Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
File: 4bc62270-49ca-441b-ba8d-65b483733244.roa (raw, json)
Hash identifier: 7OzR63RiBNIcWhHdU/QwgMvsCHkXz7MNuX4tfu5MpFg=
Subject key identifier: 16:AD:D1:C8:BC:88:56:F0:14:32:06:B6:5C:3A:B0:FB:07:42:58:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AB571125ACF2C33BED6E33070474BA61E6C6C04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
Signing time: Sat 11 Oct 2025 00:38:35 +0000
ROA not before: Sat 11 Oct 2025 00:38:35 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b5:71:12:5a:cf:2c:33:be:d6:e3:30:70:47:4b:a6:1e:6c:6c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:38:35 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=85991a7da42afdf363018839b3afdb4509831f9e304f70ae90f38ce72a8e15aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:a4:2a:b4:53:a2:c7:f2:d0:bd:bd:fb:de:
8d:78:0a:8c:61:9a:3c:16:03:81:64:74:f6:0d:73:
3a:5e:1a:73:02:5f:8c:b5:76:95:16:f6:ea:83:6c:
88:c7:94:47:3e:25:6b:a0:af:02:81:d6:ee:98:f1:
d6:42:d6:a0:68:95:52:19:65:c0:52:93:a9:50:95:
a9:86:59:f4:b8:1a:e0:1d:25:cc:8f:50:fc:30:62:
68:96:56:1d:3d:ae:e7:c8:b9:39:cf:17:56:eb:99:
c5:b5:40:47:1f:c0:fd:ad:10:93:a3:b6:00:ad:98:
4f:e8:07:79:ca:44:1e:7d:9c:c0:41:53:85:20:73:
f5:80:ba:49:b3:24:9b:ec:1e:c3:96:48:d2:29:a5:
55:07:41:b4:97:7e:0d:58:d2:b2:94:a5:d8:f5:e7:
92:fc:56:4c:c0:39:12:fd:24:c4:15:f1:dc:92:85:
01:a9:51:4e:e0:00:29:f8:e4:35:73:2b:c4:63:78:
6e:e8:66:e7:46:43:19:ea:7b:83:56:b7:95:c8:70:
43:12:54:1d:84:a0:d3:1e:5d:d6:55:91:f4:c3:61:
d0:f5:7c:4c:91:2a:c3:cc:ca:98:d0:5c:9d:4f:9f:
b9:02:f6:0a:88:b7:5b:08:98:27:20:60:6d:35:1d:
b4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:D1:C8:BC:88:56:F0:14:32:06:B6:5C:3A:B0:FB:07:42:58:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:89:ac:7b:6e:2e:e1:ee:da:8a:ce:d5:7c:ff:63:ea:d8:26:
e2:5e:5c:49:65:a6:b8:b3:c4:44:96:9e:49:09:28:4f:c3:ad:
fe:6e:9d:20:6c:06:0b:ac:25:d5:8a:f0:e4:92:d5:a6:ba:0f:
1c:18:91:6e:39:5c:f2:6a:61:34:08:99:37:2c:14:aa:5e:c2:
85:85:ef:7b:48:35:65:65:08:26:de:bb:4d:95:dd:73:5a:ae:
16:62:e7:ea:cd:c0:b2:7b:d2:a6:58:ea:ff:2a:15:68:8d:9d:
41:f6:07:4b:f4:b3:00:31:16:42:9f:e6:82:6a:61:fb:7d:c1:
56:b1:3a:01:57:ca:da:4a:3b:a8:3c:32:89:d3:0b:0f:98:36:
3f:9d:32:58:bf:da:55:2f:b1:c5:eb:a5:53:0e:4d:16:7d:1b:
90:06:29:fc:95:8d:e8:cc:92:9e:a3:68:ab:07:d0:12:ba:1e:
0d:af:63:04:02:4b:fe:90:2b:de:5c:01:e1:fb:56:24:97:10:
66:d3:9e:4b:be:79:40:06:c9:26:ad:a4:57:35:ff:25:7e:5c:
ad:88:bf:a5:b0:cd:aa:d0:d7:3f:88:d9:8c:f1:87:3e:60:ac:
37:a1:af:56:2d:c7:d7:0c:af:00:fb:63:d8:09:51:33:b3:3f:
85:b0:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:30 2025 by rpki-client