Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af151f3-63cf-4e82-ace8-ea8158fbd3d1.roa
File: 9af151f3-63cf-4e82-ace8-ea8158fbd3d1.roa (raw, json)
Hash identifier: Uje5tqzNolN1drmFiyslz5Rg4/QbKEJ1H9lsUW21dE0=
Subject key identifier: B8:F2:78:32:D1:7B:4C:C3:D4:F5:C9:52:29:C7:CB:8A:B4:69:03:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 444A7822524EA9CFEF5A8B79AD59406B26737093
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af151f3-63cf-4e82-ace8-ea8158fbd3d1.roa
Signing time: Sat 18 Oct 2025 04:30:13 +0000
ROA not before: Sat 18 Oct 2025 04:30:13 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4a:78:22:52:4e:a9:cf:ef:5a:8b:79:ad:59:40:6b:26:73:70:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:30:13 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=e4b582b19eeab56a33fbad4b1b35ecb25177ad19ac0d234939a9889f236ced0b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:f8:e5:ea:f6:5a:d9:7e:f7:90:5a:82:0c:
e8:8d:87:e1:df:70:f3:f2:6f:f7:e7:3b:5b:12:40:
e5:18:ba:a9:48:4a:81:6f:3c:fa:d4:d4:cb:a8:bd:
6e:b0:5a:76:bc:d5:50:59:4c:90:bf:03:84:ca:65:
c5:c5:6d:a2:4e:24:78:38:60:df:74:ca:90:cb:9a:
0a:b4:4d:28:69:37:f9:92:f7:eb:2a:b2:f6:22:2f:
e2:58:0f:4a:86:df:b5:f7:35:a2:fd:f1:b5:47:f8:
d4:15:76:22:cb:23:7a:7b:91:72:b9:40:41:b7:45:
5a:43:3e:5a:c2:0e:f2:7e:1d:3d:b4:c3:4a:48:7a:
2d:69:ac:82:32:91:4a:df:e5:47:93:4c:fb:f1:1b:
74:8a:eb:cb:8c:6f:6e:67:5d:18:78:44:6c:34:60:
34:59:17:d2:f2:29:a8:44:ad:cb:c2:5d:53:d4:5c:
e7:c5:fc:1e:f5:86:61:72:13:26:8d:41:33:69:4b:
47:f2:89:39:04:81:2e:e5:2d:b8:e2:8f:7d:22:82:
7b:55:3c:d3:c6:29:dd:36:15:be:92:64:23:22:b0:
1e:4b:56:0f:d0:b0:31:14:07:c6:02:5f:e8:2a:c7:
ca:b3:21:69:0a:33:f1:ee:92:67:60:f9:47:84:f5:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F2:78:32:D1:7B:4C:C3:D4:F5:C9:52:29:C7:CB:8A:B4:69:03:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9af151f3-63cf-4e82-ace8-ea8158fbd3d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.115.0/24
Signature Algorithm: sha256WithRSAEncryption
77:21:89:11:24:0a:08:c2:ad:d0:7d:45:c9:58:0e:79:92:fe:
12:3b:55:d5:93:44:a2:54:c6:7b:e5:07:bf:e8:6d:fd:44:04:
d9:d4:90:d2:d8:85:9b:93:65:f0:04:12:a3:90:ac:4d:08:0e:
33:69:14:55:43:4e:29:1a:cb:98:ed:b0:b7:2a:cf:ba:14:4e:
91:94:cf:a1:d8:c7:0c:71:f2:5a:40:83:74:d0:b5:60:34:ca:
cd:c5:3e:e9:16:1b:dd:46:fa:2b:3e:a7:a4:0e:43:30:62:a8:
97:ad:f4:04:41:5c:08:c8:6a:a7:3f:14:3c:22:69:55:6f:d0:
62:7e:53:e7:c4:bf:0f:64:f7:63:67:6c:de:f4:9f:55:ef:5f:
33:32:23:92:f4:4f:eb:13:88:d3:a9:33:b0:ac:16:ba:93:ed:
ce:7e:65:4f:d6:2d:af:cd:b0:79:9e:c7:08:99:1d:73:26:bc:
c8:85:8f:bf:76:fc:23:65:1e:51:e5:15:03:d9:bf:68:3c:f1:
da:ed:af:e5:d8:c6:b6:08:b4:87:1c:f6:40:66:38:94:d4:00:
62:32:cc:6a:52:f5:00:3f:24:e3:e7:43:c8:78:6d:cc:3d:1e:
d5:59:f1:00:03:4c:9b:f9:ca:f8:15:eb:2d:c8:3d:6d:dd:fb:
17:be:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:42 2025 by rpki-client