Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932406d-2512-42c9-8b59-53b9a466b07e.roa
File: 4932406d-2512-42c9-8b59-53b9a466b07e.roa (raw, json)
Hash identifier: 5+Ea58+s5qAmFfHogVAobUw1etaMirsLAPG9eVcAvaE=
Subject key identifier: EF:B2:10:0E:E7:31:C8:F6:0E:44:0F:C1:EE:76:5E:F9:A4:50:67:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C3B63B7AA6A6CCF841B33AB65D16C10D6BB62E0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932406d-2512-42c9-8b59-53b9a466b07e.roa
Signing time: Sat 18 Oct 2025 05:00:08 +0000
ROA not before: Sat 18 Oct 2025 05:00:08 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3b:63:b7:aa:6a:6c:cf:84:1b:33:ab:65:d1:6c:10:d6:bb:62:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:00:08 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=a46452861844eaa0c395c651a3b58ba792872227e09a4fa02178caa848d0f9fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:8c:1b:7d:cd:7f:0f:9b:44:52:b0:f2:81:
4c:26:81:0f:df:92:b3:9a:de:02:35:c4:53:86:8e:
20:cc:4a:db:83:fc:9a:a5:75:45:60:de:be:8e:10:
42:98:4b:5e:9f:70:2b:3d:f6:f6:4f:93:80:40:fa:
75:5f:a2:08:78:e2:0c:3a:20:de:0d:99:07:1f:4e:
5b:88:57:eb:c0:a7:38:8b:a3:73:15:3e:25:05:0d:
ac:5c:25:14:49:dd:9a:67:fd:1a:e9:b3:98:86:4c:
06:46:fc:5a:9d:9b:10:3b:3e:7f:c5:bb:16:a5:74:
9c:74:8b:68:03:26:33:58:0a:29:d2:5b:ea:65:65:
b2:d8:39:64:31:16:b1:e2:81:cc:c6:93:a5:81:bd:
48:03:44:9e:94:e1:29:3c:75:25:ac:4b:3f:5a:70:
5a:8e:59:43:6b:50:f8:9a:e9:e5:c1:35:84:3f:6d:
d6:79:f4:14:f0:5f:24:c6:3c:ff:8a:d1:c6:d7:c1:
b6:ec:4d:f7:e5:78:de:67:72:b2:37:5a:12:24:d7:
d3:2e:27:77:07:97:d5:ed:07:dd:8a:7a:f0:b0:26:
7b:ca:b5:9e:d2:8e:d1:a8:e0:31:5d:e6:83:fc:1c:
74:fc:92:74:49:81:36:f1:16:27:ab:17:96:53:91:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B2:10:0E:E7:31:C8:F6:0E:44:0F:C1:EE:76:5E:F9:A4:50:67:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4932406d-2512-42c9-8b59-53b9a466b07e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.208.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:0f:00:88:0f:18:cf:78:fd:20:cd:46:88:4b:1b:fa:87:8a:
98:1e:2c:9a:ad:ad:23:5a:f3:67:71:46:e7:d4:56:75:b8:ac:
b6:73:fb:dd:c6:9d:e2:4c:eb:03:4d:c4:da:76:78:42:c2:ce:
fa:ad:30:15:24:7a:c6:01:bf:c3:77:22:5d:28:94:91:4c:31:
58:22:83:df:45:0c:ad:c6:1f:62:fe:0d:83:b4:e8:b6:08:41:
d7:ff:cc:cc:96:0c:48:b9:ac:f5:14:32:73:61:1f:c9:d1:61:
10:ad:cb:a3:3e:93:03:f5:29:18:e9:1a:7f:14:f9:da:35:e5:
97:c0:2e:07:5b:3e:72:4d:f1:c8:85:f9:a4:a8:3c:c0:eb:dc:
1c:23:15:11:bb:cd:ac:ae:4a:d1:7f:04:c3:25:4c:40:e6:02:
0c:be:3b:57:d9:34:fa:2f:b5:2b:1c:29:b9:6b:6d:92:ed:db:
be:5d:18:49:fe:81:33:46:fb:b1:3f:1c:56:f7:20:24:d6:74:
45:b2:b9:b1:37:61:d2:62:91:22:0f:b1:ee:2c:44:4e:d8:a7:
cc:13:7a:db:c1:8f:d0:c3:5c:a4:20:17:51:fc:8e:1b:46:df:
eb:1a:d5:5e:aa:6c:7e:e7:c4:d8:d5:79:ef:94:60:84:4c:21:
29:04:01:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:11 2025 by rpki-client