Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d07a6f0-a560-4f6a-a5e7-242082c42c70.roa
File: 2d07a6f0-a560-4f6a-a5e7-242082c42c70.roa (raw, json)
Hash identifier: 3u6shlK6p8Tep6GWTN8f3OyyTQxJVR30igB6yYoafZs=
Subject key identifier: A1:E2:34:4D:EA:23:DB:75:A7:86:4E:B2:C7:C9:C7:72:8E:E2:CB:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B4FBBE3F6EB98B02B2E62D711211683A160E309
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d07a6f0-a560-4f6a-a5e7-242082c42c70.roa
Signing time: Sat 18 Oct 2025 02:20:50 +0000
ROA not before: Sat 18 Oct 2025 02:20:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4f:bb:e3:f6:eb:98:b0:2b:2e:62:d7:11:21:16:83:a1:60:e3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:20:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4d335b9c0f07052e4b4970c8aead1196eb388b1bd8a6751e85e27b3cb1cf62e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:05:44:dd:29:84:1a:69:70:13:f7:9d:61:
f7:98:3b:2e:b3:92:4c:13:86:34:1a:4f:8d:07:34:
ea:ba:c9:30:21:f9:af:3d:15:e0:b0:56:91:79:b3:
bd:fa:c0:78:ad:f6:6f:78:ec:1f:b3:06:16:a5:f2:
56:c2:a9:06:be:84:91:e7:83:36:47:34:aa:05:82:
84:46:6f:aa:c7:0f:07:82:1a:83:51:67:6e:77:19:
ee:18:73:d8:e2:98:a9:21:a2:b6:84:48:59:72:f2:
9f:c6:c0:35:1f:7e:32:f5:23:b6:39:03:05:5b:8c:
8e:62:1a:76:d2:b2:fd:37:03:30:0e:e4:a6:a5:af:
a7:ac:d4:a0:f0:f5:66:da:4e:67:65:5c:8c:27:77:
81:b2:cc:c1:95:2e:b8:bb:f5:76:12:6a:57:65:9e:
27:fb:a0:fd:b3:ab:80:6f:02:19:79:b6:ce:e8:25:
72:4e:41:85:f3:83:4f:a7:42:1a:ca:38:29:a3:bb:
f1:75:02:b0:4c:8a:ab:42:e0:bb:3c:5b:3b:70:dd:
1a:cc:aa:38:ef:7c:57:53:c3:72:6a:46:a7:dd:be:
1f:79:1e:91:43:d5:39:f7:8f:b5:74:ed:53:32:c6:
64:ae:a9:6e:fb:c8:bd:43:e6:50:e1:ae:c1:29:4c:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E2:34:4D:EA:23:DB:75:A7:86:4E:B2:C7:C9:C7:72:8E:E2:CB:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d07a6f0-a560-4f6a-a5e7-242082c42c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.120.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c4:55:ce:b8:10:e8:a3:01:64:5d:ef:bc:67:fe:f6:c5:03:
0b:34:4e:97:9a:a1:0e:52:e2:5f:19:a4:17:4d:4e:2f:23:e5:
40:37:9c:cd:e3:3e:b5:ae:30:b7:d8:36:78:a3:0b:71:71:0e:
5a:ad:be:6f:1e:58:b6:ba:41:5c:4e:5b:eb:20:8b:16:58:ab:
73:13:5e:b5:e8:8d:66:b4:e6:34:2c:75:91:33:25:8c:91:73:
b2:5e:a0:0d:7e:5d:6f:62:e6:4e:ec:15:8d:60:19:14:04:4e:
d9:a9:bd:3a:af:e0:81:76:d4:a7:ba:4f:82:7c:19:41:93:36:
69:1f:78:7c:e7:2b:6d:a5:84:a9:2e:73:3e:cf:d5:37:e0:87:
34:57:7f:c2:46:fa:a0:ba:c6:fa:b5:3d:6d:35:ca:49:8a:3a:
b7:7d:1b:70:70:11:d3:d5:8b:92:6c:87:a2:b1:0e:49:da:e6:
e8:1a:ba:da:a6:61:ee:3f:c1:38:13:fc:d6:13:8a:a5:a6:bf:
07:df:9a:b3:b2:11:4b:89:c4:56:9e:f3:7f:3b:60:f0:89:16:
63:d1:05:fb:58:1b:d3:af:ba:1d:89:f4:cc:6e:c9:35:b0:f1:
e9:e8:90:7c:0d:6e:19:ff:05:9a:d4:6a:84:8c:b9:72:e8:21:
7a:22:1e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:04 2025 by rpki-client