Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8700831e-0c83-4ee3-8dea-21f279b2abd2.roa
File: 8700831e-0c83-4ee3-8dea-21f279b2abd2.roa (raw, json)
Hash identifier: OXXhZ4W5f31v/PZ65VMfJrQdeKSVGtBTptD+t3cfd3E=
Subject key identifier: 4C:18:A1:7B:6C:03:BC:49:89:1E:E1:CB:85:DE:95:1F:A8:A6:57:FD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24C9A757C4F40EE62474C65B182672F804F63065
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8700831e-0c83-4ee3-8dea-21f279b2abd2.roa
Signing time: Sat 18 Oct 2025 01:31:51 +0000
ROA not before: Sat 18 Oct 2025 01:31:51 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:c9:a7:57:c4:f4:0e:e6:24:74:c6:5b:18:26:72:f8:04:f6:30:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:31:51 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=f1c0885dc27dee3066892c2eaac214e84bba54f72576eb3a2dbc6934cc4cba19, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:4e:38:71:ed:b8:9b:75:e0:07:3c:a7:10:
ef:07:49:ed:9f:5b:9f:18:aa:d1:67:a3:2d:bf:25:
48:ff:ca:e9:f4:22:8c:c1:91:df:83:ad:bb:1c:eb:
d5:b7:62:2d:c2:1a:7e:ca:b6:de:94:1a:f1:41:01:
b9:29:cc:4e:e0:e3:6c:24:95:86:0b:28:48:6c:17:
1e:e0:25:94:e3:58:03:f5:c4:5e:c0:6b:de:33:f0:
86:ca:23:35:b1:84:32:fe:13:fe:1c:53:74:0b:ec:
6a:bf:b6:fc:06:3e:66:2e:8f:29:f4:9d:00:34:94:
84:9a:a4:4c:92:f0:1f:b1:88:27:74:53:2d:29:05:
c4:96:75:91:5a:fa:f7:02:b0:b0:9f:54:ff:bb:bd:
08:63:09:15:a3:97:c9:81:15:4a:00:48:d9:0e:50:
a4:bc:49:fc:43:8d:52:d4:be:53:6d:d5:38:f8:a4:
88:9d:29:cb:25:d0:cc:f9:8d:ce:39:e5:8d:4c:91:
f3:f8:95:10:c6:5a:5a:c4:3e:25:b2:58:d2:57:08:
35:33:57:81:95:29:26:fd:9a:47:54:76:8c:d8:cc:
49:9c:bc:e6:31:58:47:96:b9:1a:11:bb:cd:1c:bf:
74:39:8f:84:a8:65:de:f8:b2:5e:62:58:76:11:f3:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:18:A1:7B:6C:03:BC:49:89:1E:E1:CB:85:DE:95:1F:A8:A6:57:FD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8700831e-0c83-4ee3-8dea-21f279b2abd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fe:da:bb:2b:d3:02:17:45:fb:40:f7:e6:0f:6c:77:f1:0c:
6f:c8:0c:b7:1b:03:35:8b:04:c3:db:e1:cb:bd:27:24:1b:3c:
c8:e2:11:c3:c6:ca:23:c4:c7:bd:41:ca:5f:af:07:21:5e:ff:
7c:54:b4:1b:ca:23:43:b4:2d:21:d4:9f:1e:88:43:7c:4c:01:
b4:d2:04:eb:ce:63:4e:4d:1d:74:59:a1:4b:55:9c:f4:c7:5d:
fa:5a:39:62:f7:7c:80:f0:33:40:6f:63:be:0d:09:0d:75:6e:
41:88:24:32:a2:4d:c5:ac:2f:48:2b:1b:1b:11:f9:82:03:f7:
a1:be:49:33:93:df:e9:1e:64:bf:77:c1:77:72:85:99:76:4e:
25:90:2d:a9:f9:a2:59:04:6a:55:eb:5d:80:1a:a6:06:46:90:
e3:22:16:2f:7e:da:71:4d:f9:af:22:5a:87:ef:98:85:20:23:
82:32:b7:90:94:1c:20:f9:30:06:8a:7b:4a:ab:fd:34:89:87:
6c:84:50:91:a6:c3:cc:fc:e6:93:00:59:02:1d:bd:d5:3e:a8:
2a:21:94:6b:25:1d:65:d0:c8:5c:69:ef:37:96:c8:d0:b5:e1:
ee:8d:90:ba:47:16:ab:11:20:1b:c5:e8:30:65:2b:9f:ad:9a:
7e:58:3e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:53 2025 by rpki-client