Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99d3792a-29c8-47d4-985a-a70ccfa29475.roa
File: 99d3792a-29c8-47d4-985a-a70ccfa29475.roa (raw, json)
Hash identifier: CsoZsL+eQO3B5gCUWN8JUf1R0gzwUKkXoo9pr3Pt0bg=
Subject key identifier: B7:59:A7:4E:85:18:54:D2:7C:01:D7:DE:0F:51:98:7B:45:3A:6F:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54971D8202114F9C928AC40377420064DEAFEA51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99d3792a-29c8-47d4-985a-a70ccfa29475.roa
Signing time: Sat 18 Oct 2025 05:11:01 +0000
ROA not before: Sat 18 Oct 2025 05:11:01 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:97:1d:82:02:11:4f:9c:92:8a:c4:03:77:42:00:64:de:af:ea:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:11:01 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=8bed904cbe26d595408591e8459fd5c4235e82f516f12520b3e6f303755a379a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:8f:5d:1e:26:55:08:65:c0:a3:c2:3e:97:
7d:bf:fa:74:1d:43:7d:9f:2c:f6:68:f4:a3:fb:e4:
8d:f2:96:37:99:e3:c3:9d:35:f6:31:19:49:ab:2f:
9c:23:74:93:ac:b8:66:c0:b5:cf:88:f9:3c:89:cb:
e3:26:f9:68:8b:f1:db:92:1c:be:36:93:a0:b2:a5:
58:10:cf:9a:ca:5b:d4:63:b3:0c:e2:ed:fc:ac:1a:
ae:74:0d:ce:2a:f3:7f:f4:44:b0:d3:09:b1:37:4e:
79:30:a2:66:98:e5:ef:ba:2e:85:57:b5:63:ce:5d:
4a:1f:99:65:69:4a:1c:08:47:96:ba:22:a8:cd:8f:
0b:1f:3a:3b:a1:eb:d4:0c:ed:57:e8:1c:16:65:92:
ef:6c:51:4a:25:19:c5:fa:a1:4e:ff:22:c4:25:ee:
5a:32:38:c4:18:15:a6:50:5c:b9:7e:05:e1:2b:6c:
b2:3e:4d:ff:7f:9b:82:2a:9c:33:66:ea:3e:d6:6e:
db:99:a6:23:8a:64:d8:b3:cb:10:a4:b5:d8:3f:2a:
fe:98:f6:71:61:95:19:6b:9a:3d:03:8a:47:e3:17:
b9:f8:a4:62:fe:f6:83:49:40:21:8e:21:29:3b:27:
3c:3c:aa:e3:ee:fa:a3:52:c5:5c:91:79:95:96:4e:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:A7:4E:85:18:54:D2:7C:01:D7:DE:0F:51:98:7B:45:3A:6F:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99d3792a-29c8-47d4-985a-a70ccfa29475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:b7:e8:e9:ab:ee:8d:6c:f8:6f:e0:7f:a0:2e:27:6a:f7:eb:
c0:26:2d:cb:6e:c9:d2:df:20:f7:d8:ec:2a:62:45:46:ba:b9:
d4:d6:db:84:82:dc:56:66:97:52:c0:96:d5:e0:ca:3d:d2:36:
58:cd:36:11:9d:39:db:56:f9:72:f0:d0:a1:f8:32:72:44:ea:
ac:e4:ab:b5:42:f1:9d:66:96:0c:5f:57:13:1a:c1:22:6f:e4:
96:af:ae:17:e2:27:15:c0:43:5d:26:d7:c4:ef:cf:22:36:6f:
9e:6a:6a:16:03:38:81:4e:ac:3e:89:7d:a0:a1:5e:89:aa:00:
fa:4e:ce:33:9a:78:6d:7e:80:2a:df:8f:41:6d:a5:4d:9d:6b:
07:bc:77:62:df:9f:99:61:1a:0a:a6:ad:7b:21:83:62:f3:a5:
54:74:37:50:b4:ef:b4:51:64:a2:22:53:f4:f9:f8:3c:49:bc:
a3:7d:5c:26:ed:92:7b:7d:57:9b:69:a5:1d:d9:88:66:70:a4:
9b:c3:ae:e8:b3:f5:f2:6c:f1:bf:df:ea:97:9c:c2:06:8d:49:
08:f4:5e:37:6c:a6:e8:40:28:23:5e:60:c5:ec:13:c7:4a:77:
19:85:67:3f:da:3d:85:27:ae:44:d2:81:66:ff:cc:a7:87:24:
df:84:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:39 2025 by rpki-client