Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
File: 6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa (raw, json)
Hash identifier: pFiV4H8iEQkTXaDeq3HoEceoPHcXl9Q05CzGyUS5sHM=
Subject key identifier: BA:BE:45:24:93:29:F8:08:9E:08:32:94:66:47:7C:B9:58:FD:16:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C261B68AA2D193D7D0E451C51D343F4C6BF0F6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
Signing time: Tue 21 Oct 2025 00:20:07 +0000
ROA not before: Tue 21 Oct 2025 00:20:07 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 45.57.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:26:1b:68:aa:2d:19:3d:7d:0e:45:1c:51:d3:43:f4:c6:bf:0f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:20:07 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=ad48116ee2c6dffd09c9a5d84087b8fa6613174149b90d5a6089fc5e83935e06, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:a1:7a:4f:7b:f0:5c:01:9a:83:78:a5:4d:
be:fa:10:b4:b5:17:36:7e:65:9d:19:9d:4c:1a:03:
d9:d3:01:1e:54:e3:b9:a9:da:a0:b7:79:f9:6c:3e:
fb:df:d8:8a:7a:52:e7:b1:0a:83:e7:8e:75:e3:c0:
41:74:92:a8:6b:60:81:86:ea:ae:44:29:ca:2e:5e:
6f:b2:24:30:93:d8:be:cc:f2:9b:23:64:d7:e0:d7:
0a:e4:ce:f1:f8:b1:80:e5:0a:1f:45:fc:80:e3:5a:
41:bf:71:d9:de:b4:8c:45:bd:a0:a6:d9:ef:0c:79:
09:3c:67:b9:cb:cc:c4:1d:b5:a2:3e:06:90:6a:a0:
70:30:33:96:69:f6:7d:a5:e1:21:b8:01:6c:bb:3c:
bf:ea:d6:23:16:c1:7d:84:75:bb:40:1e:75:36:8e:
42:75:b5:78:44:c8:d2:2c:7b:aa:8d:35:bf:67:c4:
0e:83:a8:eb:c4:28:c3:9e:d5:b5:be:b4:ec:c9:b2:
bd:22:2c:c0:13:c6:10:96:ec:b6:0e:32:08:bf:ab:
a2:3d:43:a8:a8:83:cd:32:6f:0a:69:b0:a3:49:0a:
4d:9e:d4:34:4c:b6:6d:05:12:c5:44:03:f0:4d:7a:
e8:f5:d8:09:d8:30:0f:fb:26:00:2e:9a:fc:a7:af:
73:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BE:45:24:93:29:F8:08:9E:08:32:94:66:47:7C:B9:58:FD:16:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ac0660d-1ee7-4b52-8e7f-55804ba7f248.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.57.128.0/19
Signature Algorithm: sha256WithRSAEncryption
34:11:3e:22:86:e6:88:3d:44:ff:d2:3c:1c:1c:5e:e6:35:fc:
b7:04:b7:22:ca:ba:f1:7a:90:10:e2:2e:ba:4a:af:95:3a:28:
70:62:42:da:df:51:06:d2:87:34:9e:12:48:d8:0e:cb:ce:ab:
bc:55:31:34:3f:48:64:96:47:0d:ad:51:5d:93:9a:4b:16:00:
4e:dd:c2:9a:5d:7e:ac:76:b2:82:06:98:9d:df:5d:b5:4f:6d:
e3:a4:27:2f:fe:43:2f:d0:42:02:68:4a:52:7c:16:ee:22:64:
6a:67:85:d1:e2:bb:ad:1d:f3:5f:e2:01:e2:71:c2:a1:41:12:
aa:20:77:10:46:5c:2b:d9:26:59:87:9f:ec:50:22:3d:e7:46:
48:61:36:2d:a9:76:8a:8c:5c:a0:6d:77:6b:6f:37:ff:35:fa:
f6:0a:cf:40:09:ba:56:72:7f:6b:a6:2b:31:5e:25:7d:94:d3:
4b:93:97:a7:ff:9a:78:d1:eb:b0:b3:1e:de:d4:d6:30:16:ed:
b0:f7:70:21:55:13:07:6f:a8:4b:65:a7:cc:b8:de:50:62:72:
48:e4:96:27:6b:91:b0:02:6e:29:4c:bb:d3:1b:20:ba:22:62:
2d:0f:4e:3b:b7:df:e1:c6:a2:fc:dd:8f:ce:3a:19:ef:e6:bb:
3d:36:a9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:34 2025 by rpki-client