Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2104473a-0066-4dd7-8697-2e95f88b443f.roa
File: 2104473a-0066-4dd7-8697-2e95f88b443f.roa (raw, json)
Hash identifier: VC9ELZblg0MHuzJiwuvkeIjjN8ZXREyFe/qTrFvOipY=
Subject key identifier: C0:BE:CD:AB:A4:15:73:42:85:51:08:E0:43:5C:6A:58:D2:F7:73:2E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FA4915F4CB9D175DFE13D62FEAC120A8746DAF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2104473a-0066-4dd7-8697-2e95f88b443f.roa
Signing time: Sat 18 Oct 2025 00:41:49 +0000
ROA not before: Sat 18 Oct 2025 00:41:49 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:a4:91:5f:4c:b9:d1:75:df:e1:3d:62:fe:ac:12:0a:87:46:da:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:49 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=9a8450996bf5a810f263c8ad463c7585fbaa1a955769872e82c1778d104b2748, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:70:8b:ea:ad:53:d0:ff:9c:26:43:ba:1c:
53:9d:e9:7f:fe:b8:5b:6b:1d:3a:3f:6d:2a:79:d8:
1e:43:f6:48:6b:39:c5:1a:3d:88:5d:d4:cc:1a:35:
36:5d:86:41:b2:f9:43:6c:33:8c:b8:67:35:86:d5:
8e:8d:5f:e9:f8:1f:f1:e0:4a:6a:71:1a:bc:4e:9f:
eb:bc:b0:eb:ce:03:10:38:91:31:c7:cd:6f:33:d0:
57:67:a0:e0:65:ed:35:bf:17:e7:50:d8:cb:dd:e3:
d9:b3:e1:99:ed:de:fb:9b:91:b7:6c:85:8c:57:f7:
b5:65:8b:8e:44:4b:5d:b4:f2:c0:51:34:9f:c8:30:
d8:fe:b0:e8:b5:d1:b6:61:9b:7a:21:ae:21:e5:b9:
84:7f:79:23:d3:9f:45:2f:1c:91:16:1b:d7:9d:3d:
c3:84:8a:44:25:79:99:2a:ab:f1:d9:97:31:fd:d9:
8c:21:cd:d0:77:99:db:a3:51:8a:75:aa:d8:ba:8f:
f9:73:e7:2f:b5:9e:64:f2:da:b0:47:fd:1c:08:bd:
a5:ef:e8:35:fc:5b:df:07:c9:06:e5:06:42:e7:56:
a6:0c:32:6f:c5:29:44:3d:bf:c2:1b:93:b4:53:c4:
e1:1d:ba:7f:79:38:bc:be:c5:32:4f:9b:b5:64:d7:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BE:CD:AB:A4:15:73:42:85:51:08:E0:43:5C:6A:58:D2:F7:73:2E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2104473a-0066-4dd7-8697-2e95f88b443f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
28:82:a5:71:5e:dd:5d:c5:34:4a:66:96:46:7f:6e:3d:93:08:
26:5a:39:80:1a:3e:6b:5a:38:7d:10:31:58:47:3c:a3:8a:85:
49:c2:b6:ad:e2:31:33:05:57:9e:f8:64:13:e1:13:82:65:4d:
07:a2:61:cb:ff:a7:e5:68:03:85:44:b8:be:e3:8a:3b:ac:30:
4a:a9:69:f4:59:96:07:af:c1:d2:2d:54:d3:40:63:18:1e:bf:
db:a1:af:d9:7f:d8:46:c6:51:ce:23:2a:d7:e4:3f:d7:bb:3b:
95:0d:fa:f6:d9:3a:65:81:23:77:d6:70:45:d6:2f:11:1c:98:
25:4d:bb:81:12:53:ea:84:7c:53:45:c0:d6:11:e2:f2:64:b1:
64:d0:c0:30:22:04:8b:c1:f9:dc:d6:67:7e:f1:87:14:7e:85:
40:c9:64:97:0c:96:22:cc:1c:9e:e2:1d:15:12:1b:78:41:ac:
25:92:3c:af:74:a4:ac:56:cc:d5:64:a8:70:8a:e0:8d:10:16:
ef:ca:33:ea:93:89:5b:cc:de:35:5e:1b:10:68:9f:05:bb:44:
c9:14:1a:18:14:5e:5d:ce:14:29:b9:cf:bb:a1:c6:76:a3:b3:
90:63:e6:0d:6d:ee:42:56:ea:3f:b6:aa:d0:ab:5c:91:73:4d:
87:8b:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:39 2025 by rpki-client