Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa
File: 9ebad9c7-4c28-43db-800f-ce764e3211f4.roa (raw, json)
Hash identifier: p/4nGq57aWxGnLupUMj81Gu5cbFvGwnmny3G3E3IoB8=
Subject key identifier: A1:75:6E:C1:2F:E8:87:BF:A2:DF:FE:DD:C6:5B:20:16:EA:96:54:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F3708DFC6D2A8B980637CBFA8E70D42431588F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa
Signing time: Tue 04 Nov 2025 00:10:02 +0000
ROA not before: Tue 04 Nov 2025 00:10:02 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:37:08:df:c6:d2:a8:b9:80:63:7c:bf:a8:e7:0d:42:43:15:88:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 4 00:10:02 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=53a54403ff3a67a0ad873dfa639dac98bc13ebe98c04ea4406df605f5505c387, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:0c:b4:8a:d7:0c:cd:d8:6a:c7:45:d2:0a:
27:44:00:2b:94:b5:d5:9c:46:1a:37:f2:20:47:51:
61:9b:d8:65:1c:01:4e:31:35:af:1b:03:b8:14:5c:
b8:11:b3:61:0d:39:f0:17:18:39:9b:d0:8d:f9:79:
8f:fd:bf:e6:b6:3f:d0:5e:66:e8:05:dd:a7:85:31:
fe:30:1d:15:80:74:46:60:d7:08:4b:06:a9:2d:26:
a4:23:04:90:06:27:53:54:5b:77:ea:63:41:44:6f:
f6:dc:de:31:b1:10:91:5f:56:b3:52:00:cc:fc:41:
f1:de:88:17:ee:8a:27:cd:57:02:dd:3b:9e:15:0a:
4f:3f:00:3c:05:03:38:0b:25:2f:31:ad:ad:1f:06:
18:4d:37:d5:5c:be:c1:6e:8d:6b:d5:fa:ae:55:3e:
d8:0d:02:e8:f5:d3:77:cd:de:90:72:99:18:3c:0e:
b5:b4:db:6e:c1:52:f6:17:c9:87:09:15:45:f3:7e:
d2:cf:7a:7f:b2:30:30:ed:d2:63:99:3c:4b:41:62:
6b:c0:5b:1f:4f:e1:26:16:e5:12:38:00:5b:23:0d:
71:7d:42:35:e4:35:19:91:24:27:e6:ca:62:0a:90:
2a:d5:b5:4c:df:18:31:0c:04:9d:e8:d3:d6:8a:7e:
8c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:75:6E:C1:2F:E8:87:BF:A2:DF:FE:DD:C6:5B:20:16:EA:96:54:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebad9c7-4c28-43db-800f-ce764e3211f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:30:d6:e0:b3:30:c4:bf:92:b8:ea:9a:b1:71:fd:36:80:fa:
69:af:61:b3:3c:57:c7:34:c5:54:90:f7:42:83:83:84:bd:2d:
3b:f3:e8:bf:6a:7e:37:8d:1a:0b:d5:15:17:dc:31:19:7a:13:
71:7d:c8:60:16:c6:81:16:8d:06:c0:07:19:8a:f7:b1:fe:37:
cd:4f:b8:e1:41:f7:c6:72:71:5b:a8:98:ac:25:b3:21:e6:ba:
3b:48:19:1d:22:a5:8c:28:49:c9:7f:a3:00:70:53:16:3d:aa:
e0:38:a9:a1:e2:1a:85:a6:dd:fc:5b:8e:83:c3:a9:39:71:62:
75:e3:63:2a:58:4d:3f:78:a5:e7:1a:fd:2a:8b:a5:20:35:41:
44:bd:20:34:7e:fb:3a:4b:3a:26:3b:a7:f3:12:70:eb:27:35:
81:92:81:4b:9d:ab:94:54:51:7f:27:67:21:65:46:2a:76:c5:
b6:b3:fd:5f:3c:5b:3f:70:f3:4b:18:00:8d:e5:cc:f7:db:c6:
02:94:cb:89:e6:4e:95:a7:ae:6f:9f:d9:fa:4f:6d:b5:d7:fe:
b2:0a:35:8e:c5:07:92:f3:43:ed:d4:97:b5:cd:84:db:ec:ad:
5d:d6:80:35:4b:70:71:87:a1:e7:d8:27:2e:b6:f6:e9:45:65:
06:1b:c2:07
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfzcI38bSqLmAY3y/qOcNQkMViPgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA0MDAxMDAyWhcNMjUxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1M2E1NDQwM2ZmM2E2N2EwYWQ4NzNkZmE2MzlkYWM5OGJj
MTNlYmU5OGMwNGVhNDQwNmRmNjA1ZjU1MDVjMzg3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCy5gy0itcMzdhqx0XSCidEACuUtdWcRho38iBHUWGb2GUc
AU4xNa8bA7gUXLgRs2ENOfAXGDmb0I35eY/9v+a2P9BeZugF3aeFMf4wHRWAdEZg
1whLBqktJqQjBJAGJ1NUW3fqY0FEb/bc3jGxEJFfVrNSAMz8QfHeiBfuiifNVwLd
O54VCk8/ADwFAzgLJS8xra0fBhhNN9VcvsFujWvV+q5VPtgNAuj103fN3pBymRg8
DrW0227BUvYXyYcJFUXzftLPen+yMDDt0mOZPEtBYmvAWx9P4SYW5RI4AFsjDXF9
QjXkNRmRJCfmymIKkCrVtUzfGDEMBJ3o09aKfozTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoXVuwS/oh7+i3/7dxlsgFuqWVBswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllYmFkOWM3LTRjMjgtNDNkYi04MDBmLWNlNzY0ZTMyMTFmNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAByOIMwDQYJKoZIhvcNAQELBQADggEBAMkw1uCzMMS/krjqmrFx/TaA+mmv
YbM8V8c0xVSQ90KDg4S9LTvz6L9qfjeNGgvVFRfcMRl6E3F9yGAWxoEWjQbABxmK
97H+N81PuOFB98ZycVuomKwlsyHmujtIGR0ipYwoScl/owBwUxY9quA4qaHiGoWm
3fxbjoPDqTlxYnXjYypYTT94peca/SqLpSA1QUS9IDR++zpLOiY7p/MScOsnNYGS
gUudq5RUUX8nZyFlRip2xbaz/V88Wz9w80sYAI3lzPfbxgKUy4nmTpWnrm+f2fpP
bbXX/rIKNY7FB5LzQ+3Ul7XNhNvsrV3WgDVLcHGHoefYJy629ulFZQYbwgc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:52:40 2025 by rpki-client