Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
File: e06824cb-2a7f-4608-9566-85c5d5041fb2.roa (raw, json)
Hash identifier: RD9vD28m4TL8tXRd3zGf53h0vZrS7t9HS0qHqlanlf8=
Subject key identifier: B0:E1:EB:85:60:0D:5D:EA:63:C4:41:FB:3F:D1:0D:5F:F2:F6:78:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24F4889339EF30EA8B8AC53DB66A5B9057DB3D6D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
Signing time: Fri 31 Oct 2025 00:20:03 +0000
ROA not before: Fri 31 Oct 2025 00:20:03 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 15.128.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f4:88:93:39:ef:30:ea:8b:8a:c5:3d:b6:6a:5b:90:57:db:3d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:20:03 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=362e8568421f61a28ba76378f9818fa9090648cd6d48f6b7e93b1b2ceb88cc40, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:40:9a:b8:1f:f0:a1:49:2d:be:9e:8f:8f:
3c:a5:93:ab:3f:dc:ce:d6:ce:7d:fb:20:d6:30:15:
15:e0:1c:5a:c2:7b:51:51:29:d1:06:7a:a9:ca:da:
cc:7f:46:a0:a3:60:41:a6:a3:5f:4e:e9:19:71:0a:
6b:fe:50:3f:fc:4f:49:00:31:ef:a7:08:67:f2:c3:
96:35:79:76:32:21:e4:ea:39:f8:08:2e:15:7e:3a:
40:d5:07:cd:af:b1:9c:1b:5e:21:41:45:d9:75:20:
62:32:69:ad:d4:b6:1f:3e:19:2a:14:dd:fa:82:42:
aa:f6:d7:db:68:ff:47:7e:29:f0:e8:ce:fe:0f:7a:
46:26:46:58:d9:e4:8b:9c:87:b7:72:17:8e:d3:53:
e2:87:9c:34:9c:1e:50:66:63:71:94:95:f6:00:92:
59:fd:38:60:90:34:d6:11:4b:60:ef:81:bd:30:be:
8d:e3:6f:99:17:4e:c0:db:e1:67:b0:a9:96:54:70:
54:7e:03:ac:be:a6:d3:d7:ba:68:6b:a1:da:77:1d:
7a:f4:fe:e9:31:26:05:84:3c:b1:e5:e4:33:59:68:
aa:f7:e4:49:b3:81:d1:6b:df:9a:e0:59:d3:d9:23:
05:bf:f2:38:5e:20:e2:05:fe:d1:a9:82:ff:65:21:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:EB:85:60:0D:5D:EA:63:C4:41:FB:3F:D1:0D:5F:F2:F6:78:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:38:01:e3:08:00:5d:3e:4e:c9:05:79:bc:fb:30:ad:31:8d:
cf:e8:35:cc:0a:22:a7:8e:0a:c5:7e:dd:18:98:ba:8b:b7:e3:
c0:1e:02:51:0d:e6:6f:d1:91:1e:9e:b7:9d:eb:fb:70:d7:a2:
29:8b:6b:ce:c7:c8:6d:18:7e:68:d2:aa:72:b2:ca:62:2f:91:
59:25:d2:22:0e:58:df:f3:f5:8a:03:40:52:50:e2:f6:e9:6f:
e7:cf:b7:68:d9:b4:f4:39:41:e6:4a:26:f9:3f:c2:05:8b:8e:
79:7f:d0:01:ac:b8:69:cd:31:89:9b:97:b1:b4:8a:d4:6b:08:
72:4d:b7:d2:90:9c:23:ce:1d:ec:0c:eb:84:10:79:c4:f9:1f:
04:7c:ee:c7:bf:9b:4e:fc:21:75:6e:8d:7c:6f:eb:48:99:5c:
18:cf:dc:6a:7f:16:16:48:36:e8:ba:a5:5b:43:f5:31:60:c1:
16:e3:c9:38:a5:cd:0c:30:96:6b:06:02:e9:51:c6:df:12:ea:
10:d1:50:81:d6:fc:26:85:49:a5:80:e1:41:8b:85:d6:ba:ec:
95:e6:de:19:7b:e6:dd:0d:05:9f:9a:e5:d7:79:b9:87:4b:4f:
4f:b9:eb:98:8a:3a:8d:0f:f8:f0:45:6c:b0:2c:91:56:cf:3a:
4a:2e:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:06 2025 by rpki-client