Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768b2e58-77b3-4862-86b6-9e16569b5832.roa
File: 768b2e58-77b3-4862-86b6-9e16569b5832.roa (raw, json)
Hash identifier: jKZ5T/Ibwan9j1DqSnDGorQj0ESqFNKlkJxntRvczjw=
Subject key identifier: 86:CC:8E:4D:0B:42:79:DE:8D:1C:F2:87:4C:70:5F:51:02:6E:42:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45762EB42D2EB9A0FB48938AB5C3F73B3BF6CBD4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768b2e58-77b3-4862-86b6-9e16569b5832.roa
Signing time: Sat 18 Oct 2025 04:40:07 +0000
ROA not before: Sat 18 Oct 2025 04:40:07 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:76:2e:b4:2d:2e:b9:a0:fb:48:93:8a:b5:c3:f7:3b:3b:f6:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:40:07 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=2d8d469ac2afa7a04454ef6f0010f5549fcff7fb59a8ca4c285d0271eb72abb4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:4d:3a:57:66:89:d1:8e:53:30:e8:0f:78:
7b:aa:fa:5a:f6:59:6f:25:99:13:85:cb:a0:31:a8:
07:d5:77:3e:83:d6:fb:07:68:01:cc:c6:7e:8b:bd:
e9:8f:4e:37:16:a0:4c:7d:a3:41:2b:73:82:71:73:
f9:b4:f5:3d:a5:5b:81:5b:34:fb:d6:67:5d:5c:ef:
c2:f0:b1:19:fd:24:27:72:03:52:42:5d:ef:c6:8d:
3f:77:5a:42:93:fa:e0:e0:06:30:ab:77:1a:44:80:
9b:5c:c1:ee:91:37:51:13:60:41:06:8f:e8:81:a6:
3c:b6:e7:bf:1b:6f:fb:14:41:46:06:c0:61:41:ee:
ea:e1:b2:22:9a:2e:fd:10:2c:19:09:64:2f:d9:40:
4f:08:fc:53:fc:45:76:f3:e8:96:94:d0:e2:b5:2d:
bd:cf:6f:60:5d:ff:b8:1a:97:cc:e0:21:d8:8b:41:
bc:bf:a7:6b:26:03:84:02:9d:7b:da:69:6d:79:30:
88:6b:94:69:14:0f:50:12:61:8a:8e:37:53:f8:47:
27:77:2f:33:2b:c1:06:76:04:23:f3:f7:64:0e:c5:
8c:3c:4d:c5:14:54:51:14:9c:52:b3:c2:b3:73:83:
b4:f4:54:4f:dd:cc:c7:4a:2f:39:56:1a:9f:70:b6:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:8E:4D:0B:42:79:DE:8D:1C:F2:87:4C:70:5F:51:02:6E:42:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/768b2e58-77b3-4862-86b6-9e16569b5832.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.112.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b8:89:5e:2e:cf:80:ca:8d:59:46:bf:bb:ae:24:c6:fe:c0:
4c:55:58:ba:83:85:ea:25:9b:46:aa:80:bc:4c:54:8f:9b:b1:
8a:01:59:d7:1a:01:2a:4e:f4:a3:d5:90:72:85:00:05:fd:29:
4b:8d:9c:6d:2d:5d:7f:e7:40:8d:d9:88:c4:07:a5:8b:eb:39:
da:9b:78:97:db:46:fc:a0:d7:58:b8:22:34:f0:a1:f2:0d:af:
7c:2b:4c:52:04:38:d9:20:d1:4e:a4:2e:8b:c2:0a:31:95:36:
7b:5b:29:8c:44:3c:25:49:88:09:f7:1e:47:65:a5:3b:f6:08:
a8:a2:23:6a:06:8f:b3:ba:e6:69:11:e2:7d:a5:02:02:3b:53:
cb:36:b7:3e:5c:40:8c:f2:b2:0d:b2:d8:c6:b8:ba:5c:fa:ab:
1b:c4:a3:d2:c1:62:79:36:9d:8c:ff:75:1f:83:19:22:6f:a7:
f3:2e:31:d8:db:22:ac:42:b3:64:f5:c4:10:48:ab:15:5c:74:
87:5d:80:de:b8:f6:b9:5f:f3:39:d4:6b:43:21:c7:ea:e2:7d:
4e:5d:a8:62:0e:90:78:04:d7:30:d1:e0:de:e7:fa:9d:64:f3:
08:ef:8a:b7:f6:d8:8c:6a:b5:54:6b:b8:69:0c:07:84:d1:ca:
cf:79:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:53 2025 by rpki-client