Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b1b35e3-f011-4ef3-b954-91f51192e8c7.roa
File: 9b1b35e3-f011-4ef3-b954-91f51192e8c7.roa (raw, json)
Hash identifier: euEzcUPUY4qgtdK+CGWFukOYAfJZ3mCNyGG8a5/aH5M=
Subject key identifier: 95:D5:F8:2E:97:19:A3:09:85:5E:1A:5B:E6:51:45:5F:71:45:94:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4571AECCF1C656B328B5624D5D35C1A9EE3183D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b1b35e3-f011-4ef3-b954-91f51192e8c7.roa
Signing time: Sat 18 Oct 2025 02:40:06 +0000
ROA not before: Sat 18 Oct 2025 02:40:06 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:71:ae:cc:f1:c6:56:b3:28:b5:62:4d:5d:35:c1:a9:ee:31:83:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:40:06 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=c907f7cf683491b65a40b6b33b5592cbc62df0b80366974782f14d33009ad3e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:af:98:ab:65:27:f9:43:b5:47:78:55:ff:
d0:21:87:ef:ff:c9:87:1d:d5:ee:a8:17:5b:b3:08:
9a:58:ad:b3:1a:8e:fc:5d:a1:a1:8d:55:db:84:92:
e5:37:c8:41:ae:0f:7b:fa:54:11:08:14:2b:33:04:
60:06:f8:bd:5b:e6:0e:df:a7:d6:3d:5c:60:92:ac:
bb:68:35:13:8c:94:4b:a7:fd:8a:18:fa:5f:7c:8f:
e6:27:93:ab:e5:92:fe:c2:bd:7f:e6:94:b4:d2:fa:
53:2b:e3:2e:29:32:bc:1b:01:69:bc:bc:92:ac:4e:
ef:f0:9e:c4:a4:a7:07:eb:9d:79:1c:8c:2d:a0:c5:
f8:65:99:97:85:9b:c8:92:8d:1f:43:5d:a6:2a:1c:
64:6b:92:e1:86:92:5a:8d:1b:f9:28:83:4f:42:d1:
83:74:08:fc:5d:6b:32:58:ad:70:6f:7a:f5:e0:a6:
86:32:86:19:cf:09:20:2a:bf:49:92:dc:58:71:98:
42:00:75:08:dd:41:fb:31:2f:89:16:53:d9:d3:ea:
c4:7f:a5:4b:62:99:d8:4d:e1:72:40:0f:b4:ea:d8:
b0:e0:06:33:d9:3f:3e:ea:c1:16:0b:b1:d5:b4:11:
7a:22:d2:16:bf:0f:ef:04:45:41:cb:4d:6b:b7:8b:
a7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D5:F8:2E:97:19:A3:09:85:5E:1A:5B:E6:51:45:5F:71:45:94:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b1b35e3-f011-4ef3-b954-91f51192e8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:3c:f8:67:cd:1a:51:9e:74:45:1a:14:4b:c5:ba:da:93:a5:
b2:cf:46:a5:32:4a:1b:78:41:fd:8d:98:7d:b1:6f:71:64:75:
3a:77:3d:d1:de:6f:97:24:3e:0f:1f:1b:3a:a5:30:51:bd:ba:
d8:34:a3:f0:d4:e2:08:de:14:41:a9:c4:03:04:2e:d7:ca:e7:
e3:ec:88:06:37:8f:15:f1:f8:61:52:5c:c6:1f:1b:5b:a1:40:
3b:f7:82:6b:d5:c0:86:f2:ce:ac:11:6c:d8:5a:68:b9:ff:85:
a3:d3:c0:c9:3c:cc:9a:a4:51:5e:22:1a:7a:44:9a:76:9e:bc:
17:45:82:27:88:67:e0:a9:ef:c6:4b:b6:ea:77:8f:2d:cd:0c:
01:8d:67:91:c7:7d:08:d0:61:d4:94:b8:cb:b6:44:8a:16:ac:
92:66:b2:90:33:7a:39:42:a2:5e:4e:2b:02:50:e5:b9:36:85:
10:58:65:19:89:90:d8:02:92:15:19:ff:f4:7f:e7:29:b4:32:
a2:bb:99:16:91:0c:a2:3a:1e:42:bb:60:e6:4c:10:66:bf:77:
78:cd:af:0e:dd:89:32:b6:0c:32:61:e6:1c:f0:3d:13:a7:e8:
dd:4d:8c:66:7b:74:48:81:59:5c:9a:d3:de:c1:39:d5:9d:84:
ab:35:2d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:49 2025 by rpki-client