Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbd3905-48d2-4912-a67d-cc5d02542e4e.roa
File: 6dbd3905-48d2-4912-a67d-cc5d02542e4e.roa (raw, json)
Hash identifier: Dd9yX6MdtPvz2i3rRGDAiUbW9GgsbnxFqNIJTs+vMD8=
Subject key identifier: 3C:66:83:A9:B8:9D:E7:94:2F:BF:27:E9:88:93:E3:42:50:07:42:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B4E9187D84847DC3BEC6B034906FD5DC5C14871
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbd3905-48d2-4912-a67d-cc5d02542e4e.roa
Signing time: Sat 18 Oct 2025 02:41:05 +0000
ROA not before: Sat 18 Oct 2025 02:41:05 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:4e:91:87:d8:48:47:dc:3b:ec:6b:03:49:06:fd:5d:c5:c1:48:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:41:05 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=45ca80d74260f3002091016dc685ea070108d1fefb78ad40760d53818cddb7cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:5d:be:b4:a7:aa:05:2f:60:13:1f:99:40:
b0:83:e5:e8:49:96:5b:5a:64:80:a3:98:80:8b:10:
2e:84:4a:5e:f4:e5:39:91:55:36:de:c3:a4:54:5c:
e8:57:30:96:e2:61:58:41:f4:f4:3c:7d:5e:11:7f:
af:06:46:59:61:3d:b5:22:d9:49:f3:88:e6:1e:4b:
a3:bb:b5:a9:d4:62:9d:9e:53:c4:82:b6:73:a4:f7:
ca:a3:f0:b5:1b:1c:57:94:90:18:e5:71:02:0d:01:
f5:5c:40:f5:df:e9:f6:a1:ce:58:e3:01:22:4b:65:
37:9d:ed:f5:ef:f8:37:f9:97:1a:13:41:79:d8:32:
fe:88:1d:80:0d:01:4c:44:d7:30:37:e8:ce:f7:f7:
3e:ef:e8:fc:ca:98:9d:7d:dc:50:89:33:93:0d:c0:
4c:94:5a:6b:b2:cf:08:bf:c5:f0:61:25:68:e1:55:
9e:6d:ab:6f:b7:bf:ee:d3:2b:0d:5c:9a:e0:e6:07:
d6:c0:a7:d3:66:c8:95:af:35:9a:16:58:65:55:91:
d0:3f:c9:93:25:50:d1:91:d5:a1:76:c0:62:26:42:
2f:98:a9:9b:a6:86:de:a0:7e:7e:d7:1f:77:d8:35:
4c:38:45:14:34:02:6d:fa:e0:b0:f5:05:4b:27:a1:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:66:83:A9:B8:9D:E7:94:2F:BF:27:E9:88:93:E3:42:50:07:42:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dbd3905-48d2-4912-a67d-cc5d02542e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.65.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b8:02:f1:1b:01:4b:69:be:49:86:85:84:e3:31:c7:66:bc:
61:5c:cf:fe:78:6c:d2:fa:16:87:33:56:a3:05:6b:94:f4:d7:
9d:af:85:95:d1:e6:68:a5:9b:4a:4e:d6:5c:83:95:59:c7:9d:
6f:bf:53:5f:b2:61:ee:29:0e:ec:d0:a0:4d:49:fc:a9:3b:ac:
95:84:56:e2:8c:f2:06:39:f3:c8:2e:d8:91:6f:57:c5:e3:e8:
e0:1a:45:89:60:04:bd:ad:87:b6:0e:76:a7:64:ff:71:5b:80:
56:95:74:fb:ae:27:c4:9a:3d:05:9e:86:86:4a:09:54:fb:c9:
b2:02:b5:0d:11:26:20:69:e7:3c:fb:79:8f:5a:9e:61:83:03:
c8:b8:e4:3e:38:8c:e5:fb:7e:dd:ea:6f:40:63:7c:66:66:cb:
eb:2f:50:fd:ef:35:e7:ac:bc:e7:35:b4:5a:56:32:67:71:2f:
ab:bc:8d:80:d6:d3:0c:31:16:31:fc:df:61:55:a9:52:9e:86:
7c:f2:3f:27:fb:2b:a8:2c:38:6a:71:73:85:f1:e1:a4:9c:ea:
5d:f6:4a:00:4c:b9:a2:78:83:92:25:c5:71:ba:4b:00:13:2d:
3a:03:cb:69:c3:d9:3c:97:17:1e:46:1d:6a:7a:8d:28:9e:5f:
d4:56:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:46 2025 by rpki-client