Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5443c3-1669-415e-b884-a0ee38d145ba.roa
File: 2c5443c3-1669-415e-b884-a0ee38d145ba.roa (raw, json)
Hash identifier: W8AYyWQAaaSArkXl6A+j8gJ57ObkTCNzVfSyIO4C0KI=
Subject key identifier: C2:D3:97:BC:A4:85:B0:B2:70:D9:30:71:C4:2A:D7:31:92:C6:48:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46D89D92C7DB8CA3CED019CFA7163F175B96911C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5443c3-1669-415e-b884-a0ee38d145ba.roa
Signing time: Sat 18 Oct 2025 04:50:50 +0000
ROA not before: Sat 18 Oct 2025 04:50:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d8:9d:92:c7:db:8c:a3:ce:d0:19:cf:a7:16:3f:17:5b:96:91:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:50:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=12d6271a5cf505fa99a141768e30b794267fef8d2b8431a7e4c6864dd7d5ca0c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:65:b7:15:45:25:53:4f:ae:3b:7e:e5:be:
b9:85:3e:2d:1c:1b:93:06:fb:66:98:3b:d7:ee:ac:
39:98:38:57:f7:ff:2e:e5:1c:04:68:d8:0d:47:6a:
9b:c3:23:d9:18:a6:be:96:ee:2e:e3:8a:41:36:48:
ad:c1:55:53:f1:b8:59:ba:5a:d3:c4:86:11:d8:7f:
b8:81:8e:8b:a8:34:55:ed:e1:d4:83:bf:1a:c2:ca:
d6:b7:df:fe:da:ae:43:c4:34:d1:47:2b:dd:84:45:
c3:b3:1b:6f:6f:ae:dc:2d:e0:7a:4f:d2:c8:6e:de:
78:30:96:a7:1b:ed:be:cf:f1:51:cb:1e:15:dd:ca:
51:9f:27:c7:43:9a:1c:c1:0a:a4:d3:04:7c:05:a1:
7b:11:c1:29:41:bd:aa:db:78:b1:8f:ef:41:95:84:
11:8a:22:27:9f:ff:7b:ee:d2:04:0f:ff:f5:17:38:
85:ec:78:a3:a6:cd:d5:25:0f:e5:93:4c:51:2a:14:
4f:fd:4f:4b:54:d4:5f:cb:dc:ca:68:2d:c8:58:48:
b5:f4:61:55:57:66:41:8c:53:4f:b9:56:e0:b2:12:
a7:15:e1:45:b7:5e:dd:eb:83:20:93:f1:90:56:c8:
db:58:43:70:ff:77:67:47:06:67:b4:66:46:87:20:
a6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:97:BC:A4:85:B0:B2:70:D9:30:71:C4:2A:D7:31:92:C6:48:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c5443c3-1669-415e-b884-a0ee38d145ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
90:cd:68:5a:49:74:f1:b9:ec:16:1b:21:4a:c5:23:f8:a3:e8:
48:09:8e:29:50:07:45:1a:e5:ec:98:88:e6:b1:c3:8c:23:fa:
1a:79:62:0b:4d:ac:15:f8:b6:56:e0:b1:f6:13:24:9c:ff:02:
9e:82:32:ff:aa:cd:6e:7d:39:58:ca:04:a4:21:1e:f0:bc:be:
88:d5:b0:94:f4:d2:b7:95:5f:ba:77:96:8d:a3:aa:f5:5e:c1:
2a:1a:a9:20:f2:65:a0:7d:c0:07:93:c5:cc:96:54:cf:c2:c4:
8a:b0:43:d2:1b:f0:ad:af:2f:ff:e0:bb:a3:38:0b:53:fe:99:
87:b6:92:f1:0c:0e:99:20:9d:92:12:20:51:2d:db:76:0d:bb:
14:57:5c:7c:46:5a:ec:31:6c:d5:8c:64:c5:88:b7:11:b9:dd:
f7:40:7e:52:51:c0:b0:69:f2:43:d2:00:fd:06:a6:58:3b:b9:
d7:89:a6:be:b2:c0:23:a4:84:68:28:f5:a3:88:28:0b:49:5e:
72:9e:36:eb:34:95:a3:bd:19:4c:86:f4:73:ff:0a:35:97:8d:
67:55:a8:55:c6:e0:19:55:b9:19:25:1a:b2:24:58:08:9b:50:
6b:b5:a6:c9:52:9f:4a:8e:1d:00:4b:68:ae:dc:9c:39:66:47:
cc:5c:3a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:12 2025 by rpki-client