Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34122c3c-e833-4215-88bc-2ef61106757a.roa
File: 34122c3c-e833-4215-88bc-2ef61106757a.roa (raw, json)
Hash identifier: iDfB+JNSrKNT6EPhHMGSSdFuYSqFeKmss2VI63wQ10I=
Subject key identifier: 4A:0F:A5:5C:3E:B9:B8:2F:64:9E:EF:3D:C0:B6:36:A5:EF:50:E8:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0686E6FAD134EE32AE8A93E1589F13D1846D7B6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34122c3c-e833-4215-88bc-2ef61106757a.roa
Signing time: Sat 18 Oct 2025 01:20:56 +0000
ROA not before: Sat 18 Oct 2025 01:20:56 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:86:e6:fa:d1:34:ee:32:ae:8a:93:e1:58:9f:13:d1:84:6d:7b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:20:56 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=970c2179e42f3613635320e97cc634ca58adbee379533fff7e22b5534d610f4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:e4:1f:1f:71:11:96:19:3f:9b:4c:c5:5e:
32:dc:bc:74:0b:27:db:0b:3d:d8:d4:20:5f:01:e3:
e2:31:6b:9a:be:ac:bb:cb:03:1d:13:d5:ba:d9:26:
6e:e3:f0:22:34:e4:c1:a0:87:e5:b1:39:df:8c:d3:
e9:2d:ae:03:94:b1:9f:6d:ec:7a:3e:d9:cf:7e:d9:
fa:c5:dd:a2:78:9c:fc:46:4b:5c:88:10:a0:84:2e:
54:e2:47:d9:63:02:09:63:d3:a4:74:e2:af:80:1b:
f6:dd:88:b0:65:7c:fe:c5:0a:78:1f:d5:4e:ea:98:
a2:7f:75:5e:f3:62:45:7a:bf:d7:49:c5:fe:66:e7:
82:ca:fe:6b:2a:27:26:2b:ca:98:41:82:03:cf:36:
d0:cc:37:e6:a5:1d:fb:9b:eb:11:2f:90:66:57:82:
2b:b7:1d:b5:21:0d:50:7e:58:ef:c1:43:b5:2a:23:
35:c2:af:08:b6:78:b7:d8:de:4e:b4:93:fe:df:2e:
91:07:a5:1f:5e:99:c5:31:2f:34:58:94:7b:46:9d:
33:d3:50:98:c6:80:95:1b:5a:87:77:1d:f0:46:6e:
0f:83:0a:fa:95:28:2e:ba:53:97:7c:f6:19:84:cc:
cd:fe:aa:f3:07:b0:0b:34:ef:97:c8:eb:ed:b6:4a:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0F:A5:5C:3E:B9:B8:2F:64:9E:EF:3D:C0:B6:36:A5:EF:50:E8:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34122c3c-e833-4215-88bc-2ef61106757a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.59.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d8:8a:a3:25:f3:94:ce:e7:1c:41:57:7b:ac:4c:5c:af:f1:
8b:ab:23:0a:99:91:a4:f6:f8:78:f5:03:58:fb:a1:25:b5:be:
06:cd:88:6e:62:11:7b:5e:09:60:8e:76:01:28:43:87:04:d0:
7d:9f:48:03:1a:a9:f4:fb:3c:b1:27:40:11:c7:7d:25:15:39:
7c:98:bb:d1:77:46:a8:9e:1f:60:cb:e8:2b:ad:dd:01:35:65:
11:9a:6f:4e:ac:47:ab:7a:63:ce:3c:8e:a9:7e:3f:b4:7f:fc:
a9:0d:cd:47:70:47:d6:fa:26:d8:fc:22:2c:e3:73:49:ae:94:
44:32:5d:97:49:43:40:72:83:ae:91:ff:57:1e:8f:1b:b0:52:
ba:59:e3:0a:ed:ad:b9:25:58:50:ec:26:b0:c9:e6:c2:53:cf:
79:90:7d:44:08:65:c1:12:2c:a5:db:10:2b:d6:38:52:4c:70:
a3:b4:ec:91:09:51:89:18:aa:d0:dc:bb:04:86:3d:95:a2:c7:
9a:e0:d9:cb:c9:1c:9a:b3:71:d7:30:11:d4:b4:50:de:73:5e:
44:c6:1e:0d:d2:a2:12:9d:54:74:70:85:94:39:ef:b2:21:64:
da:3b:a4:1e:c9:65:dd:c0:f5:3d:9d:c3:dd:69:24:60:16:92:
90:af:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:44 2025 by rpki-client