Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/707f6122-2429-415f-9045-672152556cf9.roa
File: 707f6122-2429-415f-9045-672152556cf9.roa (raw, json)
Hash identifier: BRAHbIdhq1ZU++KqqsGnB3L9sRnOefcaRJWrjG6j8zI=
Subject key identifier: F3:6F:AA:8A:3C:50:5A:BD:F8:D8:AC:04:CF:B9:54:ED:CE:33:01:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7334679B40BAC979BEC5CCC573314D49828ADBA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/707f6122-2429-415f-9045-672152556cf9.roa
Signing time: Sat 18 Oct 2025 02:50:54 +0000
ROA not before: Sat 18 Oct 2025 02:50:54 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:34:67:9b:40:ba:c9:79:be:c5:cc:c5:73:31:4d:49:82:8a:db:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:50:54 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=d3245bed72fedba8489c6b83528cbbbe9aa91f4b2cc1a1ae6cf5106b7144e04f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:89:0a:f2:31:92:2f:d2:14:b8:0a:fc:f8:
37:b6:bf:4d:df:a5:f8:7c:7d:70:da:b5:ec:32:65:
c8:5e:20:2c:b5:c1:be:49:0a:8f:be:f5:61:9b:c7:
09:39:70:5d:82:6b:14:59:e3:93:42:54:26:e4:68:
a4:d7:ed:83:96:4c:4b:5a:71:7d:32:4c:f4:42:5f:
c2:12:12:28:31:68:58:fb:5d:37:e9:08:8c:83:3a:
6b:ae:fd:13:ec:45:4d:47:e1:33:29:4a:b0:b2:0f:
7d:d1:42:de:1c:81:b3:0d:2d:a7:0a:39:58:23:1c:
82:b2:6e:de:ff:6a:f2:de:ad:6f:81:40:ee:23:5d:
46:f4:1a:98:bb:ec:0f:0a:c1:8d:0a:ae:23:e7:74:
4d:4a:77:49:1a:39:17:47:de:ac:8b:a5:2b:c1:62:
66:c3:0d:27:ac:a0:98:af:68:44:8a:fa:7a:70:4a:
c3:5d:c8:05:53:9f:be:9d:bd:97:7e:22:34:8d:3b:
42:a9:86:e5:c1:17:2d:ef:a3:cc:12:97:8c:34:26:
64:c2:a1:bc:3b:1e:f1:de:46:2d:d0:9e:6d:c4:04:
ec:2a:79:3f:dd:fe:ac:e8:d7:f5:43:ff:64:af:6d:
65:76:9e:8c:0a:57:67:2d:5b:9e:da:90:49:d3:95:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:AA:8A:3C:50:5A:BD:F8:D8:AC:04:CF:B9:54:ED:CE:33:01:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/707f6122-2429-415f-9045-672152556cf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6a:f6:75:81:84:2a:c5:ad:a8:a9:e0:c4:d1:2a:64:34:36:
96:bb:9a:d6:8c:b0:86:1d:6c:3c:40:a2:a9:d0:1c:91:43:76:
d1:1f:e2:3d:a5:2b:0f:79:ba:35:76:9d:ed:c6:1d:d0:a9:96:
86:4c:c8:c3:3f:9c:01:9f:e2:38:13:0e:8b:cb:5f:46:a9:30:
2d:29:88:83:04:c9:04:f2:34:6e:1a:83:82:0a:3a:08:a0:6f:
29:c8:3c:13:05:2e:a4:a9:38:5c:77:12:ab:8f:29:20:3b:29:
80:93:b5:6c:0d:8c:1b:b3:3a:6a:9e:8a:66:73:65:d5:a9:e2:
f8:3b:d1:e4:ac:3a:9d:78:8b:07:b7:d9:98:de:e0:f6:87:4c:
52:6b:63:10:ff:46:88:47:f4:f2:06:e6:c9:dd:0c:75:0f:bd:
66:24:24:c1:9d:b8:15:a3:65:92:9d:6c:32:cf:31:24:1c:01:
b7:2a:9b:9f:56:77:42:b1:d3:c2:a2:78:d0:d1:d7:50:a0:36:
b6:81:8c:d3:49:1c:1d:59:79:b9:3c:32:37:bd:ad:17:ca:66:
23:93:d6:33:5f:45:2e:23:b8:45:a8:dd:f2:42:6b:67:ac:52:
7c:d8:0a:e8:96:ae:e5:91:ab:1b:8c:1a:b7:dd:ee:ee:93:82:
e8:82:af:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:47 2025 by rpki-client