Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa
File: b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa (raw, json)
Hash identifier: gbErBRDXUxuFtjd91b1W24e9rL3RgXTDiH3AME2ILAA=
Subject key identifier: 3F:D7:DE:6E:EC:78:C5:B0:13:B4:08:D8:BB:C8:90:97:80:87:5A:BB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2207D69E8F79097CD0C5C37C5EDD7A77DD92552D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa
Signing time: Tue 21 Oct 2025 00:40:51 +0000
ROA not before: Tue 21 Oct 2025 00:40:51 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.130.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:07:d6:9e:8f:79:09:7c:d0:c5:c3:7c:5e:dd:7a:77:dd:92:55:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:40:51 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=dcddf5d38ffd56dad0e549925c05b27618e0c04522e6dbdc5f9f907aa586517a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9b:80:38:23:5f:95:50:36:a1:db:c0:21:74:
cf:10:a0:51:9a:b8:a5:a2:2e:bf:e4:50:ec:05:cd:
53:33:27:ed:db:cf:cd:52:db:14:b0:62:76:8f:70:
43:33:bb:9a:d5:12:a8:a6:e2:f4:de:93:b4:6c:d5:
b0:37:0f:0d:38:09:8b:a0:3b:b7:f0:e5:88:9a:1b:
b5:52:87:79:5d:57:6a:a7:9b:d3:3d:1c:ac:55:83:
6a:c0:5f:c4:ca:98:02:62:cc:63:c9:c5:9f:95:1f:
c0:0b:63:45:7e:5e:1c:89:ed:1b:00:86:98:9b:b3:
0d:47:2a:a2:b8:fb:6b:0e:23:f0:08:29:e0:10:87:
e5:15:e7:3f:5b:f8:03:d6:1a:34:d6:50:b1:8e:e2:
3f:ee:3c:1e:ba:37:c4:10:95:5d:d8:80:1c:26:7f:
f9:c9:fa:9b:a9:2b:4e:54:78:8d:b4:b8:e5:ef:96:
e7:4e:e0:4a:a5:ef:79:ec:3e:d2:e6:aa:84:01:25:
76:7b:52:34:f9:f0:67:1e:22:5d:ad:69:32:76:0b:
89:af:39:72:51:45:66:4c:92:f8:a0:f0:66:08:7e:
d8:b6:24:fa:1d:82:af:4f:84:ec:8b:42:2a:91:c7:
05:56:61:5b:eb:58:94:fd:eb:e7:ff:bc:d7:4f:7f:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:DE:6E:EC:78:C5:B0:13:B4:08:D8:BB:C8:90:97:80:87:5A:BB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7c0cb74-fe99-4d60-a3ad-d4c299875974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.130.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e8:84:07:a0:d3:d9:c3:87:bc:79:5b:9c:03:26:16:66:75:
34:d9:ce:96:c4:1e:93:18:a5:70:b0:93:da:5c:fb:30:0d:4c:
2b:6b:aa:12:51:74:cf:c0:be:e7:a6:81:c1:ea:fe:55:6d:69:
bc:fb:01:71:ea:13:71:27:dd:8d:09:73:a6:eb:a6:83:fc:df:
ba:33:bf:f4:28:fb:1d:2b:ea:fb:f8:48:9b:9b:39:98:e9:6e:
47:41:2e:c2:a7:35:5d:96:e5:03:4f:bb:7b:5c:33:e4:c5:d9:
b5:43:f9:68:32:08:af:57:d6:f7:0a:ee:0a:3e:f6:3d:06:0d:
6e:c4:16:49:06:5a:d8:63:54:a8:7b:e4:1b:2d:3d:8d:92:3a:
69:72:1f:be:d4:4d:47:09:6f:31:e7:56:2b:cd:58:53:96:69:
2d:5a:99:fe:5a:4a:43:22:49:ef:a5:86:47:ad:48:a7:a6:a2:
b0:09:91:3e:9b:44:17:a5:c6:15:a3:1e:ac:c0:4f:8f:a3:95:
23:aa:76:c4:5f:7a:90:10:7d:0b:b7:ed:58:6b:92:3c:ee:4b:
8c:d2:e4:2f:73:f2:ff:bc:77:d7:b3:76:ed:90:b8:1f:8e:6d:
66:2b:14:35:65:a2:3f:44:c7:96:46:70:0a:e9:38:dd:65:c5:
37:b3:27:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:25 2025 by rpki-client