Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fae85d0-0ec1-4345-89bf-770270ed0eaa.roa
File: 8fae85d0-0ec1-4345-89bf-770270ed0eaa.roa (raw, json)
Hash identifier: 1aQQlv4e2CL5SioaHm7KXMgrwDN+zxDl423pVBHit9w=
Subject key identifier: 01:48:6A:80:10:01:F2:BE:17:07:BC:83:8D:C3:E2:F3:3B:76:68:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F9421C238D29770FCEFFB28AE40A6EF4FC72AA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fae85d0-0ec1-4345-89bf-770270ed0eaa.roa
Signing time: Tue 07 Oct 2025 00:41:09 +0000
ROA not before: Tue 07 Oct 2025 00:41:09 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 209.163.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:94:21:c2:38:d2:97:70:fc:ef:fb:28:ae:40:a6:ef:4f:c7:2a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:41:09 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=6626c5a08fb13fed7adc0f6f1d5911b86ad1717529807c0c85d3b68418eb602e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:05:3c:98:f9:83:d8:74:81:21:9f:15:0e:
d4:f5:96:84:41:7b:be:c6:e4:df:36:fb:9a:8f:62:
b2:b7:9d:fc:d7:64:19:e0:53:bb:79:bb:1b:d9:c4:
a9:af:c6:e9:2c:6f:c2:5f:29:3d:79:41:83:d0:5f:
7e:8c:9d:26:a6:5e:43:c4:b6:45:87:3b:14:c2:39:
b3:dc:20:46:db:a9:3d:c3:ff:19:75:a3:dd:7e:b4:
9f:dc:e0:41:f9:ca:7f:98:05:42:aa:f2:b5:dd:3d:
2f:07:9c:db:2b:31:dd:16:18:33:7a:08:39:1b:75:
23:a2:e0:a5:02:fa:04:f2:66:03:d4:35:48:6b:de:
cb:c0:a8:0b:8d:24:72:0d:24:7b:a6:47:e6:a2:3c:
66:f4:bd:ea:ca:cb:99:c8:82:5c:a6:dd:66:d8:68:
96:75:46:d9:45:fb:a6:7b:06:6d:2e:ac:88:84:ce:
ed:a9:b8:20:c4:28:cd:37:0d:bf:98:2a:3d:6a:19:
bc:d1:6a:2c:4b:1f:3e:44:3c:8f:53:f6:4d:a6:f1:
b7:0e:ae:43:65:13:fd:3f:ed:26:17:c0:6f:02:c5:
41:05:7a:fd:ae:36:34:8a:7f:95:7a:91:d7:fe:f1:
7b:57:b0:5a:6d:c1:c8:b3:f3:65:1e:78:8d:b1:cc:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:6A:80:10:01:F2:BE:17:07:BC:83:8D:C3:E2:F3:3B:76:68:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fae85d0-0ec1-4345-89bf-770270ed0eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.163.0.0/18
Signature Algorithm: sha256WithRSAEncryption
53:44:97:6d:1f:39:77:0f:e2:46:69:7d:aa:7e:39:a0:bd:cc:
5d:7c:41:27:80:b2:fa:9d:20:a3:07:ca:b3:52:59:27:94:7c:
70:39:0a:06:00:20:f7:b3:7a:64:63:1c:28:f4:ca:c5:d2:d2:
2d:7e:2c:ae:35:21:e5:2f:1d:02:54:60:3a:30:49:69:0d:e3:
0e:25:f4:fe:04:ff:f2:e9:3a:b6:31:88:d4:1d:cc:e5:69:71:
74:ba:f8:18:c9:27:1e:48:5a:c1:d7:79:28:e6:96:20:d8:3a:
8d:a9:e4:d2:e4:cc:4a:98:1e:b2:ba:e3:1d:64:56:7c:4a:d3:
f0:7f:b5:c4:92:63:95:58:68:10:5f:fd:2f:0c:36:d8:73:ef:
bd:fc:9e:4a:50:0c:91:93:2f:d2:f9:20:ff:7b:fd:fb:03:90:
24:05:06:88:19:bd:17:60:93:c1:96:97:12:88:75:98:69:e8:
f4:3f:8c:0e:bb:32:3a:21:04:69:37:0b:93:cc:3a:6f:71:b3:
fc:37:45:52:20:72:ff:a5:9e:3e:ef:0c:5d:da:e1:7f:ee:04:
a9:57:b6:13:22:8d:0f:37:00:38:eb:68:cf:88:53:9a:9d:ba:
73:00:b4:30:74:d4:b9:fb:8b:7d:51:d4:c1:fb:52:57:5b:91:
e9:db:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:09:04 2025 by rpki-client