Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/977b714a-d4b2-4ca3-be79-72f7ec3bcd69.roa
File: 977b714a-d4b2-4ca3-be79-72f7ec3bcd69.roa (raw, json)
Hash identifier: 4M+fHXIw2hGiHFkl7udMel00U3aIVLxqcM3uiCNfyF4=
Subject key identifier: 55:E4:16:EF:C6:F9:5B:3D:97:E8:CF:A1:03:AE:71:AD:D9:1A:AA:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BA14B99692EB41311083BD32B74CACDAEBF73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/977b714a-d4b2-4ca3-be79-72f7ec3bcd69.roa
Signing time: Sat 18 Oct 2025 04:20:52 +0000
ROA not before: Sat 18 Oct 2025 04:20:52 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a1:4b:99:69:2e:b4:13:11:08:3b:d3:2b:74:ca:cd:ae:bf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:20:52 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=515526966fda5514a47a5f5f63d4775df66b2c1cafe48872f96e934a08e6d93c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:bc:9c:6d:33:71:43:cd:28:7a:d0:0b:f4:
99:93:5d:14:82:1a:3e:cf:20:5b:66:ba:c3:df:3e:
38:f7:6f:69:f5:65:a6:c3:36:af:59:90:16:0d:03:
c4:12:83:27:bf:04:4e:7a:a8:e1:ec:6b:ef:c9:5c:
b7:f7:4f:e7:b5:b4:c2:6a:99:3f:bf:fb:0e:9e:09:
a3:22:79:62:6f:1d:b4:a4:6c:f4:d7:9c:cb:a7:6f:
61:4e:52:0c:ec:85:4b:9a:89:27:df:24:a3:6b:4a:
4a:14:7e:28:be:3f:b6:65:fb:87:84:3f:b2:ff:f7:
78:16:22:76:51:02:7a:b2:2c:26:3c:01:e5:39:6b:
70:a6:91:bf:4e:ca:37:51:f3:3f:38:71:82:79:c1:
d6:01:fa:dc:3d:40:16:7f:50:4a:5e:00:e0:20:01:
90:9d:33:75:d3:73:ed:af:f5:84:66:1c:a2:b6:f3:
85:87:05:86:75:b4:c1:d7:cf:af:4f:77:5d:77:66:
e9:b7:e7:db:c1:db:8d:de:91:60:af:ae:07:f7:b8:
e4:a6:ee:f4:65:20:b6:23:31:da:28:5a:8b:6b:a8:
5e:cf:a2:86:e4:4d:58:4d:06:5e:a0:f9:8c:e8:75:
a3:da:19:f7:e0:fb:c1:a2:3f:ba:c0:f0:62:b5:ab:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E4:16:EF:C6:F9:5B:3D:97:E8:CF:A1:03:AE:71:AD:D9:1A:AA:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/977b714a-d4b2-4ca3-be79-72f7ec3bcd69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.0.0/24
Signature Algorithm: sha256WithRSAEncryption
14:49:f0:29:4d:20:10:c5:bf:a2:76:87:fa:97:70:04:b3:16:
7c:cb:39:6c:5e:87:40:5d:a7:f5:ed:f5:47:18:5d:b7:f9:9a:
22:58:fc:09:b6:d4:f2:86:f7:69:ad:e4:b0:4a:56:14:72:1b:
38:83:4c:8a:5f:34:de:d6:e2:06:b1:2a:58:a7:80:52:ef:b5:
9d:86:7f:eb:fb:b4:e2:a9:b2:ad:2d:ca:d4:f0:5d:9d:8d:45:
54:47:43:a8:a5:32:60:37:d7:76:54:da:fe:a4:c2:5e:f8:47:
24:32:7b:5e:4b:bb:98:e0:d5:60:6e:be:f1:61:f3:99:d0:55:
bb:3f:4d:30:50:ee:94:34:41:8a:9b:03:b3:86:5a:7b:f8:1d:
92:86:47:83:36:0b:a2:b2:33:d7:f0:6c:a0:ce:bf:da:6e:c4:
48:eb:c6:8a:54:44:2f:75:ef:71:1f:a7:b7:d7:7f:01:6c:42:
04:7d:1b:d2:4e:ef:7c:e7:69:ef:e1:2f:09:1c:eb:f4:f8:e4:
cb:a8:ce:be:7f:a3:88:ec:7d:8f:a1:eb:68:d2:88:86:7b:d8:
20:71:c0:50:89:f5:11:89:93:06:3f:6b:55:ca:98:ad:e7:49:
3a:a1:ef:4f:a4:a6:7a:0b:13:6a:88:3f:cc:ff:e3:0f:73:f1:
2d:41:1a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:18 2025 by rpki-client