Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
File: b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa (raw, json)
Hash identifier: sJBQ4iWDzrREj0409AldqdfSybE3xd4VYKTNGnvITSs=
Subject key identifier: B8:A0:DD:BC:2B:93:57:0F:CC:E7:BC:7C:55:07:C2:D8:4D:3B:28:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 105C9AF664823AE9DF6F458CB430554C2E1D195B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
Signing time: Tue 28 Oct 2025 00:01:06 +0000
ROA not before: Tue 28 Oct 2025 00:01:06 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5c:9a:f6:64:82:3a:e9:df:6f:45:8c:b4:30:55:4c:2e:1d:19:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:01:06 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=4993f2e944b08074ba7dd067371f5207f42691c50e273c75ee72aca2d9a0e336, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:17:a2:a5:36:d4:5c:51:f2:77:70:e5:ab:
dc:8f:6c:16:f3:76:b1:35:ce:ed:69:57:98:67:a1:
27:4d:74:54:6f:53:42:9e:51:dc:85:9a:ba:3a:3c:
19:14:d7:40:63:40:74:fc:ef:c5:6e:78:d6:11:04:
ab:60:8d:a9:38:7d:37:5b:4a:3b:37:76:75:c1:a1:
06:c0:57:ac:64:df:35:24:07:b3:b8:da:2a:71:70:
5e:dc:64:a9:18:38:e4:4d:34:dc:16:94:35:af:b8:
ec:2b:9e:73:40:0a:62:76:c5:6d:5a:d5:46:bd:36:
6d:7b:77:fd:32:61:a4:24:d2:2d:ed:f9:e8:f5:fa:
b4:b7:a5:31:d7:cd:d2:33:db:ee:3e:00:14:a5:65:
f3:95:68:75:79:c0:f6:59:dd:73:e4:c9:57:6c:a4:
f8:81:6a:ac:ff:73:ab:50:69:29:6b:1d:b1:4e:a8:
1f:80:88:bd:47:e6:f1:5c:8f:58:a8:8b:d3:78:41:
48:e3:5a:3f:51:6b:b3:0c:14:a1:56:e0:74:ca:a7:
aa:db:5f:9b:ba:bc:3d:24:f7:aa:88:10:db:cb:83:
22:a8:98:11:49:35:a2:ea:87:64:0c:c9:19:63:5b:
e9:c9:10:58:48:7e:0d:3b:61:5f:bf:d3:cf:cb:f1:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A0:DD:BC:2B:93:57:0F:CC:E7:BC:7C:55:07:C2:D8:4D:3B:28:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.160.0/21
Signature Algorithm: sha256WithRSAEncryption
68:45:8d:ec:dd:b6:cc:ea:e1:98:00:86:57:19:a9:25:0a:c6:
90:23:63:e8:39:5f:b6:72:55:bf:84:29:8b:29:3f:39:09:ff:
c7:c0:42:7c:d4:af:08:8d:2a:32:b2:50:4e:78:64:e6:b1:c0:
b1:84:61:bf:15:5f:3e:77:0b:41:c9:35:62:9b:15:b2:ab:53:
f3:40:8e:72:e0:f4:11:23:73:7c:0a:a1:de:76:91:12:86:af:
76:18:f3:00:c8:df:63:56:b9:8f:43:3e:9d:2a:e4:b5:fd:90:
ec:07:c9:43:07:b8:6a:7b:60:fc:f6:a8:bf:e6:0e:48:ba:2b:
a9:25:73:99:34:63:26:d2:cc:06:ae:2a:69:a9:3a:b6:22:5b:
1c:3c:1a:f0:36:78:fd:a8:00:b8:dc:79:37:68:14:cd:49:4b:
f2:c6:a8:42:47:3c:59:43:3f:68:fc:dd:ae:98:09:ff:47:57:
10:b8:03:05:da:1f:21:cb:8b:68:51:17:b0:18:ab:b3:bc:e3:
16:4c:06:96:a8:b1:72:22:a2:f5:a4:c9:b5:b7:f0:a2:1b:8d:
d8:50:93:30:86:7a:5d:ac:ed:49:78:63:d8:f4:21:e9:1d:42:
6b:4f:a1:83:67:4d:55:6f:76:a4:bc:aa:a8:e1:e6:9b:e6:1d:
c1:76:86:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:55 2025 by rpki-client