Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
File: f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa (raw, json)
Hash identifier: 70P9AVxpDB6vfHsCgfBX/B0bGxnscDWLczH9OjyaaDo=
Subject key identifier: 19:51:4F:16:A5:19:18:F1:40:41:C0:90:05:87:1C:48:B7:DD:59:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 038DC3565269DDF76A06179E0DD4BB8D0E5F35DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
Signing time: Fri 31 Oct 2025 00:00:14 +0000
ROA not before: Fri 31 Oct 2025 00:00:14 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 31.220.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:8d:c3:56:52:69:dd:f7:6a:06:17:9e:0d:d4:bb:8d:0e:5f:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:00:14 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a2497517c99c8b64329d672648213c4831e019fefa838e00a0eef1b275a661cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:b7:68:ef:a1:63:73:fe:90:43:33:7c:b1:
8f:38:42:b2:5b:2b:cf:fd:4c:bb:99:71:f0:2e:c2:
d8:36:19:07:02:68:05:f7:ec:72:29:96:9f:a7:f5:
44:69:1e:48:64:bc:80:65:8c:5e:a5:b0:b0:15:b0:
31:eb:2d:8a:4c:c2:ca:ea:61:91:19:fc:34:75:09:
8b:27:45:8c:86:6f:29:e9:38:b2:b1:60:81:e1:0d:
f1:a3:e5:9c:80:ed:62:be:cd:4b:fd:be:1c:9e:2e:
ed:3a:11:c7:bd:dd:4e:4f:e8:7a:ac:cf:40:3c:08:
5a:28:13:6f:b6:39:09:98:d3:5b:0e:d2:b8:5b:a4:
02:1b:c6:99:ec:5a:40:04:bc:97:0b:79:54:3b:d2:
ae:a7:21:13:48:d1:4e:c6:ea:1c:a3:9b:e2:d6:25:
62:1a:82:01:e7:55:1d:3c:69:dd:90:e2:1b:91:97:
cf:47:44:f9:e9:06:43:94:7c:9a:c9:bb:9d:05:8f:
54:c6:d6:04:c3:9d:99:cb:66:da:43:71:40:85:6d:
1f:ae:1f:bb:73:e1:34:8c:a1:d4:0e:e4:7d:0b:9d:
0e:70:9c:5e:f8:6e:f7:8e:bd:15:79:eb:b0:c2:31:
c7:c4:76:9a:41:85:c6:de:b8:e4:2c:c8:b2:75:b5:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:51:4F:16:A5:19:18:F1:40:41:C0:90:05:87:1C:48:B7:DD:59:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f6c95e-dfde-4325-bba8-963c772e4a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.245.0/24
Signature Algorithm: sha256WithRSAEncryption
80:bf:59:a3:ba:f1:d7:c2:58:98:29:27:06:5a:46:86:3f:55:
c9:50:43:1b:e2:7e:5a:3a:07:6f:cb:e9:04:ff:c1:68:a9:a8:
d5:58:fe:8b:ff:af:be:5e:09:86:26:8c:78:80:3a:af:d6:d8:
82:91:fe:ff:ce:40:fe:d8:9b:bc:73:70:10:18:60:5c:23:9a:
c1:32:85:49:da:a6:d5:c9:e2:7b:a7:b5:91:21:dc:53:4a:bf:
e8:90:76:19:a6:14:e9:47:78:37:a3:23:2d:75:2b:bb:a2:2e:
10:14:7f:3c:47:a9:4f:6f:92:16:73:12:6d:79:5e:c7:8b:62:
5d:b9:e0:89:30:35:f7:15:87:42:2a:e8:05:4d:9a:94:57:9b:
e9:53:e5:39:69:59:4d:9f:73:9a:d0:cf:1a:07:2f:5e:3a:38:
23:43:85:e8:28:15:45:be:a5:07:62:bc:3c:9e:66:94:61:ff:
89:92:c8:45:c6:43:b1:44:ba:fe:0c:52:32:d1:a0:45:0d:b4:
82:ba:99:9b:d6:ff:85:8a:0a:d8:e4:50:29:c6:18:bc:81:7f:
37:40:1b:27:ad:54:d8:86:77:d3:04:9a:f2:36:4a:fb:91:4d:
38:30:d2:f2:e2:4d:2b:5b:4e:74:12:e1:0f:36:1b:8f:9c:e0:
22:e2:8a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:18 2025 by rpki-client