Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb322d6-539b-4b30-8402-cec300052a21.roa
File: 9cb322d6-539b-4b30-8402-cec300052a21.roa (raw, json)
Hash identifier: HrFVq01N/Y6rtM+JEl6bejl4zFpVnoul+vlFcIR/bkw=
Subject key identifier: 20:08:D8:41:FD:22:FD:12:4A:C2:B3:17:9A:8B:91:E5:D7:68:51:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4839F72A8DADA2F94D133F0D15F919A0F4EF67B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb322d6-539b-4b30-8402-cec300052a21.roa
Signing time: Sat 18 Oct 2025 05:20:08 +0000
ROA not before: Sat 18 Oct 2025 05:20:08 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:39:f7:2a:8d:ad:a2:f9:4d:13:3f:0d:15:f9:19:a0:f4:ef:67:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:20:08 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=de303dbfffe5a9d52f568ac1bc0348a0a0e67754ab996cc232b74fd27b34fe96, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:6b:b4:23:2a:92:93:b7:92:1c:3c:34:a8:
9c:76:d9:20:35:60:43:df:c5:49:2a:68:8d:20:e9:
42:6f:c1:c9:9c:e2:77:60:7a:ca:7c:bd:98:b9:4e:
4b:0e:25:fb:9d:8a:f2:1e:38:e3:61:84:47:d1:8f:
2a:e7:b3:17:8a:d0:2b:9c:9c:fb:85:24:c7:82:18:
3b:7e:2e:2a:81:72:0d:69:93:e4:e8:7f:89:2e:f1:
61:d5:8c:de:94:34:18:d6:39:67:b3:b5:a4:15:c8:
17:be:e2:59:f3:58:3d:85:d6:bb:31:0c:88:ec:e3:
ab:7c:13:de:5d:4e:99:b7:2e:f1:0b:0c:8c:e8:da:
02:a7:87:36:da:18:cc:1c:f5:14:21:1e:6b:64:dc:
fd:b9:0c:9c:a2:5e:28:ea:b6:0c:eb:b5:94:32:4f:
ab:d3:f2:a4:89:97:4f:0b:ae:ef:56:73:61:56:2b:
83:5e:8b:ac:0f:b8:22:93:8a:79:87:0b:c6:6f:e7:
1f:81:13:b1:5a:b9:0b:e8:ac:13:95:8a:b3:da:ad:
89:2a:5a:ac:60:8a:8b:66:92:82:bc:25:4d:c0:6a:
54:1e:d4:c1:71:1f:be:44:5a:dd:0d:b5:7e:a2:1a:
ff:54:52:9a:a3:c6:68:fd:5f:e1:48:47:d3:c4:1f:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:08:D8:41:FD:22:FD:12:4A:C2:B3:17:9A:8B:91:E5:D7:68:51:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9cb322d6-539b-4b30-8402-cec300052a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:9e:e1:d8:0b:e6:66:49:89:9d:ea:92:da:9a:90:4a:f6:35:
03:41:c7:d5:10:ce:66:be:fe:72:dd:fc:bd:bf:f8:a4:3c:42:
c9:9f:c1:1d:14:3e:50:0d:a7:37:bf:6e:3c:21:f2:53:f9:ba:
b1:6c:f3:a8:df:c5:33:18:af:f6:23:e9:25:12:a3:0b:38:4f:
fe:61:6a:3a:6b:42:d1:a5:68:4f:ae:0e:4b:e6:87:d0:6b:ca:
c3:54:b5:ce:8c:d4:b8:aa:47:18:7d:4d:9f:c5:44:f6:04:00:
b5:54:82:0e:78:09:1d:e4:9e:0b:25:55:d3:a7:a8:f7:80:26:
89:ff:04:5b:fc:90:f7:1a:d2:31:95:1b:1c:f7:ae:df:38:da:
cd:7f:3d:b8:6c:24:ef:a0:e5:90:91:a0:35:ba:7a:12:4c:b8:
68:33:d0:52:0f:27:54:15:d7:e5:23:ad:54:04:60:b7:13:c0:
54:50:e3:2d:53:34:d2:43:ba:8c:f6:2d:23:5c:27:15:be:e2:
0e:c2:24:fc:42:63:61:55:33:fb:51:fe:d9:d7:dd:2f:b7:b6:
38:55:4e:e3:15:0b:32:fc:37:59:a2:68:a9:e7:10:72:0c:67:
31:c6:17:77:d4:93:94:60:5c:4d:b0:fc:3a:90:ef:28:a6:b4:
60:25:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:50 2025 by rpki-client