Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7cf9490-5b0b-4160-bae9-e96740517c3c.roa
File: b7cf9490-5b0b-4160-bae9-e96740517c3c.roa (raw, json)
Hash identifier: 1musTZCAE617P92ZNfJ8YpmmXhYL95ExJ2oRbxQeG2M=
Subject key identifier: DF:49:C6:43:5C:57:45:07:94:F8:67:4F:2D:B6:50:3D:0E:AC:F9:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BA926E9DC1FEC27BF6472C46D24BFC1C95F6D64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7cf9490-5b0b-4160-bae9-e96740517c3c.roa
Signing time: Fri 31 Oct 2025 21:06:39 +0000
ROA not before: Fri 31 Oct 2025 21:06:39 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a9:26:e9:dc:1f:ec:27:bf:64:72:c4:6d:24:bf:c1:c9:5f:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:06:39 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=0880646a53d35a499f1f874ac3745f47e76357a51d76fe980723c69be10652e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:e9:1e:8a:1e:5e:dd:7b:bf:c4:e7:f1:78:
57:73:73:57:2f:09:9d:2d:41:7b:7f:0f:80:1f:03:
bf:c4:8b:1b:d5:63:68:e0:1b:52:92:67:cd:20:4a:
57:ff:91:5c:50:68:b5:98:ee:44:ff:87:86:dc:cc:
6d:4f:5c:51:38:06:dd:67:69:14:d6:35:ff:6d:3b:
2b:7a:12:e7:92:01:fd:e8:fd:e9:eb:0b:2a:56:35:
bf:fe:2e:d3:bf:93:d5:a8:a7:a8:7a:ae:09:c1:8b:
33:5b:e7:74:e6:7c:c4:de:79:7a:0c:b9:93:37:da:
7f:60:06:73:b2:dd:4b:ab:68:f2:57:f3:60:81:c8:
42:cd:63:8e:d4:e3:b4:b8:9c:94:7b:03:49:3f:68:
43:9f:55:2a:88:16:29:9e:86:59:69:ae:32:a8:7c:
b5:72:60:17:2e:40:dc:1c:b7:27:01:35:20:e2:a5:
47:8c:0c:d9:bb:41:4b:51:ba:ff:3b:3a:87:32:3f:
45:47:b4:eb:a1:07:71:35:01:b1:92:2e:4f:c1:12:
a8:60:9b:36:25:aa:33:e7:4a:56:05:59:ca:36:d8:
aa:c1:b7:b9:95:d7:2e:05:3f:aa:23:bc:06:dc:64:
3c:c1:13:0a:ac:b8:c9:7a:fc:49:fb:5b:ae:de:ba:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:C6:43:5C:57:45:07:94:F8:67:4F:2D:B6:50:3D:0E:AC:F9:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7cf9490-5b0b-4160-bae9-e96740517c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5d:10:7f:c0:36:76:cf:12:35:8f:ac:dd:92:21:fd:0c:00:
e3:86:c6:df:08:33:47:a9:65:bd:13:7b:17:a5:99:74:3d:ab:
57:de:ad:2c:f0:8f:16:9d:a5:9c:f9:a3:7e:81:22:9d:c4:02:
6f:bc:83:91:54:28:91:3c:6b:15:c1:e0:92:06:0b:64:1f:4f:
39:c5:43:7a:61:17:03:f4:c0:9f:4d:d6:d0:fd:ca:b4:32:c2:
d9:2e:dc:c5:3e:c5:e2:40:1b:cc:0b:7f:be:c7:d5:1c:e6:67:
45:be:3d:cd:95:d3:a1:01:02:7f:18:db:47:d0:cc:72:ac:f8:
fd:74:d6:d1:4f:90:c2:44:af:c8:c7:ad:8d:d7:67:5e:9e:07:
4b:e7:84:c5:40:e2:da:18:03:0b:7e:7c:ac:cd:d9:14:8a:43:
3a:d4:88:e7:dd:e3:22:19:b2:7f:5b:7a:01:3b:ee:7c:2e:6c:
1d:6d:4d:cd:4e:58:93:63:4a:ee:52:5e:49:5f:fb:a4:e4:b6:
f4:51:6b:db:73:d4:f4:1b:9e:1a:07:b2:44:90:91:d7:0d:c8:
c9:8a:b6:cc:b9:a9:3b:c1:bc:82:18:c9:9e:08:1c:73:41:84:
64:0e:fa:3b:43:80:e6:67:62:35:27:c6:52:82:5f:84:2d:14:
25:e8:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:35 2025 by rpki-client