Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa
File: d401cf92-6d56-4309-80f7-397ad3dbd150.roa (raw, json)
Hash identifier: V8VI1shIxxS8QCd8n4ass3AxqpVtExfogQU4vVqN9sk=
Subject key identifier: C5:D1:86:73:EF:FC:1E:8F:40:14:E5:4D:41:D7:05:CE:8B:71:6E:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D5EC8B4BFC28B8B94F0E3E5F95044A62399025C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa
Signing time: Sat 01 Nov 2025 01:00:04 +0000
ROA not before: Sat 01 Nov 2025 01:00:04 +0000
ROA not after: Sat 06 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5e:c8:b4:bf:c2:8b:8b:94:f0:e3:e5:f9:50:44:a6:23:99:02:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 1 01:00:04 2025 GMT
Not After : Dec 6 23:59:59 2025 GMT
Subject: serialNumber=04940318d5164e13920935ecaef2dbf7beea6dde4f607aa084d0e609361bdf03, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:12:c7:03:d7:97:26:e9:ff:58:db:16:b7:
a3:90:0b:c6:01:c4:3f:13:19:5c:88:b5:36:65:c9:
79:89:77:83:06:1f:a7:7c:6f:ad:f3:cb:ab:92:e4:
08:09:6c:30:45:0b:67:ae:33:4c:4d:2c:3d:37:8b:
06:4e:dd:42:75:c2:d2:d5:b2:9d:31:ee:36:58:81:
8d:64:c0:00:6d:0c:cf:9a:56:ef:00:ac:69:ca:67:
00:1f:9f:87:32:51:44:f9:ca:21:08:d6:b4:e5:51:
dc:06:56:01:e8:84:5f:19:dd:3e:24:ef:03:af:f6:
ab:f3:82:30:de:8c:9a:f4:93:fd:71:0b:1e:b0:75:
32:f8:26:c6:b3:52:53:f9:3f:37:bd:61:f9:3a:4b:
77:17:0f:53:f4:c9:88:a2:91:e6:29:9b:26:a3:73:
4f:bf:77:87:05:10:6a:86:7b:0b:7c:82:55:b9:43:
f2:52:98:af:de:ba:2b:03:f6:db:17:d4:8c:d5:53:
ad:04:6e:fd:f0:2c:d2:30:0d:8c:ed:de:d9:24:3e:
d7:4b:ff:21:c2:c8:85:44:e9:08:95:45:38:47:65:
4a:95:68:dc:18:f9:19:71:e9:1e:d4:74:59:61:bc:
9a:8a:2c:31:be:d3:35:14:18:76:4f:17:c0:e4:ae:
ca:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D1:86:73:EF:FC:1E:8F:40:14:E5:4D:41:D7:05:CE:8B:71:6E:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d401cf92-6d56-4309-80f7-397ad3dbd150.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:88:25:5d:2c:5c:3f:eb:4e:03:92:c4:36:79:6b:b0:4a:a3:
3e:12:3e:f5:4b:a2:c2:19:5a:f3:30:0d:36:30:bf:12:4d:d0:
46:9e:b7:ad:05:6a:e8:d6:45:3c:ba:56:98:86:32:82:2b:27:
d8:81:a6:e0:9d:68:51:68:45:1f:65:32:9b:7c:7c:74:36:1d:
10:70:13:64:c1:6a:92:fe:4e:dd:fd:d3:ed:bf:e2:f3:5f:b1:
83:23:cc:6c:27:60:64:b9:d9:a7:7a:2c:e6:c8:96:5f:75:cc:
11:df:9a:ec:09:aa:21:e1:8d:eb:43:a0:ba:2f:cc:29:0b:52:
5b:4b:f1:6e:ac:c2:41:05:da:fc:30:62:90:60:55:1d:88:ab:
f8:90:c0:8f:3a:b3:c4:65:de:71:aa:d6:68:30:a8:e9:6b:cf:
0e:85:42:6e:12:0a:17:71:f9:c7:91:21:19:85:c3:16:1a:eb:
f4:95:5a:d4:c6:34:89:5a:41:88:b4:bd:fd:7f:2b:01:7b:88:
a9:15:8d:65:de:4e:9e:c2:b0:0f:bb:37:2b:9e:9d:cf:e4:b0:
75:ee:cd:21:dd:8e:7b:d9:66:98:85:6f:66:d3:42:ca:54:81:
bf:e4:e0:97:fb:d7:8c:9b:da:47:72:bd:c4:bc:00:dc:32:84:
da:99:15:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:39 2025 by rpki-client