb:fe:72:72:b9:84:f6:01:27:eb:62:f2:
6b:60:cf:c5:f4:60:5b:bd:f8:ca:1c:a9:92:bf:b5:
e4:07:35:4e:b5:12:2e:8f:48:98:52:ce:f9:30:50:
f4:77:6b:e3:2b:93:70:28:c0:66:22:49:62:02:98:
8b:43:dd:1d:b0:1e:3d:9f:fe:32:76:9e:a6:e0:b1:
d1:6e:6d:2b:0a:25:8f:a0:e4:ff:d2:f8:b9:26:fb:
98:fa:9d:c1:0f:1e:53:ef:24:ae:3b:67:e3:97:9c:
8a:72:4a:1a:b5:95:ba:11:3f:5e:d2:a1:bc:9b:ce:
c6:31:d8:1b:95:a9:fa:fd:a4:f1:f3:cc:6c:1a:1a:
7d:ba:b6:85:33:59:6a:58:1f:96:ef:33:38:8d:68:
a2:1a:eb:95:40:9f:49:17:2f:72:f0:98:8d:da:f5:
be:b7:35:39:85:af:4a:6b:16:f1:d1:fd:c1:b7:bc:
e1:89:1e:ca:bf:83:a6:73:75:7a:33:df:92:f5:d8:
8d:a0:46:ac:4f:cd:e6:97:61:ef:54:ec:15:f1:91:
ab:6f:d5:3c:b8:cc:ad:fb:e2:a7:29:89:7a:ae:13:
9e:65:72:fe:1f:35:e9:98:90:3d:eb:a5:d9:01:0b:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:A9:AA:AE:D4:DD:31:4B:B3:C0:F6:89:D2:E9:17:30:92:C0:6D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62086a8c-d18a-4908-a1f6-71630fcdf8fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:2c:6f:f2:ef:96:65:f8:4b:71:94:11:1f:03:18:42:a6:c5:
6c:ea:a0:d3:e9:d4:7a:8f:72:f3:b5:ae:92:70:d9:b3:0f:6a:
49:e8:7d:69:c9:78:27:df:dd:c2:e0:14:5a:62:90:6e:6b:8e:
30:5f:04:ea:d8:d5:fc:f6:1b:6f:dd:80:65:99:08:89:61:80:
92:d0:b7:ed:64:0b:13:d7:4b:b9:54:83:84:3d:a9:23:b6:07:
7f:40:57:4a:96:9e:b3:17:1e:71:e5:17:2c:41:1e:5b:ba:ec:
c0:9c:c9:44:42:20:0f:29:e0:9a:71:67:86:df:74:88:81:21:
a4:24:cf:20:14:82:72:09:0a:c9:e4:be:7c:c9:83:57:eb:a7:
3c:46:0d:fb:ad:36:69:5b:c9:8a:06:7a:8b:55:ee:07:61:c7:
83:2d:fd:1f:dc:30:91:57:b1:a5:f2:9d:14:ad:29:b8:bb:3a:
cd:55:6b:66:b5:5b:50:c4:e2:98:b5:01:d6:b5:8a:31:52:a2:
18:e1:cf:19:2b:8e:81:2e:83:18:fc:4d:18:54:98:81:db:97:
61:e4:84:72:ee:93:0c:5a:c6:cd:70:cc:d0:49:59:2d:85:c2:
15:8d:04:bd:11:40:3d:30:86:6f:fc:4b:bb:a0:68:dc:6c:49:
2c:84:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:52 2025 by rpki-client