Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e636951-024d-452e-86d1-ee6a1f589c90.roa
File: 3e636951-024d-452e-86d1-ee6a1f589c90.roa (raw, json)
Hash identifier: XREt38FF/S9leyFzoODLm9yVEhqsMMIYPD5FrBzpveo=
Subject key identifier: 87:62:7A:0D:B5:7C:B6:6A:CA:97:9E:98:EC:EC:98:6D:F7:72:52:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46E798748478CA2DDB4CF35C6E868DB9C61CA8A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e636951-024d-452e-86d1-ee6a1f589c90.roa
Signing time: Sat 18 Oct 2025 02:50:57 +0000
ROA not before: Sat 18 Oct 2025 02:50:57 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e7:98:74:84:78:ca:2d:db:4c:f3:5c:6e:86:8d:b9:c6:1c:a8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:50:57 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3d8c25fec68332ceffdc5176d9fcddf9009d89219a2aaa0ac616ab665133d88f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:ba:0a:4f:43:ab:fb:7e:4b:98:18:44:32:
e0:ad:b3:57:6a:a1:4f:60:a8:75:6c:8d:94:a0:c1:
23:5a:ce:57:10:cd:be:56:b2:b4:e4:1d:30:d1:89:
fb:6c:b6:88:1b:52:7f:c5:64:db:03:c1:c7:b7:1b:
37:cc:ac:33:23:60:d3:a7:7e:a5:97:2e:e9:40:0b:
8c:80:3f:29:49:b7:f8:43:51:d7:bf:8c:f7:05:90:
8d:96:7f:88:29:da:d9:85:cf:bd:cc:ce:b3:e6:1c:
dc:ee:12:a3:8a:3f:6b:7f:c8:ec:f4:50:2a:ec:10:
60:59:d2:6c:dc:e4:eb:bc:76:5d:47:82:28:db:64:
fc:fe:d2:f9:7f:93:ca:b0:78:37:cd:99:1f:ca:45:
de:17:17:ba:2a:42:28:7f:bf:ff:57:1f:ca:40:4b:
e3:3f:c2:12:91:d2:16:27:16:84:ea:a4:fb:1f:35:
c6:0d:66:dd:5d:43:32:9f:9d:6f:55:ca:0b:57:20:
dc:95:fa:38:0e:d0:62:cb:21:40:17:6f:05:4d:59:
5e:06:b4:b4:8a:b5:1b:92:2e:d1:2c:c3:13:ca:98:
fe:6c:69:82:7c:db:11:44:28:42:78:84:4e:8b:bf:
47:61:0f:ed:3e:12:e6:1d:c9:10:fa:95:79:ef:a3:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:62:7A:0D:B5:7C:B6:6A:CA:97:9E:98:EC:EC:98:6D:F7:72:52:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e636951-024d-452e-86d1-ee6a1f589c90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.188.0/24
Signature Algorithm: sha256WithRSAEncryption
76:13:81:9f:96:87:83:37:c4:5d:20:b5:42:e7:3d:8a:80:59:
0d:b8:6b:83:17:b0:eb:9a:54:95:dd:a6:c1:a4:ca:c1:a2:90:
2a:06:f4:63:d5:15:6a:65:b4:fd:b7:57:92:cb:19:36:01:b0:
0c:ba:ae:44:ae:af:57:5d:a5:0f:19:d9:db:14:2f:6a:b9:07:
00:cf:b8:fc:97:c3:44:76:37:bc:f3:b4:6d:66:f3:eb:cb:44:
ec:ce:c8:ff:e9:d1:78:fb:da:df:8b:31:93:44:a0:89:42:0e:
e0:cf:39:e2:11:03:92:d7:98:7b:ff:2d:4a:0e:9b:73:3a:5e:
e2:cf:6d:26:bf:c6:2e:2e:6b:80:7d:e8:90:5a:74:dc:ec:d5:
58:db:ba:b2:f0:f3:a9:0a:a9:a9:8d:24:07:a9:2f:ca:b2:4d:
5a:88:5e:aa:cc:db:a3:19:61:73:56:4d:e0:41:4c:d6:9c:ec:
41:98:79:92:28:ff:e3:1b:23:ca:0f:c7:4b:05:1a:d9:e4:a8:
a0:ab:ed:b1:bd:fb:34:53:8f:18:67:9c:07:b4:09:2f:26:b3:
68:9c:4a:2c:45:bd:15:b5:ee:67:f0:04:e9:b0:b8:5d:2e:e0:
07:e2:bc:27:d7:02:c7:09:2a:41:58:a1:07:5a:24:ff:cb:7d:
f5:1f:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:34 2025 by rpki-client