Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6429aa8a-842f-44d5-bf7f-ce1949087785.roa
File: 6429aa8a-842f-44d5-bf7f-ce1949087785.roa (raw, json)
Hash identifier: cZz2RSHv8AJardMDvSCrsMwVBLoixmLXGXH8aWLC+fY=
Subject key identifier: 97:71:04:B5:2B:2E:62:AE:AB:11:91:FD:0E:29:47:10:28:1A:2F:C8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3335E9D237534CC48729C31E570F7113EDE9E13F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6429aa8a-842f-44d5-bf7f-ce1949087785.roa
Signing time: Fri 31 Oct 2025 21:38:31 +0000
ROA not before: Fri 31 Oct 2025 21:38:31 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 166.117.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:35:e9:d2:37:53:4c:c4:87:29:c3:1e:57:0f:71:13:ed:e9:e1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:38:31 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=24e3629afb9a36877ff7f0b28f4337b9ba4c1423a3c169fb39e7c7ee8752a249, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:4a:16:07:c1:8b:1c:b4:29:d4:f2:a5:e0:
c8:db:bd:20:2f:b3:46:33:c3:18:10:1c:d6:a7:f9:
c7:d9:c6:b5:17:fc:4f:8d:04:ac:a0:31:28:ba:05:
c5:60:fe:e7:01:30:fc:54:34:c5:81:0e:8b:46:7a:
93:3a:35:6e:68:51:6f:7a:a7:32:b7:f6:e0:2f:84:
5e:2b:db:37:83:5f:ba:aa:a6:bb:2a:4a:19:dd:62:
a7:62:13:47:2b:c8:3b:d2:f8:4c:75:97:8f:b4:d2:
b2:13:69:2d:08:ae:e3:e6:02:cc:cc:ef:11:ba:72:
bb:5f:a4:dc:a7:f8:fa:75:15:9f:fc:cd:f1:92:84:
78:d9:34:2a:c8:db:cb:a3:7f:37:94:81:5f:70:1b:
e5:3a:fa:c8:70:27:ae:3a:ab:f0:a7:83:f4:85:b8:
34:dc:c4:01:a6:5d:90:94:7f:d0:91:a1:24:61:8c:
3a:58:d5:70:d1:1d:fb:5f:6b:be:34:1a:80:f8:d9:
fd:be:62:9e:e6:d8:7e:26:d8:5f:34:80:30:36:35:
20:27:91:a9:26:93:3f:3f:53:30:20:02:be:de:c8:
c1:b1:4a:df:3b:d8:fa:cd:ee:53:39:18:84:b5:1c:
de:fd:c7:85:fe:1e:60:5b:74:a5:f8:71:92:97:b5:
69:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:71:04:B5:2B:2E:62:AE:AB:11:91:FD:0E:29:47:10:28:1A:2F:C8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6429aa8a-842f-44d5-bf7f-ce1949087785.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.117.192.0/20
Signature Algorithm: sha256WithRSAEncryption
16:2c:76:e2:45:b2:ae:9c:c2:4e:e7:1c:fe:67:28:b4:b2:51:
05:95:4f:63:25:9b:e3:7b:14:3e:e9:5d:d9:c6:8a:f4:f3:56:
ea:11:1b:a4:db:78:bd:a6:2e:de:a7:95:05:7f:64:e6:2f:f3:
01:97:3c:b3:c9:02:b1:db:16:22:20:6d:03:ab:cc:7a:2c:7a:
c8:e6:ae:da:80:0d:5a:7e:f4:d1:9c:b5:ea:ca:2f:44:f4:9f:
b1:33:be:89:b9:09:b0:18:74:80:15:c4:ef:2a:8d:b6:18:e5:
be:8c:b9:ca:d5:30:f6:22:99:eb:86:13:22:82:52:13:73:67:
26:06:14:56:d7:c0:05:71:62:a7:8d:ea:9a:3d:31:bd:10:b9:
f5:3c:f4:b2:7a:99:f5:f2:04:84:92:c1:88:71:d3:81:b0:8e:
12:dd:6e:57:5d:f5:d6:6f:04:5f:33:88:0d:cd:a6:f9:e7:03:
d6:28:fc:b6:04:aa:83:50:ff:ba:a9:44:42:fa:6e:2f:49:40:
d3:f9:d0:2d:d0:20:b1:84:6b:7a:4c:ab:f1:31:5a:bf:a9:46:
1b:3f:02:07:7d:63:d7:e0:d0:26:51:10:cc:44:cb:21:ac:f9:
b5:7f:5d:f6:d2:ab:89:0c:bd:a5:44:40:11:ae:5b:a3:78:ea:
5d:74:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:14 2025 by rpki-client