Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa
File: a4d49ad1-da76-4d40-801d-8877c08472a5.roa (raw, json)
Hash identifier: KcqwUMPDZpWDA9cV/FoWFDuWdTy5AuY1EhMS0pd12w8=
Subject key identifier: BC:40:CF:71:A2:C0:9B:40:DA:61:B3:BE:43:E7:C9:6A:70:02:98:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42105BAEDE44F8A0743AC88B37EFF21A1BD14FB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa
Signing time: Tue 21 Oct 2025 00:30:59 +0000
ROA not before: Tue 21 Oct 2025 00:30:59 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.194.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:10:5b:ae:de:44:f8:a0:74:3a:c8:8b:37:ef:f2:1a:1b:d1:4f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:30:59 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=bd72fbe26255a0c85fe2e29e8933ca54c71b9e08dd27abb1a7f031452f09694f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a5:6e:9d:d4:19:76:89:7c:07:96:01:c0:79:
79:e9:e0:b6:0e:38:87:fd:ed:ef:92:1e:52:e3:74:
e1:7f:21:61:69:de:5c:1e:dc:0d:33:f1:d6:f7:d2:
d0:2b:4b:be:9b:e7:01:b2:86:b7:ad:89:97:9b:65:
77:3e:06:a0:d5:c2:3f:b0:b8:ec:25:d2:1c:d1:6f:
37:48:a8:eb:d2:6c:af:2e:b3:28:53:f0:e8:b0:1c:
47:a3:a3:52:7e:12:9b:47:c6:b3:7d:19:68:44:ad:
d2:ef:7c:e6:8f:aa:ad:fc:69:fa:9d:16:d8:b4:81:
55:d0:1d:91:b3:e4:ee:31:e0:45:ff:0b:b1:59:4c:
54:9c:c8:ac:c3:cf:81:15:43:30:aa:f7:44:08:24:
b7:91:05:e0:1a:9e:78:f5:43:18:11:70:76:96:06:
09:f7:c1:fa:82:1c:24:aa:be:e6:08:8e:af:c8:84:
7f:8c:99:80:61:0a:73:7d:1e:e4:e2:db:c8:41:a4:
49:ac:06:51:ea:6f:9b:ac:f1:6b:16:4e:6c:3f:ae:
02:12:04:ed:c1:7f:5c:2f:1c:0a:17:2c:31:9f:00:
c9:bb:ad:87:e1:57:84:d4:28:ce:08:a7:58:ec:9a:
ba:e2:c5:14:ab:df:54:08:6a:4a:2b:fb:85:a5:e5:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:CF:71:A2:C0:9B:40:DA:61:B3:BE:43:E7:C9:6A:70:02:98:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4d49ad1-da76-4d40-801d-8877c08472a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:73:0a:f4:d1:47:25:f5:6b:da:13:e0:44:f2:37:50:72:43:
93:f5:53:b0:e4:6e:df:81:b1:0e:34:ea:30:5e:ed:6d:1d:59:
2f:0a:01:c7:b4:3f:5d:2b:b8:cb:c5:ae:bc:3b:0a:8f:72:6f:
52:02:50:4a:df:64:09:b6:54:4a:65:05:84:03:78:7e:f3:ba:
14:9b:7d:49:13:24:55:99:59:87:2a:7f:37:ad:55:97:a1:14:
52:11:20:5a:ec:f2:64:56:dc:00:6a:5b:4c:5b:dd:05:5d:1a:
9a:91:f9:1f:4d:2d:e5:87:d5:9c:02:89:7e:f4:19:b7:4c:16:
1a:b4:40:95:d9:31:49:27:d3:86:a7:c3:52:7a:36:9d:d3:14:
e0:b7:31:00:c2:85:3e:81:03:2a:94:23:95:e7:f0:fe:3e:09:
57:04:ff:35:56:e4:08:81:8e:6e:9b:2a:0a:54:88:b7:f5:04:
78:28:41:5f:87:1c:29:0e:2d:16:27:19:57:49:a4:c3:3c:9a:
83:91:cf:b0:82:d6:8f:d4:6c:50:47:0c:f2:5d:7b:f5:57:ea:
0f:71:2b:dd:69:0e:07:1f:75:2c:cc:b2:6f:9a:ee:6f:17:02:
12:fe:e4:cb:e5:d5:ac:18:cb:28:75:d3:e1:06:8b:93:b0:37:
46:c0:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:34 2025 by rpki-client