Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
File: fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa (raw, json)
Hash identifier: QNVaYA+QiZESyVWxdk7In0Iwr2X+0HVBEuFWN56bI/8=
Subject key identifier: B8:08:C8:8F:89:28:AD:A4:8E:35:83:7C:53:C0:BD:44:D2:1A:0D:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0AFDDB592D145052ECFCD39EB62A514BDD086961
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
Signing time: Tue 21 Oct 2025 00:20:49 +0000
ROA not before: Tue 21 Oct 2025 00:20:49 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 122.200.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:fd:db:59:2d:14:50:52:ec:fc:d3:9e:b6:2a:51:4b:dd:08:69:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:20:49 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=38fe7ec3effe4d19dff45ca71a63a364f85978bfb6b6b16eaced5b9d94df2641, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:a4:17:d3:59:ff:c1:37:72:7a:30:31:ed:
20:b3:89:57:54:0a:05:c0:50:d8:65:8b:e0:e3:76:
a9:bb:9d:91:88:27:fb:4a:ba:46:8a:c8:9d:c3:1b:
67:1e:03:51:5a:7b:1d:cc:49:fe:39:b8:0c:13:19:
78:49:87:5d:05:73:fb:26:f6:13:e4:22:d8:cc:58:
46:87:52:67:67:d3:ee:e4:e5:10:a3:ba:39:2d:d1:
4a:e3:8f:15:bb:83:e7:94:5f:7a:dd:f7:9d:20:f8:
cb:e7:6c:24:94:c1:ce:3d:d2:34:4b:ca:12:2f:44:
95:56:49:16:5a:88:0f:1c:a0:6e:e8:9f:87:e8:b6:
3e:95:61:83:27:70:61:92:6c:99:19:b6:40:4f:ea:
02:d4:4b:14:86:11:1a:32:d7:00:36:44:38:b4:d0:
16:5a:9f:d8:2f:d8:1e:f1:aa:1d:cd:1b:c3:48:ce:
d8:e5:da:54:30:09:c1:6f:cc:84:e7:5a:e0:f7:62:
b3:4c:1f:48:bd:3c:5a:39:82:be:bd:80:01:bd:f2:
36:99:49:a7:41:a1:f5:3a:f6:21:18:d5:85:32:9e:
94:f1:1b:a4:bf:b1:28:60:be:72:3c:31:8d:a6:24:
41:1b:ff:16:92:e0:be:4c:f6:35:22:cb:de:94:71:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:C8:8F:89:28:AD:A4:8E:35:83:7C:53:C0:BD:44:D2:1A:0D:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe30170b-f64b-447c-bfa6-1b91a1c5a516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.200.62.0/23
Signature Algorithm: sha256WithRSAEncryption
91:d9:2f:cc:3e:9f:bc:69:3b:5a:eb:79:de:f8:6f:f0:4a:25:
c9:36:8c:52:a7:ea:e0:87:c7:4e:8f:23:c5:c3:43:1c:af:8b:
b9:68:af:87:73:7a:ed:41:34:ce:91:26:39:b9:6e:2c:a5:5c:
c7:82:04:3a:4a:3e:19:1f:00:cd:b5:cf:ff:9a:b4:bd:09:4e:
4b:40:e9:86:47:c0:47:84:c0:a6:44:d8:cc:81:4b:c4:08:c6:
32:77:89:98:49:3b:be:55:d1:34:1c:00:fe:ea:db:63:f1:5c:
8b:d0:ba:4e:74:3e:c3:0c:4f:96:8c:5c:15:da:58:c0:70:08:
1f:c2:7e:52:5a:c5:c4:79:c9:5b:09:58:42:2a:95:6d:99:e7:
4c:a0:27:41:b2:89:c6:a4:43:23:6c:8e:b5:33:70:6c:35:0a:
01:84:9a:86:27:a1:54:cf:c4:f8:e3:68:7b:19:9b:8d:cc:19:
24:51:1a:e3:af:de:95:59:cd:cf:8e:2f:f4:98:47:00:2a:6f:
4f:2e:7a:0f:84:99:69:e5:b2:68:ec:09:2e:ec:f6:9d:db:53:
56:b7:c1:2d:ba:f2:6d:ac:eb:a1:ca:33:be:4c:36:d3:00:e9:
10:2b:4b:75:ee:37:5b:db:68:8d:51:96:f0:09:b9:de:64:8c:
0c:bb:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:07 2025 by rpki-client