Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49622952-87ad-4839-b3ef-656894bae19b.roa
File: 49622952-87ad-4839-b3ef-656894bae19b.roa (raw, json)
Hash identifier: 12St8CDJOavt4uEIX+uxCi/nbfKO2hUwIOHJElLLbFQ=
Subject key identifier: 87:93:F6:10:03:F2:78:AB:5C:E2:B0:AC:A7:FA:F5:5F:E7:2B:0E:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FABE30A1C53FB8007BB97BD7A8F541A3C6C4AB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49622952-87ad-4839-b3ef-656894bae19b.roa
Signing time: Sat 18 Oct 2025 04:00:13 +0000
ROA not before: Sat 18 Oct 2025 04:00:13 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ab:e3:0a:1c:53:fb:80:07:bb:97:bd:7a:8f:54:1a:3c:6c:4a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:00:13 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=7bd96c2c9b196c48b18d75a5edd5f85b19587180c61c8b42953b62525610c553, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:b3:b9:de:a6:a6:a8:f5:01:e3:e1:98:b1:
36:1d:52:17:1a:a6:6f:db:a0:29:b6:26:9f:f2:b1:
1c:e5:c4:f4:12:67:f3:2e:fb:e3:a8:6f:9f:c5:a3:
f5:44:42:9c:eb:79:7d:01:8d:cd:5f:6b:5d:bc:30:
6e:44:04:ce:5d:7a:9e:30:94:9e:2f:70:3d:9c:08:
9a:ac:d6:93:f3:04:4c:8d:23:41:1c:6c:53:b1:97:
04:09:d6:8a:c7:7d:1d:f5:3d:7e:15:f8:8b:34:6b:
bd:4a:25:f8:e3:33:c6:9b:46:ac:25:06:5e:eb:20:
b5:8a:b8:02:f3:d0:81:f2:07:17:61:05:41:d3:f1:
91:b1:0f:17:41:02:8d:35:4c:a6:ce:98:26:fb:7b:
31:47:34:62:83:3d:2a:64:a5:55:35:30:b2:14:88:
90:73:90:9f:0d:8f:c0:d1:19:9a:9d:06:c0:98:4c:
d3:2b:c0:75:da:56:b9:08:84:8c:83:ad:41:48:85:
fd:07:93:e7:27:77:a8:c8:8f:06:da:d7:fe:fb:bf:
61:6c:0f:48:b1:30:16:b3:d2:0d:24:1c:03:c4:ad:
6c:66:5d:d9:61:ef:df:d8:1d:29:46:5f:a1:08:ee:
ce:3c:d8:ed:ee:ee:9c:88:54:d2:74:0a:5e:83:48:
18:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:F6:10:03:F2:78:AB:5C:E2:B0:AC:A7:FA:F5:5F:E7:2B:0E:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49622952-87ad-4839-b3ef-656894bae19b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.44.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:35:ac:b3:40:b0:e5:75:2e:57:fe:ac:cb:40:32:70:11:65:
57:e4:f3:02:14:b4:23:85:04:ce:71:a4:ff:cf:66:fa:1e:01:
85:fd:cc:45:a6:19:d6:3b:b1:31:66:fe:a2:83:f9:6d:a1:03:
d6:ac:d1:ec:b5:8b:b7:5a:2f:da:36:8f:6e:54:ff:35:a7:ea:
24:d7:78:82:8a:5f:16:88:92:30:38:d3:0d:6a:8b:57:77:01:
e3:7e:63:a6:7a:a7:2e:e3:91:0d:ab:34:9b:05:57:53:5b:97:
fe:d9:29:ae:3b:f3:c2:bc:ec:a5:a0:08:dc:f7:19:0a:ea:a7:
05:3b:75:c6:77:1d:06:b4:ca:6b:9d:40:13:26:a9:6f:44:d2:
e9:ad:e1:ae:4c:75:c1:00:db:32:22:a9:f9:93:24:0f:e2:a7:
30:46:dc:a8:53:7f:34:80:34:56:ac:a2:37:7b:a0:25:37:58:
d1:bd:74:f3:d4:3f:d2:8c:39:81:cb:2d:5d:b9:2d:1e:bf:b1:
32:25:2e:4f:9c:ac:2f:0a:89:71:e9:51:93:b6:97:5d:db:b1:
98:bf:a1:14:60:f5:1a:7c:f1:72:b7:47:d5:2c:ad:8f:ed:af:
38:b6:6a:70:49:87:cd:6e:4f:3d:bf:24:77:4d:bd:77:6d:fe:
23:48:44:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:11 2025 by rpki-client