Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95b2888-5f3f-4f91-b2d8-5c197dd01543.roa
File: f95b2888-5f3f-4f91-b2d8-5c197dd01543.roa (raw, json)
Hash identifier: bMTiIRvuslKynFiZ3YwMNWYqzLJ0oqJGi19JJeRKNPo=
Subject key identifier: 63:10:2B:F7:05:40:3B:1B:81:69:03:83:53:C3:08:B3:2E:04:AE:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14638CAD992486D5826E462901458F685FF119B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95b2888-5f3f-4f91-b2d8-5c197dd01543.roa
Signing time: Tue 04 Nov 2025 00:00:02 +0000
ROA not before: Tue 04 Nov 2025 00:00:02 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:63:8c:ad:99:24:86:d5:82:6e:46:29:01:45:8f:68:5f:f1:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 4 00:00:02 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=2934704d55e88ca0fdcac79179393580115d92624fadaecb7367376c7d509b95, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:54:40:ca:73:40:24:49:84:98:59:42:7e:
cb:54:39:53:2a:12:56:d3:5f:2d:ee:6a:4d:c2:42:
33:84:f6:2f:b3:4e:e6:36:9a:d8:e5:38:9e:65:c5:
2c:1c:6d:a5:8b:ee:31:6a:ba:50:1a:dd:d4:ff:3c:
4d:de:70:08:93:64:49:f4:f7:b9:59:42:38:8e:e6:
87:76:bc:8b:a7:5d:18:45:b0:97:0b:8e:16:e2:30:
b4:28:1d:34:34:24:af:5d:8d:67:84:99:e2:76:92:
92:3e:45:9f:27:50:24:ea:19:7d:df:5d:6f:66:68:
d5:87:e9:85:3c:47:dc:37:19:2b:a1:87:a4:13:57:
a4:75:41:c3:15:b7:f1:c5:11:48:ca:69:80:bf:75:
ce:e8:31:38:8b:ed:29:4b:53:db:bf:a9:10:94:01:
2d:82:c2:0a:da:00:90:5e:14:b0:4e:25:6d:4f:e4:
f4:6f:d8:08:e7:4f:7c:0c:51:3c:16:d4:53:c8:ac:
c4:12:16:5b:6b:a1:6c:6e:ce:97:b1:0b:98:16:84:
df:eb:7d:e0:60:b3:de:9d:b6:fb:13:4f:60:fc:d4:
04:b9:82:a0:71:3e:73:27:87:2e:f0:a4:81:69:b7:
66:26:ad:43:a4:0d:3b:40:67:1b:e9:7b:b6:02:02:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:2B:F7:05:40:3B:1B:81:69:03:83:53:C3:08:B3:2E:04:AE:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f95b2888-5f3f-4f91-b2d8-5c197dd01543.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.132.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8d:10:09:4c:ff:ca:17:30:c3:7b:b0:b9:f9:db:a3:49:e7:
43:76:37:20:53:29:f5:ed:da:4a:28:cd:27:70:88:d6:65:19:
25:85:eb:0f:f1:22:c5:af:ad:8c:17:3a:ff:82:5f:e8:ea:74:
0a:99:67:2e:5e:ac:df:4d:dd:c6:2e:db:08:ee:85:2c:a7:08:
33:ba:48:6a:cf:06:8b:6d:12:7d:55:0e:0d:f3:86:a6:63:50:
71:1b:ae:6e:a2:d6:dc:de:09:29:01:50:75:91:d6:6d:87:45:
9c:5c:5f:e0:99:c8:0b:e9:f8:fb:07:ff:63:20:51:89:62:fd:
f5:f5:26:b3:33:9b:fd:5b:13:04:93:72:53:97:a3:46:5d:96:
39:67:a2:7f:6e:a3:8f:48:c6:e2:8f:9c:ff:2c:7d:f9:92:77:
35:ea:a3:ea:8f:4a:41:18:fd:ce:48:8d:a4:4f:36:79:f6:39:
6d:18:9c:5f:66:00:30:56:e8:38:23:56:79:e5:47:18:6a:4f:
f4:02:0e:44:29:04:b9:0e:30:84:33:5a:81:e6:4e:fd:9e:93:
62:7d:25:cc:1f:19:e8:8f:a7:8b:b7:bb:16:af:a6:91:5f:da:
20:a6:29:ff:84:06:53:23:b8:b3:8e:23:24:c8:d3:40:34:64:
62:43:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:44:37 2025 by rpki-client