Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0aad321-a0be-4c8c-85d9-b16b482fbe1f.roa
File: a0aad321-a0be-4c8c-85d9-b16b482fbe1f.roa (raw, json)
Hash identifier: s1NgqfnR/HtfbRzkeHcpgNmVpYTTDgVvA3+838bzGOY=
Subject key identifier: 32:4E:84:80:84:E1:73:DD:96:8D:9C:D3:C6:59:88:3F:1D:77:D6:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DE2723F1529EFCE96C76E60F96D57F8813A09A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0aad321-a0be-4c8c-85d9-b16b482fbe1f.roa
Signing time: Sat 18 Oct 2025 04:41:35 +0000
ROA not before: Sat 18 Oct 2025 04:41:35 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e2:72:3f:15:29:ef:ce:96:c7:6e:60:f9:6d:57:f8:81:3a:09:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:41:35 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=69e96991f22a60e117dafebeba3fc527cc6235780364db30c3f2730c28280fe9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:91:26:40:01:1b:32:37:9f:57:72:f9:5c:
10:c3:64:a2:24:c3:e6:bc:cf:1e:a1:c3:bd:fd:b2:
83:e6:86:b3:3a:e4:10:a9:aa:62:59:36:c7:8d:db:
97:47:4f:e1:ad:82:2a:20:e7:66:e9:f3:53:5d:2e:
18:78:22:f3:60:a5:cf:b4:35:c8:e3:6a:f2:3c:e3:
c8:1d:2b:da:c6:e5:aa:40:76:1e:0a:5c:6a:76:10:
50:7e:fc:9c:e9:4a:4b:94:74:03:a9:80:e4:60:fa:
ea:1d:e0:73:72:e7:bf:ef:93:95:9d:6c:a3:e8:fc:
4f:a4:9e:8a:2b:d0:23:9c:fd:fb:41:7e:c4:6b:cd:
0d:f7:28:44:86:91:ba:df:4a:d6:de:dd:66:48:5f:
81:d4:c7:28:23:3c:30:b5:85:2d:bb:9e:e4:fe:5c:
d8:0d:17:11:0e:bf:4c:73:10:76:c9:0e:e2:6c:4d:
e7:86:49:8a:42:81:b6:b3:bb:45:63:81:25:c2:33:
7f:6a:c0:15:86:84:3c:fc:8e:c7:45:cd:ac:e9:39:
e1:a5:5a:a1:2c:30:b7:b9:3d:0f:b2:1d:14:ee:93:
f4:9d:39:44:07:b7:da:71:1c:04:7d:69:3f:b4:b0:
e9:97:77:6a:69:1b:d3:b2:92:85:0f:14:ff:90:73:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:84:80:84:E1:73:DD:96:8D:9C:D3:C6:59:88:3F:1D:77:D6:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0aad321-a0be-4c8c-85d9-b16b482fbe1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.72.0/21
Signature Algorithm: sha256WithRSAEncryption
39:f3:d7:2d:05:2a:13:cb:5c:d6:4e:70:a1:61:53:c8:ea:e2:
3f:2f:33:29:74:1a:03:3c:b5:77:1b:c9:7c:27:9b:fe:73:21:
fb:10:28:51:10:28:eb:1d:26:c7:a2:22:68:ad:ff:8f:75:ef:
51:cb:ce:01:87:ea:3e:4a:cf:ec:20:b3:14:7f:30:80:6c:3f:
55:d5:ff:92:ce:be:f7:b7:9b:f2:79:e0:41:19:35:d5:75:56:
db:77:1d:15:29:e5:f1:11:50:dd:a8:3a:77:fe:80:a9:04:cc:
49:9f:79:25:c3:a9:b1:ab:db:60:cc:2b:1e:8e:c7:7d:7e:83:
3b:80:5d:89:22:63:48:c1:bc:a7:97:98:81:fd:f8:ba:a2:21:
e6:5a:67:f1:c0:93:18:c1:3d:3e:b2:34:c4:89:62:3f:4d:a0:
a8:f5:b5:39:38:92:d2:7c:e2:4e:4b:cf:30:6b:07:c6:c7:d7:
fe:3d:f5:b2:17:18:f1:9f:f9:43:28:a0:4a:11:58:39:d4:16:
d7:96:fe:47:4a:bc:fc:37:bf:1e:73:37:b3:b5:f6:c5:6f:59:
da:53:e5:7a:4f:d8:a4:a7:55:07:6f:55:51:a3:10:c9:f2:bb:
7d:43:45:25:69:46:8d:cc:bf:23:42:a6:56:53:e4:f1:ef:4c:
34:f1:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:27 2025 by rpki-client