Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa
File: 74f23cab-f771-4629-9fb9-72d19a1d7df6.roa (raw, json)
Hash identifier: F/KdbhsXBEH19NLs/ueWlAodC+0VrteSQzSwALKvVeU=
Subject key identifier: A5:8E:73:D4:CB:AC:F0:CF:37:BD:C1:7F:69:E7:8B:AF:E4:72:48:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3874F085F5196313D35D5D4A7F6BC2DDA52A7A46
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa
Signing time: Tue 21 Oct 2025 00:10:05 +0000
ROA not before: Tue 21 Oct 2025 00:10:05 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:74:f0:85:f5:19:63:13:d3:5d:5d:4a:7f:6b:c2:dd:a5:2a:7a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:10:05 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=6987615b39f341d9bba6b61972625aadd363f6f732279b56a66eb57a2cabeb77, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:31:73:71:cc:fb:21:f0:11:53:db:eb:c9:
70:e2:d7:01:6e:e5:1c:9b:a2:35:41:2f:1c:c5:19:
09:93:18:bb:89:48:69:e1:a5:2b:b3:29:f2:a9:c0:
b7:7c:14:7d:16:47:e2:dd:73:d1:37:f7:a0:0f:c8:
3d:1e:a2:56:db:6a:c4:45:70:e7:2d:3d:cb:3c:38:
1a:70:d3:ae:2b:02:f6:6e:50:96:e5:fc:63:af:b3:
6b:6b:1e:8f:f0:49:d4:9b:ef:e4:44:5e:94:4b:28:
26:c5:c7:61:ec:99:5f:70:ed:5d:de:27:d5:c5:b6:
a8:e1:40:5c:4e:6f:f0:fd:ec:2a:fb:25:ce:72:67:
07:a0:21:5e:bc:d4:e5:22:eb:dc:b9:a4:98:28:cc:
81:eb:15:43:32:11:cb:25:98:7a:fb:2d:02:c1:47:
07:a1:74:68:1d:83:0a:cb:77:9b:52:d5:59:af:29:
2b:bc:d0:9b:79:f2:67:75:89:90:1e:14:94:6d:1e:
d4:61:59:90:ef:00:7b:dc:97:c7:2d:e3:88:c2:68:
f9:e2:96:67:a6:1c:6b:31:bd:1a:1a:e2:3a:7d:2d:
87:94:8b:c5:3e:93:5d:f4:a4:8d:32:80:9a:22:d0:
93:be:bf:c9:9f:f3:78:a8:b5:f3:e3:2f:d0:92:84:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8E:73:D4:CB:AC:F0:CF:37:BD:C1:7F:69:E7:8B:AF:E4:72:48:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74f23cab-f771-4629-9fb9-72d19a1d7df6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.48.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8c:1e:de:30:a1:b2:ca:3c:61:45:a8:63:97:53:0c:e8:59:91:
ce:4b:b3:55:e7:ed:1b:ad:57:d5:4b:66:37:dd:7d:d5:93:99:
b0:04:0a:1a:ad:5d:84:34:6a:34:f0:86:3d:bc:0b:be:51:82:
22:f3:54:d3:ed:6f:b9:64:9d:85:c8:ca:75:d5:10:43:7b:43:
c8:d2:a1:9a:08:39:42:11:19:e2:b7:96:0d:e3:45:b2:69:ac:
86:c2:bb:38:8c:d0:bd:1f:0b:2e:21:c1:80:77:9f:75:7e:8d:
c9:1c:e2:5b:78:34:32:e0:c1:90:c7:8d:a6:dc:d3:34:82:a6:
a1:5c:e8:11:96:c2:b3:d0:9a:42:eb:d3:06:7c:fe:be:8e:3d:
ad:a4:da:42:7e:66:61:e1:90:85:2c:96:2e:0c:e4:f5:50:db:
81:9f:92:52:32:2b:15:c5:59:c8:d5:03:bd:e0:47:1c:2f:73:
71:ff:5d:9e:18:a3:d9:07:4e:28:74:31:f8:ca:0e:d9:92:72:
af:77:41:96:66:d0:88:ab:53:79:a6:a6:a7:e0:54:27:d6:9e:
e9:fc:4d:50:b1:f1:5a:bc:6d:74:9d:58:8b:eb:33:b7:e4:13:
b1:61:d4:9d:7f:b7:0f:66:77:7d:67:f3:7e:a0:fd:ab:ee:e2:
0a:59:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:49:35 2025 by rpki-client