Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9da8fc0a-4e38-4aa0-b793-9bf98d2f9816.roa
File: 9da8fc0a-4e38-4aa0-b793-9bf98d2f9816.roa (raw, json)
Hash identifier: CMkbO6cM7eTR/UkYTnWKK5xeiL+1O7ANyROt4n7Y1p0=
Subject key identifier: 3B:A5:3F:6B:5A:4B:A3:3F:93:3B:27:84:EA:E0:6B:76:F7:A4:DA:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 296735446F0946F08F657C40A6B0C9AC3C0935EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9da8fc0a-4e38-4aa0-b793-9bf98d2f9816.roa
Signing time: Sat 18 Oct 2025 01:20:53 +0000
ROA not before: Sat 18 Oct 2025 01:20:53 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:67:35:44:6f:09:46:f0:8f:65:7c:40:a6:b0:c9:ac:3c:09:35:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:20:53 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=00cd59b54c0fc394ef1981cc74d57c6038b14f01541842502aa46bfc9c23e294, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:62:25:c1:fa:43:c4:4b:0d:59:71:a3:9c:
41:74:4c:38:06:16:3d:b8:b8:a3:66:29:d3:c1:0f:
67:97:da:54:9e:d2:4f:9e:06:71:d9:c0:b6:79:01:
04:44:79:09:87:23:6b:66:25:6f:ce:ab:ba:cf:ab:
68:62:bb:14:9c:23:11:91:6c:64:b8:7b:71:a7:ba:
24:d3:8b:ee:25:f5:50:d0:cc:f8:dc:48:5d:88:0f:
a2:fb:bf:d9:60:53:6d:38:5c:91:44:a8:b6:cc:11:
6d:14:ea:0d:39:c8:43:d5:f0:ac:f9:6d:82:f3:b8:
78:f7:06:67:09:91:5d:5c:61:6c:a3:7b:8b:95:e9:
4e:e8:e2:56:c9:b6:de:01:b7:8a:84:f9:d8:16:18:
1a:c3:41:6f:82:23:69:66:2f:d8:e6:65:90:91:f5:
c6:aa:f7:7f:da:e8:8d:d8:c0:97:c9:8c:ac:17:78:
52:55:f1:29:b1:aa:fb:be:4a:4f:86:b5:2a:29:cb:
7e:f5:7a:7a:12:21:fc:7b:63:db:c5:07:6d:c0:29:
a9:bd:39:6d:35:10:85:df:e5:6b:6c:65:3e:e9:42:
9e:4f:e6:3c:88:78:91:ca:5c:50:1b:31:35:e2:a4:
d7:70:1e:ab:92:02:f3:c0:5f:d9:11:5b:ea:f0:54:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A5:3F:6B:5A:4B:A3:3F:93:3B:27:84:EA:E0:6B:76:F7:A4:DA:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9da8fc0a-4e38-4aa0-b793-9bf98d2f9816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.108.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:cf:8b:75:37:e2:e3:d0:fa:21:dd:1d:d5:33:bc:72:7e:37:
bd:64:86:e4:6b:8a:42:79:a1:47:1f:63:06:4c:1b:d2:cc:c8:
9b:61:fe:1a:b3:9f:53:c3:80:9a:cc:0b:09:29:9b:86:e1:65:
86:54:f6:d1:f7:f6:a2:e5:95:ae:3f:eb:38:37:c3:9c:0c:95:
b0:27:78:27:17:64:9e:53:66:e9:29:d3:f2:15:88:4f:9e:4c:
76:c8:45:00:71:95:75:20:38:62:8f:ff:00:9e:ee:e8:6e:f7:
fc:af:0c:d2:2f:28:35:f0:65:3f:c4:dc:41:ea:88:87:fe:02:
71:86:69:d2:16:5e:6a:70:45:7f:b9:e5:bb:7c:ce:31:32:db:
82:4b:d2:83:3f:d4:f9:4b:2d:ab:80:23:2b:58:f6:29:40:4b:
8b:6e:ff:dc:49:c1:c0:88:c9:2c:99:ec:58:e3:8b:69:ce:81:
03:58:a9:35:85:a4:60:25:8a:e3:4b:7e:31:f8:56:2c:4b:2e:
30:b3:69:4b:55:a4:bd:5a:68:71:2e:28:3e:06:09:20:fb:e7:
8c:72:e8:8e:78:23:43:2a:84:c4:43:6e:51:96:51:7e:94:74:
84:f6:66:15:6e:d6:25:d3:0b:08:91:d1:b8:9c:85:c1:b4:d5:
54:76:69:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:48 2025 by rpki-client