Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677cc8ac-32a5-40a4-9c47-d5439881f650.roa
File: 677cc8ac-32a5-40a4-9c47-d5439881f650.roa (raw, json)
Hash identifier: jOmYY98kGgMBT5N7FJTglQtB6tsE6UWxbVThTpb03P8=
Subject key identifier: 08:85:92:85:00:8E:20:BA:6F:3B:1A:C2:CE:7A:9B:F8:55:06:24:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2757288E2C10B26F3E9E860762372C970A7DCC69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677cc8ac-32a5-40a4-9c47-d5439881f650.roa
Signing time: Sat 18 Oct 2025 02:41:42 +0000
ROA not before: Sat 18 Oct 2025 02:41:42 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:57:28:8e:2c:10:b2:6f:3e:9e:86:07:62:37:2c:97:0a:7d:cc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:41:42 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=ce8da4febb61695ea195ef518b80fa76c1d0a165ec14b03e94994396ae6ec68e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:8a:86:ac:be:30:2e:94:7e:e9:07:a5:24:
3b:9b:f1:36:1b:99:d2:31:1d:3c:fc:79:59:3d:01:
87:be:d5:57:4a:23:d3:5e:f1:bf:c2:44:d6:29:14:
e4:53:cd:7a:7a:b9:5f:3c:35:ec:96:93:47:1e:60:
82:2f:eb:28:dc:a9:af:44:06:f1:33:05:13:ab:0f:
e8:74:a9:76:14:a4:0e:39:b0:42:11:60:ca:4d:53:
ef:70:e2:29:54:4f:99:6a:d3:de:27:56:c1:60:33:
82:69:7f:1e:43:28:e2:d0:d3:e6:e8:58:4d:80:aa:
17:f5:82:0e:f8:9b:79:cf:c6:3d:26:af:8d:df:7b:
66:d5:b6:25:83:ef:c5:c7:21:35:54:d2:2b:30:0d:
0e:a6:bf:87:a6:3e:54:1d:42:46:f9:20:11:cd:81:
d7:65:d4:22:39:ef:26:f8:64:22:5d:d4:ef:0e:51:
ae:83:f3:5a:96:ee:31:46:76:a6:6d:d1:25:45:bb:
0d:9c:84:9f:93:a8:df:a8:b0:1e:f2:df:37:ad:60:
55:ac:e6:96:e1:4f:4e:2f:06:3f:5d:4b:40:64:94:
05:70:32:55:c9:8e:bd:3d:16:72:1a:f9:ad:a4:14:
9f:7a:d2:26:53:3c:1a:c4:2f:01:ea:aa:08:d4:a8:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:85:92:85:00:8E:20:BA:6F:3B:1A:C2:CE:7A:9B:F8:55:06:24:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/677cc8ac-32a5-40a4-9c47-d5439881f650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.204.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:47:38:0a:08:3e:4a:cd:52:a2:dd:37:c1:be:b1:43:5f:1d:
38:d3:e0:cc:ef:f7:3c:9b:44:28:8d:c6:11:77:16:a1:db:ab:
48:00:d3:69:66:e8:2d:a0:c1:95:48:06:83:cf:96:46:64:f8:
70:97:03:3c:87:ae:b2:89:36:5c:02:a4:ff:87:89:f8:e2:21:
0f:cf:d3:50:5d:78:8a:60:65:c5:8e:ca:0b:49:e4:cc:9c:6a:
77:ed:aa:09:17:ee:0b:03:70:a5:e1:09:52:19:48:f4:73:ea:
48:f3:03:17:bd:ab:7c:7f:87:fa:d7:72:e3:26:60:dc:c0:c3:
cf:42:b5:15:ae:97:e9:22:11:02:c8:f2:3a:9e:cb:d5:a9:6c:
12:25:13:c3:27:c3:c6:1d:e8:dc:60:45:40:c9:0a:ce:4f:b4:
bc:8c:ef:ee:cc:b0:54:f4:90:80:f9:e2:cd:91:21:04:10:27:
3c:83:46:00:bc:2a:df:59:ec:11:98:ee:0f:54:7e:57:aa:b0:
f3:70:d8:72:1c:93:79:c5:86:df:ec:22:42:f4:31:fa:f9:be:
a2:fb:9e:d4:5c:d4:39:86:60:e7:3b:eb:11:61:b5:26:e7:6e:
14:fe:27:6d:59:64:ef:b0:89:3d:43:a7:8a:30:49:c0:7b:c6:
62:96:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:01 2025 by rpki-client