Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26b7cb2-287e-42bd-b79f-1e3b4f46df77.roa
File: f26b7cb2-287e-42bd-b79f-1e3b4f46df77.roa (raw, json)
Hash identifier: wwORxYfJJIVHMIcTrELfRfXl/lU6yirPOKmY/Muk7u0=
Subject key identifier: 33:C1:3F:80:70:05:DA:58:EF:4A:96:C9:13:DC:7C:D7:EC:A6:52:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1419F184EB8E37BD631C97439CC80B75CAB303B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26b7cb2-287e-42bd-b79f-1e3b4f46df77.roa
Signing time: Sun 02 Nov 2025 00:30:08 +0000
ROA not before: Sun 02 Nov 2025 00:30:08 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 199.63.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:19:f1:84:eb:8e:37:bd:63:1c:97:43:9c:c8:0b:75:ca:b3:03:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:30:08 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=307492eae2d496fa30a332c479e36b8ca68fd16406e71625d00054ce3e23a6cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:a4:d7:87:88:0f:cc:27:01:8e:69:46:f9:
c8:82:46:00:8d:e1:21:bf:52:5e:39:62:25:38:e7:
5c:71:fd:82:5f:41:87:d6:08:1c:69:97:07:f7:96:
cd:57:89:27:49:e3:92:30:04:af:14:b3:ac:e9:b7:
fe:2b:1b:a9:cf:8c:ef:16:c4:70:a8:01:a6:ab:06:
8a:32:80:20:64:09:53:3c:be:c0:1c:dc:1d:90:67:
bf:a0:f1:3f:3d:98:7b:97:47:62:9d:4e:f3:9e:a7:
37:e1:03:97:5c:0f:f0:63:ea:3c:b6:58:66:16:d6:
cf:fc:b0:09:0e:8c:2a:ab:21:4b:ef:d3:d2:15:17:
93:ac:e3:79:ed:81:c7:93:a9:c4:17:c9:22:88:9f:
55:1f:38:90:10:c6:4c:4b:5b:31:83:61:96:71:de:
31:88:67:74:5d:fe:d5:f7:c2:53:45:be:e5:a9:09:
81:95:2a:8b:f6:0d:67:cc:0e:62:1c:65:c9:a7:be:
08:a4:ac:b2:01:01:a3:95:58:6b:89:e5:7c:29:78:
5c:f8:01:9a:9b:30:7e:d7:60:b0:ab:83:4a:ba:2d:
5e:93:d8:59:14:f2:64:4a:6d:de:63:a3:31:28:18:
4d:b9:90:30:80:5e:bc:b9:29:1c:92:47:77:7c:ac:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:3F:80:70:05:DA:58:EF:4A:96:C9:13:DC:7C:D7:EC:A6:52:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f26b7cb2-287e-42bd-b79f-1e3b4f46df77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.63.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cc:da:10:38:db:18:03:3b:36:d7:9f:19:17:76:97:0c:b6:dc:
dd:19:ba:f8:9f:4b:d9:02:cf:e7:00:cb:60:6f:a0:b5:0a:1e:
8c:70:29:5d:fe:81:2d:15:20:aa:58:e5:ff:35:b4:13:13:93:
7a:20:f6:11:2d:54:30:5f:a0:ec:d7:99:6b:70:aa:93:fc:aa:
ad:2c:85:2d:ef:4f:40:48:41:0f:ad:b7:36:a9:0e:e5:87:20:
75:cd:41:4d:8f:7c:c6:2c:ff:ac:35:58:ba:bd:c1:eb:0c:6c:
f5:5d:8d:8e:36:cd:77:af:49:88:30:f8:69:e7:db:bc:f7:fd:
11:d4:3b:14:e8:12:7a:ed:f4:4d:e8:8b:b8:c6:c8:61:af:65:
27:ff:13:f8:65:d1:c6:42:86:00:9b:98:dc:2f:09:f6:13:fb:
75:7f:df:22:52:e1:1e:ec:5f:60:1c:ce:df:63:c2:dd:97:66:
1c:76:12:94:57:d2:36:82:84:88:2e:50:db:47:f0:9a:72:94:
91:d3:70:57:eb:51:6b:ac:fc:ac:52:b6:f5:5e:d6:c0:3f:0a:
f0:b3:d5:16:c2:2c:5d:27:a7:cd:68:8e:e0:45:e8:24:48:fd:
05:e4:00:25:9e:48:74:96:ad:15:aa:f9:b1:41:92:f6:6c:2e:
f3:01:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:33 2025 by rpki-client