Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/350d6426-7ca9-45d8-a59c-d95cea6d73e8.roa
File: 350d6426-7ca9-45d8-a59c-d95cea6d73e8.roa (raw, json)
Hash identifier: P7Mwr/WJ95iWQx4szBPyQrWQjEYy5WIcJraRYfhao/w=
Subject key identifier: 0C:78:4B:7B:46:01:F4:C9:FC:2B:72:70:7F:14:01:1F:35:09:C1:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75F2D5607DD2EE680A91FC40858A1F05405F9206
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/350d6426-7ca9-45d8-a59c-d95cea6d73e8.roa
Signing time: Sat 18 Oct 2025 01:00:42 +0000
ROA not before: Sat 18 Oct 2025 01:00:42 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f2:d5:60:7d:d2:ee:68:0a:91:fc:40:85:8a:1f:05:40:5f:92:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:00:42 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=d3c54eece9e32732518a8599c31ad5232fac0b6db989023b4eee1a2e96c526f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:e9:16:e0:43:be:da:af:d1:ef:c8:4e:49:
48:b2:4d:84:48:20:2c:6d:87:05:d3:53:9b:9f:fd:
7b:d7:cc:b4:4f:a4:e7:78:68:0f:48:c7:0d:e3:6d:
4b:bc:89:86:5a:3a:d5:41:ac:50:a7:7c:d4:bc:50:
b3:2d:53:41:c5:85:97:7e:96:41:77:b9:e7:b4:17:
24:ce:e9:13:70:82:76:a3:b5:87:11:78:8a:40:22:
13:d0:ce:d6:22:2a:7e:55:42:9e:ae:4d:4e:26:61:
73:f1:9c:3e:14:ed:3d:45:3e:51:b2:8e:85:06:80:
5d:03:13:23:f8:0e:45:ad:6d:29:a1:24:db:0b:9e:
7b:96:57:e0:fa:cd:cf:5e:57:55:d5:53:98:6d:cb:
5a:80:18:f5:d9:4f:0b:db:7f:df:22:d6:5f:d0:bd:
a2:57:0a:31:b0:1b:b3:f3:99:41:46:35:78:86:8f:
a3:b6:0c:7a:92:01:85:e9:a3:68:55:0f:6a:2f:bc:
08:8a:9b:95:a6:72:27:e2:75:9a:18:8f:db:71:0d:
2b:8d:db:80:08:f2:d8:85:af:fa:eb:57:cd:58:68:
1b:ab:80:3e:91:52:d3:e3:fa:08:2e:9b:71:c0:63:
d9:f2:d3:1b:46:d7:4b:02:34:71:54:04:d4:db:09:
e8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:4B:7B:46:01:F4:C9:FC:2B:72:70:7F:14:01:1F:35:09:C1:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/350d6426-7ca9-45d8-a59c-d95cea6d73e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.104.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:92:4f:4b:22:4d:0c:c0:3a:be:9c:88:fd:cd:f2:34:c9:0d:
d2:b0:70:da:1c:6d:7a:31:f7:84:40:b2:b5:a3:fd:93:99:d8:
44:03:21:a7:6f:6e:0d:09:7c:37:e2:0c:5b:48:ca:21:3d:f9:
a2:0a:77:a9:44:80:88:45:8c:58:3c:1b:5c:dd:cc:11:6a:5e:
71:36:6c:70:55:5b:55:d3:05:43:c2:17:2d:ce:1e:31:40:c6:
40:3c:25:46:e8:c0:08:6a:8d:b5:42:35:a3:70:69:7a:df:64:
a7:3e:09:69:bb:79:ce:05:fb:6a:27:e1:72:0c:61:64:5e:69:
3d:f0:c6:84:51:ec:a6:2b:dd:db:6d:0f:16:87:aa:67:2a:da:
51:22:9e:1d:ab:5e:8a:eb:ab:d7:0a:2a:6d:2f:b1:d9:70:3f:
9d:b2:48:8a:4d:48:5f:94:e3:e5:03:95:e5:6b:53:4d:6e:c3:
d5:88:8f:5f:f1:69:09:e8:8b:13:57:61:2d:66:f6:34:64:66:
e3:77:b1:70:db:e7:79:ad:0d:ef:88:76:fc:63:f5:ad:0d:f2:
7b:6a:ef:2a:1b:12:77:6d:63:12:45:54:b5:6d:2b:94:da:9f:
a8:8a:a2:5d:ea:ca:83:88:c0:3f:ba:b8:c8:bf:0a:3e:84:6d:
67:64:2c:ce
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdfLVYH3S7mgKkfxAhYofBUBfkgYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDEwMDQyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkM2M1NGVlY2U5ZTMyNzMyNTE4YTg1OTljMzFhZDUyMzJm
YWMwYjZkYjk4OTAyM2I0ZWVlMWEyZTk2YzUyNmY2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyoekW4EO+2q/R78hOSUiyTYRIICxthwXTU5uf/XvXzLRP
pOd4aA9Ixw3jbUu8iYZaOtVBrFCnfNS8ULMtU0HFhZd+lkF3uee0FyTO6RNwgnaj
tYcReIpAIhPQztYiKn5VQp6uTU4mYXPxnD4U7T1FPlGyjoUGgF0DEyP4DkWtbSmh
JNsLnnuWV+D6zc9eV1XVU5hty1qAGPXZTwvbf98i1l/QvaJXCjGwG7PzmUFGNXiG
j6O2DHqSAYXpo2hVD2ovvAiKm5WmcifidZoYj9txDSuN24AI8tiFr/rrV81YaBur
gD6RUtPj+ggum3HAY9ny0xtG10sCNHFUBNTbCejpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDHhLe0YB9Mn8K3JwfxQBHzUJwVUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1MGQ2NDI2LTdjYTktNDVkOC1hNTljLWQ5NWNlYTZkNzNlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCGgwDQYJKoZIhvcNAQELBQADggEBAMeST0siTQzAOr6ciP3N8jTJDdKw
cNocbXox94RAsrWj/ZOZ2EQDIadvbg0JfDfiDFtIyiE9+aIKd6lEgIhFjFg8G1zd
zBFqXnE2bHBVW1XTBUPCFy3OHjFAxkA8JUbowAhqjbVCNaNwaXrfZKc+CWm7ec4F
+2on4XIMYWReaT3wxoRR7KYr3dttDxaHqmcq2lEinh2rXorrq9cKKm0vsdlwP52y
SIpNSF+U4+UDleVrU01uw9WIj1/xaQnoixNXYS1m9jRkZuN3sXDb53mtDe+Idvxj
9a0N8ntq7yobEndtYxJFVLVtK5Tan6iKol3qyoOIwD+6uMi/Cj6EbWdkLM4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:33 2025 by rpki-client