Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa
File: bd965ce8-8693-4e09-9995-bf06572029fb.roa (raw, json)
Hash identifier: fuYunntZUUDgWH1UMQoNlqxwEooC2TWC3m0h9WY256Y=
Subject key identifier: B8:B1:CC:DA:56:B4:73:71:2C:0A:0F:5C:2C:B0:02:F8:7D:98:63:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4290AC3619D4E5689D16D93FA39076D3E59B666B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa
Signing time: Sat 25 Oct 2025 00:01:16 +0000
ROA not before: Sat 25 Oct 2025 00:01:16 +0000
ROA not after: Sat 29 Nov 2025 23:59:59 +0000
asID: 701
IP address blocks: 162.208.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:90:ac:36:19:d4:e5:68:9d:16:d9:3f:a3:90:76:d3:e5:9b:66:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 25 00:01:16 2025 GMT
Not After : Nov 29 23:59:59 2025 GMT
Subject: serialNumber=79f58f3ddec68d11f42687b2d96225e1f0ac1717623d038264b0183e44a9e027, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:35:fe:c7:72:c7:66:58:a2:e1:73:89:0f:
74:23:99:3e:60:29:eb:51:89:b2:af:e7:60:4f:32:
1f:14:a6:c4:2c:dd:e2:d8:52:82:e0:11:cf:2d:cf:
d6:24:bc:6f:88:0c:68:0e:73:c9:c3:98:90:66:8e:
ad:0a:22:04:3e:05:17:e6:05:30:5f:bc:74:b7:a4:
5a:d7:8f:88:14:db:76:d3:51:ee:d9:7e:92:48:fd:
84:c4:8f:9a:7c:4e:32:fe:19:c4:10:26:43:3e:bd:
f5:96:15:fe:56:a0:a0:84:b5:ef:ae:50:91:c6:c5:
17:c2:79:67:70:00:9f:00:77:aa:7e:fc:71:45:e5:
91:26:f1:00:b2:9e:a0:cf:5d:16:37:fb:e2:8d:93:
72:ae:8c:81:32:fb:a7:6b:20:5f:ee:60:73:94:53:
82:3f:b0:59:d0:ef:fb:0d:f1:cc:17:b9:21:59:d2:
94:e9:cc:04:d7:59:69:f6:1c:28:01:fe:d5:57:33:
3a:4f:49:24:1f:af:22:fc:a7:55:60:9a:0e:93:3f:
fb:69:5c:e4:03:83:19:89:c7:15:f9:bf:b9:fb:ff:
07:36:8e:66:35:d5:0b:f7:b3:a0:99:2f:6d:83:13:
b2:d1:5a:47:ab:a4:8f:2f:42:68:77:4a:03:26:c3:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B1:CC:DA:56:B4:73:71:2C:0A:0F:5C:2C:B0:02:F8:7D:98:63:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd965ce8-8693-4e09-9995-bf06572029fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.208.123.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:20:1a:aa:8c:b3:3f:ea:eb:1f:1b:11:1f:01:f2:f9:91:a5:
9a:6d:17:06:4d:1b:98:97:16:bc:9a:16:29:4e:c2:52:46:69:
b6:47:da:6a:83:1c:83:19:43:75:55:cc:b2:72:61:70:d0:1e:
fc:62:dd:b5:1a:aa:fd:00:8f:c4:54:21:c3:42:67:29:ac:f2:
87:f5:92:e3:f3:9d:aa:24:af:a4:fe:dc:12:bb:30:4c:96:e7:
90:16:dd:92:58:37:c3:54:85:83:0c:d1:ac:f2:bc:dd:dc:0b:
f4:0e:02:4e:56:40:03:ad:3e:7a:72:79:fe:f7:7a:35:e6:57:
38:40:68:7a:5c:1a:51:6d:c8:6b:32:83:6f:f4:84:d3:49:23:
e4:59:93:5e:68:09:96:02:c9:d8:a1:32:b3:07:ea:c2:9d:3a:
4d:4a:e8:07:0a:4e:f3:9b:b8:ee:4d:44:80:ba:18:fd:ba:87:
ac:46:6f:26:10:ea:ea:0f:5c:2c:99:93:b0:af:45:c0:23:6a:
78:49:d9:ac:9a:c6:5c:69:30:4a:62:15:15:df:6a:ce:e7:62:
63:f9:92:df:24:9e:03:fd:19:7f:25:6a:be:c9:20:99:77:fc:
28:cc:da:20:55:df:e1:09:c3:11:01:dc:ac:c0:69:ab:4c:8c:
b4:85:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:26 2025 by rpki-client