Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e20a146-55c0-457b-bd63-c384c062808d.roa
File: 8e20a146-55c0-457b-bd63-c384c062808d.roa (raw, json)
Hash identifier: 09T64FtvqFVEGdDCK6LoVVieC1jDRSgxhPSDYW3WBpM=
Subject key identifier: 09:08:19:2E:BF:06:FF:16:3A:65:3A:CB:93:43:3D:90:F8:0F:CE:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 080DA4839A37513E96C420E35739D8700C7C61D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e20a146-55c0-457b-bd63-c384c062808d.roa
Signing time: Sat 18 Oct 2025 00:41:52 +0000
ROA not before: Sat 18 Oct 2025 00:41:52 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:0d:a4:83:9a:37:51:3e:96:c4:20:e3:57:39:d8:70:0c:7c:61:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:52 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=bc2daea76f13122cfd3206c166476ae2cf61922c193b4673624bb389ec8e93bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bb:45:d9:c5:e1:15:9f:88:8a:0d:e4:32:b0:
2c:d6:97:73:5c:59:8f:90:00:4d:89:49:2e:5a:6e:
03:ee:62:aa:0a:83:b7:03:bc:3d:68:38:8f:0c:80:
0f:57:7b:19:f1:10:a5:82:97:16:61:d3:32:61:a6:
67:7c:0d:5c:1d:4d:7d:e6:fe:28:87:ae:7f:8d:28:
94:a1:68:3f:0f:b0:f5:3f:16:58:26:79:d0:ac:b7:
f5:e3:3a:d4:43:1f:e4:b6:30:21:29:81:5e:bc:34:
3f:a3:d7:b6:12:63:b1:06:d1:ad:a2:f4:e7:d1:15:
13:a5:50:80:92:f2:23:9b:46:31:c9:90:f6:85:e9:
43:d2:fb:11:6f:0a:53:08:44:c6:ae:2b:39:6f:11:
0c:3e:4e:d6:e0:98:d0:12:d0:ad:e2:3e:c6:b3:78:
98:ce:d8:9e:77:5a:6d:bd:b2:08:44:a3:02:e2:0b:
34:14:5b:4d:08:0e:7c:49:9f:fe:fa:01:1f:04:54:
ed:5a:0e:54:11:09:fc:8c:92:54:5c:eb:43:84:6e:
8f:20:97:51:00:b1:cf:1f:35:d4:19:28:4e:2b:fe:
3a:86:86:66:26:21:56:b0:7e:0d:6f:f9:39:55:c1:
52:16:8f:9f:d3:d7:ef:6d:9c:a4:3c:56:5b:3d:03:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:08:19:2E:BF:06:FF:16:3A:65:3A:CB:93:43:3D:90:F8:0F:CE:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e20a146-55c0-457b-bd63-c384c062808d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.61.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:b5:fb:91:2d:33:e3:43:92:2d:56:50:1d:05:09:e0:69:42:
9f:d2:a8:84:cf:6a:1d:70:1a:9f:62:d8:be:5b:a1:7d:48:66:
1b:18:e1:a2:57:91:ca:78:00:47:5c:9f:b3:bf:11:bf:d3:15:
1d:5c:77:c9:64:60:13:fc:63:59:5e:88:f1:0d:72:a1:e2:b0:
39:f8:f0:12:a7:fc:7f:63:1e:14:80:bc:a6:89:30:60:86:6f:
56:02:78:75:88:97:83:66:f0:3d:3e:47:60:69:58:c1:9f:2e:
ed:89:76:ca:30:dc:f1:f3:fc:1f:8c:06:1d:5d:13:ca:9f:43:
a0:8d:b3:1e:81:e8:84:a4:61:1f:d3:e8:62:bc:ef:05:97:5a:
df:e9:04:3e:92:02:1e:61:01:3a:09:9f:d7:c2:4f:8d:19:88:
2f:84:b6:25:4f:25:6e:82:9f:e4:5e:c4:01:e1:c0:5a:78:a7:
ef:ce:cd:b1:5c:22:06:be:d8:b3:9e:eb:9a:58:4a:47:f4:9e:
cb:31:14:25:db:e2:4f:a3:8f:21:18:91:42:43:fb:c5:37:18:
59:b2:b9:e3:8c:04:a6:f3:e2:56:2d:70:c3:31:10:2e:40:02:
22:5d:0c:99:71:2c:d9:2f:e0:dd:05:da:ef:a4:45:7b:f4:1e:
f1:08:5d:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCA2kg5o3UT6WxCDjVznYcAx8YdYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDA0MTUyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYzJkYWVhNzZmMTMxMjJjZmQzMjA2YzE2NjQ3NmFlMmNm
NjE5MjJjMTkzYjQ2NzM2MjRiYjM4OWVjOGU5M2JiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVu0XZxeEVn4iKDeQysCzWl3NcWY+QAE2JSS5abgPuYqoK
g7cDvD1oOI8MgA9XexnxEKWClxZh0zJhpmd8DVwdTX3m/iiHrn+NKJShaD8PsPU/
FlgmedCst/XjOtRDH+S2MCEpgV68ND+j17YSY7EG0a2i9OfRFROlUICS8iObRjHJ
kPaF6UPS+xFvClMIRMauKzlvEQw+TtbgmNAS0K3iPsazeJjO2J53Wm29sghEowLi
CzQUW00IDnxJn/76AR8EVO1aDlQRCfyMklRc60OEbo8gl1EAsc8fNdQZKE4r/jqG
hmYmIVawfg1v+TlVwVIWj5/T1+9tnKQ8Vls9AxOzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCQgZLr8G/xY6ZTrLk0M9kPgPzrYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhlMjBhMTQ2LTU1YzAtNDU3Yi1iZDYzLWMzODRjMDYyODA4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCT0wDQYJKoZIhvcNAQELBQADggEBANK1+5EtM+NDki1WUB0FCeBpQp/S
qITPah1wGp9i2L5boX1IZhsY4aJXkcp4AEdcn7O/Eb/TFR1cd8lkYBP8Y1leiPEN
cqHisDn48BKn/H9jHhSAvKaJMGCGb1YCeHWIl4Nm8D0+R2BpWMGfLu2Jdsow3PHz
/B+MBh1dE8qfQ6CNsx6B6ISkYR/T6GK87wWXWt/pBD6SAh5hAToJn9fCT40ZiC+E
tiVPJW6Cn+RexAHhwFp4p+/OzbFcIga+2LOe65pYSkf0nssxFCXb4k+jjyEYkUJD
+8U3GFmyueOMBKbz4lYtcMMxEC5AAiJdDJlxLNkv4N0F2u+kRXv0HvEIXfQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:07 2025 by rpki-client