Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d56764d2-e326-4e8e-b9d2-ea538a5cec9c.roa
File: d56764d2-e326-4e8e-b9d2-ea538a5cec9c.roa (raw, json)
Hash identifier: nMX6N73OUK+rGMQBG2AIQJmveapcHoQc4zrvJo3+fDw=
Subject key identifier: B9:10:D4:4D:53:95:69:BF:F1:F6:2E:81:37:5B:1C:93:85:35:52:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1391FB8D1A7B14DB112499A1F04279BC8C88656E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d56764d2-e326-4e8e-b9d2-ea538a5cec9c.roa
Signing time: Fri 24 Oct 2025 00:00:26 +0000
ROA not before: Fri 24 Oct 2025 00:00:26 +0000
ROA not after: Fri 28 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:91:fb:8d:1a:7b:14:db:11:24:99:a1:f0:42:79:bc:8c:88:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:00:26 2025 GMT
Not After : Nov 28 23:59:59 2025 GMT
Subject: serialNumber=9ee77de242c4cf39fdff4cfd5bcfda1452f5d1070fd08b3198235cc33e7b73f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:72:6b:c8:1d:62:bd:15:c5:f2:dc:cf:d8:
6d:16:cc:09:61:a4:3d:3c:bb:79:6c:e6:43:fa:6d:
b9:96:ee:29:d8:69:de:9d:9f:20:97:33:5f:7d:7d:
05:90:05:67:80:41:55:2d:ee:b1:5b:74:25:ce:29:
28:a6:f3:fc:2b:6f:a0:11:58:46:2c:64:01:de:01:
89:cd:c9:05:ec:03:19:1f:18:5c:b5:3c:ef:61:a3:
75:53:32:c6:36:e8:82:39:08:43:e3:0f:5f:c0:cb:
48:b2:b4:e1:29:ed:8a:55:8d:13:17:37:4b:b9:ee:
86:96:ab:e1:0b:f1:19:3a:d4:72:ae:14:41:37:da:
ea:72:ab:ac:ed:e3:8c:be:3c:4b:d5:5d:c9:f3:bb:
56:12:7c:f4:85:e3:59:1d:dd:e8:fb:d2:8a:77:6f:
c3:b8:03:37:c3:97:9a:f0:b2:19:62:ab:bd:6d:e8:
b1:07:6e:98:a0:42:3a:35:4f:5d:3d:e8:b2:41:d1:
c5:80:87:27:21:98:84:aa:0d:09:f8:45:c9:29:c5:
c0:63:ce:3b:12:cb:db:35:39:99:16:ab:1a:78:bb:
26:c9:cd:7b:62:99:5f:e8:1a:d9:40:1b:d3:a9:0c:
da:7a:d0:ee:22:b6:f1:1a:fe:a8:1d:5e:05:eb:ba:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:D4:4D:53:95:69:BF:F1:F6:2E:81:37:5B:1C:93:85:35:52:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d56764d2-e326-4e8e-b9d2-ea538a5cec9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.39.0/24
Signature Algorithm: sha256WithRSAEncryption
88:b9:43:d9:d0:72:e0:70:a7:56:d0:89:36:cd:28:5a:e2:16:
83:14:70:79:72:19:0d:f9:70:65:55:20:15:91:71:84:00:0a:
48:e8:9f:f8:f9:51:40:71:89:9c:ed:2f:ef:8a:60:7c:d4:27:
8a:15:06:cc:10:eb:33:12:a0:10:fb:b2:c2:5e:63:90:78:65:
3b:2c:7b:1e:e9:95:f4:8a:4a:f5:a7:be:ec:51:4b:95:4a:b4:
48:ad:13:c4:d9:ca:42:38:e0:5b:e5:88:8b:0a:2e:c9:b3:7e:
8d:01:e9:a8:bb:08:bc:34:eb:58:02:39:3c:e6:8c:9e:8b:26:
49:86:ad:df:20:66:34:1a:4f:08:da:b4:84:d9:d8:8e:49:e0:
6f:40:01:99:4d:85:b3:09:4e:5b:9c:77:34:17:06:e7:34:b2:
9d:67:68:d4:00:2f:89:7d:22:b0:d9:47:ef:cc:97:62:82:d4:
2e:99:30:4e:75:57:ae:16:8b:c9:e3:c8:7a:04:e2:c6:43:ac:
97:a0:1c:02:63:14:4d:23:4c:3d:fe:11:95:07:6c:41:8a:bc:
55:7e:ba:d6:5b:c4:66:76:cf:ad:22:f7:e1:2f:af:59:32:a1:
78:cf:df:39:aa:ea:be:8a:63:99:b6:56:08:43:db:91:1e:32:
98:54:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:15 2025 by rpki-client