Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
File: 81636c94-0d61-45b7-858e-afa997830908.roa (raw, json)
Hash identifier: AThGzvNcEyv2h0XlEJMEaeutlVQWH+55te2lM2BvqUw=
Subject key identifier: C2:C5:F9:EA:A5:61:59:45:33:6F:86:C7:C3:AC:3E:FB:2E:24:92:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EFDF518F16751E5B2822D473652B78EB37F1C14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
Signing time: Sat 01 Nov 2025 00:30:07 +0000
ROA not before: Sat 01 Nov 2025 00:30:07 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fd:f5:18:f1:67:51:e5:b2:82:2d:47:36:52:b7:8e:b3:7f:1c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:30:07 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=f1b5a40e3b1eefbcfeff073208541e8e61ab119979b79782890be2840dd39bc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:4d:d0:33:05:99:61:a6:74:1f:21:f5:72:
42:b6:0d:00:cc:24:86:1a:e3:b0:94:63:8b:c9:9d:
5a:66:b2:74:17:ad:4b:0e:98:56:c8:50:0d:1d:99:
d5:78:b9:21:73:ed:fb:44:a3:b1:5d:fa:4c:c9:35:
ae:d9:82:9e:e7:b2:72:4b:9b:51:40:51:99:fe:da:
e5:05:a2:59:36:50:a2:fe:2b:90:d7:7c:8a:81:86:
85:ac:96:b0:6a:ad:86:7a:90:1a:ad:96:f6:e2:52:
b1:8f:b5:65:ba:98:1c:70:cd:01:83:15:94:2a:c1:
41:4c:ac:00:e8:4b:60:91:35:a1:fe:8d:45:9b:e4:
e2:74:2a:cf:57:38:1a:60:36:6f:73:49:1b:eb:f3:
62:7a:3e:42:0e:ca:b7:1f:74:79:9f:6e:8c:f4:9a:
bf:c7:98:ba:e4:95:a4:13:de:73:14:34:9d:04:61:
40:61:4f:3a:69:40:c7:6e:54:52:1a:9f:8c:61:b8:
c4:2a:47:5e:a3:56:f6:63:99:09:0a:df:16:2d:04:
2f:e6:7b:91:08:62:e9:3a:12:67:62:6e:0b:43:57:
65:4b:81:11:30:79:2a:1d:bd:77:4a:55:79:c0:16:
49:1d:b9:f0:a5:05:ef:55:bd:68:20:d4:8d:14:f0:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C5:F9:EA:A5:61:59:45:33:6F:86:C7:C3:AC:3E:FB:2E:24:92:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81636c94-0d61-45b7-858e-afa997830908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.2.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7a:0a:93:28:3d:bf:84:dd:c7:3e:36:05:cc:de:01:94:23:
02:99:81:50:83:87:91:a5:de:66:54:57:f6:8c:44:a6:bc:fe:
52:97:0e:05:bd:02:be:77:38:0a:74:b3:dc:3e:b2:79:07:aa:
ba:4a:c8:50:30:79:63:88:2f:09:cb:df:61:8d:83:e4:71:8d:
8a:f2:9d:00:fe:fd:d4:10:13:cd:88:de:6a:c4:09:b4:3c:a8:
aa:bc:82:39:cf:c4:7c:d6:0f:d5:eb:5e:ea:63:32:77:36:37:
3a:da:ab:98:d5:4d:f2:eb:72:c1:bc:3c:29:c6:11:a4:34:75:
f3:e2:6e:80:51:84:d4:ae:e7:8e:50:00:f9:87:ac:31:64:a6:
73:a3:db:50:25:a5:8c:f3:ef:e5:5c:95:6e:c8:6a:5e:6d:53:
2e:51:67:b6:c8:c5:a8:0e:af:54:8e:8e:32:f4:60:41:9d:a5:
2c:58:68:fe:40:1b:44:4d:cb:6e:66:44:a7:2d:a8:0f:11:c0:
67:f9:d5:ba:34:4b:d1:fb:62:08:db:c5:fa:5a:b2:f7:e4:53:
50:e8:35:29:4b:e7:37:2a:bf:72:20:2d:44:0f:bd:13:8f:05:
cc:41:f4:91:61:9a:60:5d:ed:4e:17:45:94:32:d7:db:e2:38:
03:01:07:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:49 2025 by rpki-client