Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba0e8c0-7bf1-4b5d-b1fe-66e9ca8f9262.roa
File: cba0e8c0-7bf1-4b5d-b1fe-66e9ca8f9262.roa (raw, json)
Hash identifier: JZWj7HvAXKgtPLB5HRdJpzv7/SJpI0MGn83CqoBLH0g=
Subject key identifier: 46:4B:C8:62:29:12:18:F7:5A:B8:EB:DD:0D:4F:73:6F:B3:C5:E5:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 747A5689F191C35E8E9B0F8A5C891DE6E51C618E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba0e8c0-7bf1-4b5d-b1fe-66e9ca8f9262.roa
Signing time: Sat 01 Nov 2025 00:51:38 +0000
ROA not before: Sat 01 Nov 2025 00:51:38 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 199.15.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7a:56:89:f1:91:c3:5e:8e:9b:0f:8a:5c:89:1d:e6:e5:1c:61:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 00:51:38 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=14053270c3e46b8d01e69671bf8667ba88fd043508b0233c8dadbd44948a5f63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:cc:47:37:1a:ef:45:f5:58:f6:52:d1:2e:
c5:cc:75:c6:4a:b9:14:6d:5f:80:55:3e:e8:77:ee:
09:15:25:5f:dc:1f:77:57:b2:75:d2:29:de:3b:ec:
88:3f:6b:59:da:16:cf:3a:51:ca:9f:47:6b:be:e7:
08:58:6f:1b:ee:5b:f3:4d:6d:21:07:78:62:93:02:
02:9f:37:05:58:a9:cc:4f:95:27:88:55:af:d5:39:
08:67:18:cb:fd:0e:20:21:ab:9f:b3:41:4c:25:40:
7f:03:75:be:11:2f:a2:f1:09:8d:d9:7f:65:b3:fe:
c0:48:e9:73:d6:f2:06:50:0b:2a:d0:40:67:57:96:
bd:72:45:ce:b7:34:db:6a:21:50:26:96:7c:c3:fb:
1e:b8:61:58:51:b9:f0:b7:5c:46:08:24:8a:66:d2:
b6:7c:5c:1f:e3:ac:fb:1d:f0:13:ed:90:04:04:c9:
a7:a8:5f:cf:67:15:80:00:46:3f:e0:55:f7:a6:28:
48:84:4d:59:7e:b2:f5:78:9f:2b:ea:4f:0f:da:d9:
bc:e8:a4:42:b7:ff:35:d1:a2:42:8f:56:04:84:83:
b7:47:83:26:8a:9f:0b:52:4b:b0:3a:67:9d:87:54:
9e:e7:23:d8:b4:38:cf:38:e3:3c:51:b4:09:24:81:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:C8:62:29:12:18:F7:5A:B8:EB:DD:0D:4F:73:6F:B3:C5:E5:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cba0e8c0-7bf1-4b5d-b1fe-66e9ca8f9262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.15.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:3a:3a:19:66:22:be:00:d1:ed:9f:7c:f1:6c:19:ff:42:50:
72:d0:fc:a5:7c:57:34:94:1e:fd:a9:ff:0e:0a:de:e6:e5:96:
bb:23:d7:e0:63:b1:90:56:42:96:5b:47:72:56:63:52:79:7d:
97:0b:91:68:a5:82:06:bf:2d:30:00:a4:5d:de:d6:8d:32:85:
f3:70:1f:38:61:6f:21:a5:50:73:54:bc:a4:20:f3:df:53:5a:
91:b5:fc:79:d8:dc:04:98:f1:04:62:06:ca:b3:b2:d2:27:63:
8c:a5:00:d0:f8:52:28:5f:7b:cc:20:08:98:5d:af:f9:ad:12:
3f:2e:1d:bd:7e:00:c8:e7:97:82:b0:92:68:aa:a8:ce:2d:28:
9b:db:90:f8:dc:8f:83:65:ab:28:dc:7d:e9:07:6d:be:9e:77:
0e:87:be:e7:76:1a:ee:b7:88:ff:b7:d5:5b:74:e7:5f:10:d0:
ef:f5:b5:bf:09:31:f4:cd:46:bd:0a:74:dd:71:90:4d:4b:87:
fb:23:06:97:87:5a:a1:ca:db:ef:84:07:7f:54:15:17:55:25:
cd:f3:2c:19:de:c4:d7:fb:73:7b:0d:d4:d4:38:a9:85:8e:b8:
89:78:9e:a7:01:9e:29:38:98:9e:5c:8f:e3:7c:7a:3d:fa:75:
07:28:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:36 2025 by rpki-client