Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64f0b572-31fd-404e-9910-339da3efec0b.roa
File: 64f0b572-31fd-404e-9910-339da3efec0b.roa (raw, json)
Hash identifier: gjnUOiMipyfs87A1sEOOGNwPsXmQuZnvTLHj8wIkfFM=
Subject key identifier: F7:8D:AC:AE:4B:0B:01:3B:95:6B:09:39:43:EB:5F:29:C8:30:F2:F8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 098E2045AD306DA7B8951788DF791ED002CC71C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64f0b572-31fd-404e-9910-339da3efec0b.roa
Signing time: Sat 18 Oct 2025 02:10:09 +0000
ROA not before: Sat 18 Oct 2025 02:10:09 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8e:20:45:ad:30:6d:a7:b8:95:17:88:df:79:1e:d0:02:cc:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:10:09 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=91709a2b05b8388a677268b29f4ca78db326e33fd83d389b4488fbc8fd4b5305, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ba:90:a1:de:b2:74:be:31:99:7b:6f:a2:ec:
2a:8d:42:96:49:d2:c7:e0:10:0d:b1:5e:d4:dd:93:
24:9f:a4:16:d0:50:cb:b7:b2:10:69:6a:4b:f4:3c:
8c:82:42:eb:a4:6c:48:7c:34:89:48:4b:8f:8e:1d:
43:8e:bb:f8:18:46:53:d9:37:60:34:18:46:e7:d7:
ce:e3:a4:46:fa:83:34:71:d2:f2:12:1d:29:5e:eb:
58:27:93:1f:f1:2e:c3:d4:4d:45:d9:1a:b9:80:64:
6c:d6:e0:ab:86:eb:c7:c0:2d:32:db:c4:39:a5:54:
4b:08:6e:4d:94:ba:26:04:68:9c:26:d1:6d:c5:e0:
88:44:5b:3e:70:aa:96:64:42:d4:63:ab:35:42:02:
ab:a3:7d:91:28:56:83:21:c1:ac:20:fc:3c:a5:fc:
cb:81:e0:85:8e:58:f2:f0:32:d1:6b:9d:42:4c:55:
28:a5:c1:19:bf:ea:b1:f8:35:d1:b2:a8:bb:b3:40:
25:a2:1e:85:fc:38:6f:7d:3e:ea:6d:ca:44:f7:d9:
8b:18:b7:56:14:db:ed:48:4a:52:a4:95:4c:f2:34:
0f:46:b3:ed:32:d4:09:df:67:0d:5b:3d:d7:72:e7:
fa:c8:c9:92:9b:9b:78:91:97:db:37:99:c7:d2:3b:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:AC:AE:4B:0B:01:3B:95:6B:09:39:43:EB:5F:29:C8:30:F2:F8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64f0b572-31fd-404e-9910-339da3efec0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b8:e8:20:a0:ab:eb:4e:de:fc:0a:45:d8:5b:26:24:0f:fd:
ad:e9:09:5d:5e:7d:65:57:61:66:70:24:af:cc:a5:d1:79:1c:
7f:57:c3:2e:9a:08:92:2c:fb:5d:92:96:8e:99:84:01:8a:f0:
01:cf:7b:fb:f1:b9:8f:60:91:0c:f8:d0:ac:61:da:31:d1:4d:
c5:d7:3f:25:b1:2d:c7:7b:cc:d7:3f:03:68:f1:0b:86:78:fd:
32:cd:0e:f1:03:0c:80:e9:70:3b:d0:66:08:87:42:f0:c8:25:
03:ae:cb:07:be:0f:6e:24:04:84:14:a7:54:14:9e:79:04:8c:
c1:90:07:90:ff:b9:8c:2f:af:72:b6:c7:28:3a:df:4a:57:d2:
f3:e8:45:10:ea:72:22:f6:10:d7:b9:0b:cc:d9:5f:3e:0f:51:
7f:99:1f:f4:d3:74:06:bc:5e:f1:98:4a:74:da:d6:b5:8e:f6:
ed:64:49:57:cc:ea:1a:fc:6b:67:cc:7a:44:40:c3:4c:49:d1:
de:71:9e:2b:3c:86:46:10:15:f0:6b:4b:16:72:cb:b9:2b:69:
39:30:b8:89:49:dc:2d:b1:9a:31:35:85:5f:83:8a:6a:4a:44:
e0:4f:24:7c:76:04:97:6e:96:20:99:5e:d2:95:56:3b:46:da:
01:6e:0d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:36 2025 by rpki-client