Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/808868db-7248-44e6-8995-ac7dfba66705.roa
File: 808868db-7248-44e6-8995-ac7dfba66705.roa (raw, json)
Hash identifier: 11COiALvZP5lWSnWUP5oQ5gvVaiJqZl7KC8/Hq/GjBk=
Subject key identifier: 1B:41:B5:9D:48:11:53:79:68:7B:58:A7:94:26:73:BC:6A:C3:CA:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7399F8B24BB9586839311C4D40B50E87729E6825
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/808868db-7248-44e6-8995-ac7dfba66705.roa
Signing time: Wed 05 Nov 2025 00:10:06 +0000
ROA not before: Wed 05 Nov 2025 00:10:06 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:99:f8:b2:4b:b9:58:68:39:31:1c:4d:40:b5:0e:87:72:9e:68:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:10:06 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=f6febe5c9a65ae2684ec829979392ce601dacc15fe4264a60ef6596706cb0348, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:be:f9:6e:fa:cc:80:94:42:dd:e9:43:9f:
54:00:d1:be:ac:8c:9d:20:79:68:f2:4d:68:10:77:
ed:3a:93:98:08:5a:5c:22:71:65:20:09:7c:28:76:
80:46:89:3a:c4:05:35:c9:12:ab:2c:36:a5:5c:da:
ac:b6:58:61:2d:36:a3:92:8e:53:ee:c3:4a:87:1e:
35:bd:72:45:53:79:a5:e0:be:9c:a7:3a:75:91:ef:
a5:de:ce:6a:1c:1a:e5:39:b3:2a:06:1a:43:40:8d:
45:57:d6:a9:e2:00:bc:5d:10:fe:b4:50:55:0c:24:
7c:7d:66:82:2b:d3:4f:c7:1c:43:1a:68:dd:ae:0c:
7c:0a:4c:1e:51:99:f3:4a:6e:47:8c:87:b0:e5:fd:
a8:eb:75:ce:02:99:36:1b:27:37:5e:d2:60:00:d2:
0a:ef:bb:a8:40:03:a9:ce:81:2b:d9:97:66:b6:07:
5a:ac:31:2d:9a:be:c1:6b:27:65:4e:9d:b6:0e:f2:
c3:ba:a6:7f:be:b7:c7:2c:d1:8b:e8:a4:67:b6:96:
e6:b7:44:72:92:7d:a8:0c:8c:a7:d7:24:de:46:cd:
19:05:4a:a4:d5:9b:61:d3:a6:95:a1:66:35:bd:dd:
79:14:51:54:d8:bc:f6:bd:f0:03:59:2e:1c:10:2b:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:B5:9D:48:11:53:79:68:7B:58:A7:94:26:73:BC:6A:C3:CA:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/808868db-7248-44e6-8995-ac7dfba66705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
46:ca:3d:60:d3:84:5d:a5:9d:a3:ec:d9:64:c2:d7:20:7b:67:
93:74:4f:c6:9e:92:76:e8:4c:d2:0f:68:02:4c:dc:33:6d:76:
6a:13:ea:17:07:e9:c5:bf:a8:18:86:32:18:f3:0e:be:02:67:
92:2a:90:d3:2e:f9:20:d3:46:1c:c0:a5:f7:df:0f:22:50:c7:
4b:88:c2:54:6b:06:9c:66:c3:e5:3c:e2:40:85:30:26:fc:dc:
1b:4a:bf:52:62:ad:0f:61:03:09:79:e1:5c:98:3d:23:f0:82:
bd:fb:45:4a:77:17:5c:92:86:74:fd:ab:7f:90:aa:b9:f2:e6:
15:90:b7:fd:6f:2b:15:cd:23:21:d5:70:52:27:19:b4:1b:18:
d4:59:4d:2e:e2:1a:0a:56:ea:ec:be:fe:24:e6:93:ba:62:0a:
47:ea:fc:b8:bc:f7:b6:e7:39:56:35:98:5d:9e:66:84:61:48:
0c:d6:dd:a7:e6:9c:8c:50:4e:6e:5e:f2:6d:16:a5:4d:35:c7:
13:ff:ac:d1:8a:af:d1:79:45:df:ee:dd:d3:ed:d6:4a:1d:9d:
59:d7:55:3a:d9:ce:4d:a8:e5:ea:3c:c2:fc:3b:dd:56:4e:ab:
18:ce:e6:31:c9:c7:ea:30:c3:e3:46:23:6c:b6:d3:e4:a4:ad:
68:47:43:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:36 2025 by rpki-client