Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4964d315-8ca3-4958-bf92-0369528cd834.roa
File: 4964d315-8ca3-4958-bf92-0369528cd834.roa (raw, json)
Hash identifier: +tgKursWmzkzbWk4oyUVtfowuviLjw93d4fmT4NLeo8=
Subject key identifier: 60:1E:CF:1A:28:D9:6C:76:E2:B6:87:F2:05:4F:24:43:CF:BB:D9:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FA1B97B8A08767C21B0FC41D8AF1C2AB70608A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4964d315-8ca3-4958-bf92-0369528cd834.roa
Signing time: Sat 18 Oct 2025 02:01:35 +0000
ROA not before: Sat 18 Oct 2025 02:01:35 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a1:b9:7b:8a:08:76:7c:21:b0:fc:41:d8:af:1c:2a:b7:06:08:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:01:35 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=65b74da1c5be7411bededf23c5013e891e7995867e3dd286b69e8aa348d456c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:90:31:10:1f:c7:3b:fe:f1:a0:a3:85:2a:
b8:3b:21:46:51:05:ed:15:de:cd:46:59:5c:ce:60:
15:31:a8:fb:7f:51:bb:30:fd:af:04:87:30:96:0e:
df:bb:8e:54:35:cb:37:ea:e7:92:88:b6:62:2e:bb:
7b:f9:b3:f3:5b:63:3b:11:1e:84:03:a3:ab:d7:b5:
6e:64:18:57:f7:a8:d9:67:f4:3f:15:06:ed:e2:15:
ee:8e:72:c9:07:6a:f6:30:6e:e3:ba:8b:c9:81:08:
37:5e:ce:97:2e:6e:8b:97:4f:b5:31:b5:6b:95:30:
48:1f:8a:62:a0:06:02:0f:cb:56:90:30:88:99:a9:
07:cc:fd:8c:d8:da:23:e1:7d:35:5d:31:57:62:d9:
7d:af:2d:2d:2e:54:3e:fe:85:86:16:db:36:5e:35:
bd:5e:5e:f4:d3:67:41:b8:6e:d4:19:9e:f9:4a:09:
3d:eb:a9:12:94:70:78:08:c1:94:b9:50:63:90:fa:
6f:8e:17:f0:4d:05:96:89:3e:2f:44:ad:5a:29:6d:
2f:41:2f:30:96:24:48:3b:9e:02:2e:6d:0f:04:f0:
13:10:87:61:6c:be:07:80:86:77:24:b8:3e:f9:0a:
20:7d:78:97:dc:1e:00:94:59:a7:ba:f9:79:6c:c8:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:CF:1A:28:D9:6C:76:E2:B6:87:F2:05:4F:24:43:CF:BB:D9:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4964d315-8ca3-4958-bf92-0369528cd834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.126.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9e:83:4f:e4:9b:c5:49:64:02:32:48:51:d6:62:67:b8:65:
d3:59:2e:7c:df:e1:d9:c4:ab:f9:05:02:0f:fb:8a:ae:2d:fe:
fd:ca:2e:26:a0:bf:ca:c0:a6:78:cc:61:56:96:ec:19:e9:b8:
d5:91:9a:01:d1:83:6c:ea:17:0f:22:dc:52:62:0c:a9:6b:d5:
ea:41:d3:d1:85:bc:83:d2:b1:cb:a0:47:3e:80:b0:4c:19:3a:
f6:b1:44:9d:db:1c:12:9e:d0:24:23:9f:89:9a:eb:52:43:fd:
99:e4:ad:20:00:67:19:ee:1c:ac:e7:1e:b7:1a:dc:13:b6:05:
bd:61:93:54:f7:7c:a7:1c:e1:97:b8:d6:de:7c:fe:7c:f8:08:
9e:45:1f:63:00:10:53:e7:45:28:e5:13:e3:87:ed:08:f7:09:
d8:b1:7e:6a:ea:65:cd:79:78:47:d4:61:d6:4b:a5:c5:0a:1a:
d7:6d:24:cf:9b:46:5e:5c:dd:7b:c9:d7:81:d1:81:f3:5f:c8:
5a:99:76:32:1f:b5:94:a5:26:63:00:5b:56:68:4d:fe:05:4b:
e3:23:b1:06:37:a3:fc:f8:15:e8:25:ca:7c:42:c8:00:bc:36:
05:20:f9:87:4b:82:fc:1f:26:a6:69:cb:5e:0f:60:47:56:97:
9f:d5:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:18 2025 by rpki-client