Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72432e34-89e9-42e2-9a4b-13cb3ad8a3e8.roa
File: 72432e34-89e9-42e2-9a4b-13cb3ad8a3e8.roa (raw, json)
Hash identifier: 3EsqPXOEx1aeQq1+XsWbkQ2gS2e7SKt/RLeGFkfOaQU=
Subject key identifier: FA:8C:26:91:33:1A:73:6F:F5:4C:CA:70:F8:A5:87:3F:6E:A7:1A:F7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09B3904A179EA8D6AF18C2C819E407B6ED3AE2B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72432e34-89e9-42e2-9a4b-13cb3ad8a3e8.roa
Signing time: Sat 18 Oct 2025 01:50:51 +0000
ROA not before: Sat 18 Oct 2025 01:50:51 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b3:90:4a:17:9e:a8:d6:af:18:c2:c8:19:e4:07:b6:ed:3a:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:50:51 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=98c4afbab5871e76808cd89513ea3296b2670ac10a7a5a4e0ebc535c62ef6d9a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:fa:13:65:70:47:b4:02:0c:2c:d9:49:bf:
48:1b:7b:ab:96:36:74:46:23:76:76:dd:ce:01:d5:
97:0e:28:d8:c3:48:70:23:fb:c0:42:3b:21:e7:f7:
ca:07:e5:ba:04:6c:d9:bd:67:c9:be:ce:30:ca:a7:
39:74:08:ad:92:1b:b9:e6:81:1a:68:47:3e:8e:52:
5e:13:33:05:38:09:f6:30:5d:84:3c:63:70:30:02:
05:d5:3e:9a:79:a6:9c:d8:c2:7d:00:5a:35:27:eb:
16:b2:66:0e:14:18:66:66:fd:b1:79:0c:92:45:69:
bc:78:3e:c5:a0:85:7f:f5:f9:5c:46:ce:7c:c8:95:
a2:6b:9d:27:49:ad:c0:14:b5:9f:eb:68:ce:dd:38:
ff:b4:1f:b7:df:af:d3:54:84:05:b3:4c:b1:4b:38:
96:e1:18:3e:8c:94:2e:4b:0c:e1:79:71:70:84:8e:
81:9b:05:42:b2:35:24:bd:86:51:1d:96:56:b5:24:
d0:47:5c:89:3a:4d:dc:dd:55:a3:44:e8:ec:40:b2:
18:fb:9b:4d:bb:ff:09:53:48:e4:79:5d:8a:0d:03:
ae:bb:65:b1:50:44:25:bf:15:bb:5c:fe:4e:ab:bd:
ee:0f:17:5f:5b:01:07:0f:bf:53:d6:76:a6:c8:64:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:26:91:33:1A:73:6F:F5:4C:CA:70:F8:A5:87:3F:6E:A7:1A:F7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72432e34-89e9-42e2-9a4b-13cb3ad8a3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.139.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d1:4c:33:14:79:82:e7:68:c4:69:59:1c:80:1c:46:70:42:
1d:32:20:00:85:c1:6d:ec:49:64:26:91:3f:9e:23:14:99:86:
57:87:d9:3a:07:be:cd:86:0a:bf:04:0b:0a:40:cc:c3:eb:af:
c2:04:f1:d4:35:84:28:11:ce:57:33:d9:f4:84:fd:90:85:26:
2f:1c:9f:b7:5d:9e:00:a4:91:0b:65:08:48:98:28:d3:e0:29:
fe:e8:43:86:10:2f:91:e4:71:dc:d3:5d:35:bd:87:fb:41:43:
af:82:34:35:cd:6a:36:57:9e:b3:e9:c1:b8:8a:8b:3a:30:33:
7a:e3:9b:c0:1a:2e:40:e0:14:70:13:2d:e0:01:74:31:b1:72:
38:78:d5:94:94:b9:fd:09:38:56:25:f2:63:ce:f4:94:66:06:
ff:04:44:57:4c:9a:d2:69:5a:6c:40:cf:cb:67:79:b0:85:91:
9a:45:44:6e:63:80:7c:f6:b4:62:49:9c:4b:8e:f1:5e:73:89:
e0:4b:f6:9a:74:eb:b0:d7:a1:0d:77:53:8e:61:7b:bd:27:ee:
e1:2e:7c:87:9f:0f:28:82:dc:41:a1:f1:96:69:99:cc:ef:4a:
7d:1e:45:3e:35:0c:2e:a2:16:aa:6c:33:ce:84:27:a0:05:e8:
bf:3a:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:12 2025 by rpki-client