Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88061410-b197-4193-b9fa-c3f8ab4eedf0.roa
File: 88061410-b197-4193-b9fa-c3f8ab4eedf0.roa (raw, json)
Hash identifier: V5rG+KyjT136VIP59bOvAj/B/2uMMdviDCb7qQQZAQY=
Subject key identifier: B8:43:6E:C1:E4:4F:B9:9C:B8:C4:D0:15:CA:AE:EB:99:32:2A:E7:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06F4BB9022884DDF6D617B73AC566933D97A7722
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88061410-b197-4193-b9fa-c3f8ab4eedf0.roa
Signing time: Sat 18 Oct 2025 01:40:06 +0000
ROA not before: Sat 18 Oct 2025 01:40:06 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:f4:bb:90:22:88:4d:df:6d:61:7b:73:ac:56:69:33:d9:7a:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:40:06 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=c99a04bedb5bde77a3f9dd51bee9e784e97cc51b338f21ecefe8723eab8b970e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:2e:05:f1:38:62:db:34:38:63:b0:38:ef:
d7:24:44:fe:9a:dd:12:83:a2:ad:e2:f6:af:67:29:
c4:06:95:15:1c:d3:19:53:22:59:da:cf:49:03:d8:
66:5a:0c:0a:88:b3:eb:74:c4:2e:29:d2:01:d9:eb:
8e:fd:49:e9:d1:3a:b9:68:c6:07:0c:65:cd:45:92:
c0:b5:1e:6f:a9:01:2c:da:25:2b:58:4e:5e:b2:28:
01:1b:70:30:0b:16:a3:a5:1c:90:00:f0:f4:f9:ed:
11:1e:b4:47:1b:1c:a7:c8:f8:97:9c:cc:4e:8f:50:
76:4e:a4:c9:87:64:fa:e3:03:0a:b8:31:aa:4d:36:
80:89:40:38:34:4a:97:99:d8:fd:9e:cb:2d:a4:b9:
59:2c:ca:80:44:67:f3:b7:07:22:ba:e4:7d:99:96:
0b:fb:05:34:fc:ea:2d:7f:1c:88:bd:bb:8a:2c:79:
33:be:4a:a9:60:17:54:42:c2:5b:72:7e:27:d7:cd:
be:6b:f1:9f:0e:a3:d0:48:19:27:1d:4b:05:ae:cc:
2c:5d:9c:0e:a0:93:44:fb:c8:44:f7:e8:9f:5b:ba:
68:8a:0d:29:ae:91:5f:1d:72:14:c8:b2:df:7f:99:
38:99:3e:9a:2a:ab:95:25:e3:43:5c:9e:1e:99:bc:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:6E:C1:E4:4F:B9:9C:B8:C4:D0:15:CA:AE:EB:99:32:2A:E7:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88061410-b197-4193-b9fa-c3f8ab4eedf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.16.0/24
Signature Algorithm: sha256WithRSAEncryption
36:00:a6:35:3f:d9:88:5a:29:81:02:ab:08:0a:a4:f4:d4:89:
8e:0a:eb:9e:dc:e1:c0:b1:06:e4:18:c8:d6:eb:c0:6b:da:63:
2a:4a:86:31:54:e7:71:78:9d:b1:af:0b:07:4d:af:d3:c1:ad:
82:24:0b:9f:ad:31:c1:a3:ce:9b:e4:11:e3:84:16:91:df:e8:
5f:e1:80:8f:5e:c1:68:96:5d:ab:1f:a4:7c:18:8d:c2:3e:fd:
67:48:fc:30:6e:54:29:31:b5:4a:6a:45:7f:c0:c8:0e:82:af:
41:27:60:bd:5c:4d:1e:d3:c1:fd:4f:e2:6b:cf:a2:9c:8a:8c:
b3:46:6b:88:39:a9:e9:c2:c9:39:72:fb:06:9c:d8:0d:26:9b:
80:e6:f1:be:de:d6:a6:2b:28:7b:bc:c6:c9:c5:60:54:4a:0a:
2e:ef:88:6e:1b:c9:74:a9:14:ae:a0:e8:8c:a1:0b:4c:c0:20:
1f:7d:89:2d:66:cb:46:60:d0:08:df:45:24:3b:0d:de:7d:16:
d5:68:27:36:22:f1:30:82:66:a4:1f:04:fd:d1:23:61:02:24:
19:b3:bb:f0:74:67:70:88:d9:e8:d3:c0:84:b4:8b:10:61:1f:
bf:e9:71:4b:9d:c2:9d:70:a1:0a:cc:16:47:dc:7e:03:81:04:
79:08:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:47 2025 by rpki-client