Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa
File: 9c384066-9e4e-421a-a450-0c2a637d05e3.roa (raw, json)
Hash identifier: 01GhfNNPkfFvRa65fT4ti0/uer0k1RLIpn1F9hhrfRE=
Subject key identifier: 9E:16:EA:4D:45:77:6A:DB:9E:7E:58:71:56:CC:90:26:4E:C6:DF:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DC7411840821B426C3A5FA0D5F7E1CB74777CB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa
Signing time: Sun 02 Nov 2025 00:21:16 +0000
ROA not before: Sun 02 Nov 2025 00:21:16 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 66.178.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:c7:41:18:40:82:1b:42:6c:3a:5f:a0:d5:f7:e1:cb:74:77:7c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:21:16 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=551c20a8d0e4768763604745c9cbd84ee763cbdf486055fe49ab6e74e744589f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:01:ac:fe:6b:f5:53:62:47:d4:7b:b3:a0:
8b:72:7c:d0:a2:1b:5a:7e:14:97:15:a9:0a:1d:1d:
06:81:8e:10:40:75:81:8f:96:a5:f4:48:90:bb:6e:
aa:fe:41:84:92:f2:36:4c:71:c7:8a:12:61:95:74:
b3:97:ab:d1:98:26:4f:ad:2f:71:30:03:c8:27:57:
e0:f5:09:8e:e5:de:d6:58:8d:2d:5d:83:fc:8a:c4:
04:49:f5:80:03:3d:a7:58:b4:e8:a3:4f:16:db:ce:
d8:ca:38:a7:ca:e5:0c:31:bf:11:9c:3d:71:9e:52:
10:1b:5b:12:e4:a9:6d:31:9a:b8:ad:99:c2:bd:ab:
a7:f3:29:3a:62:28:a4:6a:7b:d8:76:52:aa:b0:93:
60:fa:b0:e9:b6:65:a1:58:61:c1:2e:36:49:27:2c:
bb:05:53:db:e0:ea:a8:dc:26:9e:2f:fb:a4:c4:4a:
62:25:29:a9:d9:17:15:19:5b:9c:ba:df:70:22:ad:
db:65:e9:b8:56:bf:d0:c2:6b:84:04:36:d8:76:2a:
82:da:25:86:ca:9b:85:47:d2:9d:4e:c6:37:85:16:
05:bb:b0:66:1e:27:bc:23:aa:e5:b4:60:e7:1f:e9:
a1:be:8c:65:cf:0f:76:65:da:ab:8e:29:ca:d5:74:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:16:EA:4D:45:77:6A:DB:9E:7E:58:71:56:CC:90:26:4E:C6:DF:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c384066-9e4e-421a-a450-0c2a637d05e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.178.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:46:b1:25:5c:d9:09:78:e7:dc:0a:2d:15:2e:aa:8f:9f:84:
4e:23:b7:7a:8f:54:83:f2:ff:84:b7:12:cc:c4:8c:19:f6:c0:
b8:0f:84:0e:74:5b:fb:c9:a9:a0:a0:52:4d:9c:9d:78:84:44:
1d:1a:e3:cf:f5:96:ad:f7:08:71:e1:2d:e3:94:33:29:e1:3b:
f4:63:c3:be:9e:1f:2c:61:cf:80:46:fa:8a:a1:3e:4f:1a:a6:
02:90:b3:cf:b7:c6:71:b6:bf:52:8d:bb:96:39:bb:9c:0b:a9:
79:f3:91:77:0d:bd:ca:c7:36:30:d8:69:60:ab:3b:dc:2e:23:
fa:7e:fa:59:24:66:df:2f:bd:54:c8:8e:3a:21:96:b8:32:14:
d5:c6:6b:28:86:d9:23:ba:e2:ca:bd:06:52:0c:58:c6:8d:4a:
10:f7:d1:24:ed:ba:63:bf:2e:f4:bb:3f:cd:d7:fc:16:a2:37:
25:c9:3d:71:d2:59:80:b2:4d:bc:43:2d:81:2e:73:6d:3a:c7:
be:5e:1d:48:58:55:be:db:09:09:7d:d3:3d:d3:d7:92:5a:dd:
1f:82:0a:6a:a3:11:91:fe:4c:e3:8b:60:cf:3a:e3:43:3c:41:
df:80:2d:61:45:29:33:b7:30:12:49:3d:7d:88:59:48:cc:a6:
30:76:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:51 2025 by rpki-client