Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f9d49e-690c-4893-beea-affca114c80d.roa
File: 81f9d49e-690c-4893-beea-affca114c80d.roa (raw, json)
Hash identifier: eCxG9MqNETViSZWNvONX1logU8HAKBV7cEw5dOfSQVY=
Subject key identifier: 77:B8:BC:F4:2D:7F:68:FA:FE:E6:87:7F:50:CB:AC:98:36:3B:D4:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3161771501C4BA49F8BD3D8F332C23B41B50FEBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f9d49e-690c-4893-beea-affca114c80d.roa
Signing time: Sat 18 Oct 2025 05:10:10 +0000
ROA not before: Sat 18 Oct 2025 05:10:10 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:61:77:15:01:c4:ba:49:f8:bd:3d:8f:33:2c:23:b4:1b:50:fe:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:10:10 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=301bc2a19afc18069865bf2f0b8f8cfe4f8a0f53b9797e0fd162096c944c9719, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:1a:2f:3f:6e:62:59:fe:3b:34:39:83:d8:
77:7a:ff:6f:9c:9c:1c:3e:d1:4a:74:2a:88:4e:03:
f8:1c:f8:ee:e1:12:f4:08:39:44:83:d9:ff:7c:d2:
5a:a7:4c:37:e5:2f:f1:e6:33:24:2b:59:10:9f:bc:
9e:72:65:a7:7c:66:6f:cf:56:1c:da:78:b5:82:51:
93:46:12:4c:86:e5:06:93:24:56:a3:b2:4e:4b:0e:
bd:78:7e:ae:aa:f9:df:b1:c0:9a:ac:fa:06:58:32:
b5:ca:16:f9:8b:4c:9b:5f:42:a8:f0:17:3d:fd:f7:
22:94:73:95:6f:dd:3d:83:5e:af:6b:ff:c9:c1:a0:
06:8d:a7:b4:fd:12:7b:19:cf:ca:b1:d4:1b:1f:a8:
f7:b1:04:0c:b3:07:28:d4:e8:52:c6:d6:8b:15:ae:
50:5e:5e:53:96:4b:5e:61:42:80:a1:9c:bc:cc:89:
52:16:5b:94:9d:33:a7:02:a5:74:d1:1e:b1:da:9f:
c0:39:d1:7f:81:95:82:68:0e:ab:28:e5:9d:1c:fd:
12:5f:80:0e:05:ef:3b:fd:da:ed:3d:96:86:3d:d1:
a4:f3:52:29:b4:1a:98:7c:b2:34:6b:f1:dc:ca:0b:
07:b6:d0:19:9f:29:0c:a1:4a:39:ac:89:03:e5:5f:
93:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B8:BC:F4:2D:7F:68:FA:FE:E6:87:7F:50:CB:AC:98:36:3B:D4:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81f9d49e-690c-4893-beea-affca114c80d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.49.0/24
Signature Algorithm: sha256WithRSAEncryption
74:89:59:27:5f:fa:78:a5:77:5d:06:94:77:8e:b7:06:c7:83:
67:84:ee:cd:d5:8d:8f:f3:24:de:bd:23:80:5f:5f:63:da:88:
80:b7:2a:4c:fd:57:0a:bf:99:8d:3b:6b:08:ab:d6:9f:6b:8a:
51:1b:bc:39:3d:a9:43:70:4e:82:aa:b5:43:4d:96:20:2d:8d:
df:03:27:d6:ca:17:7d:91:bc:c2:3b:14:0d:56:a5:fc:4f:52:
7d:8d:c9:ba:f8:76:6b:6d:53:ec:18:ac:57:a8:00:d3:e9:2b:
e0:7d:2d:3c:6f:5f:8d:5a:6f:76:f0:17:85:54:d8:1d:d0:05:
c0:23:d8:3f:1f:67:c0:35:b3:98:e8:d9:fe:2f:14:6a:29:f9:
77:0a:f4:e9:64:6e:c1:d8:53:d9:c7:1a:71:6b:c8:ec:da:ee:
1a:e0:cf:f7:f0:7a:ee:c3:48:84:4d:eb:bb:15:4f:33:1e:4f:
03:f0:7f:2e:a8:96:4e:b8:d7:5f:3b:1a:b5:44:44:ef:0b:c1:
56:85:04:fd:51:99:15:da:95:15:ad:92:f7:1f:7b:2c:fb:51:
1a:bb:15:04:df:2e:f8:d1:5f:26:5b:48:bf:ed:ba:6d:2b:c8:
08:94:9c:0e:0a:1e:70:3e:05:f3:b1:07:28:aa:e3:36:9d:36:
d3:08:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:12 2025 by rpki-client