Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2212e87-c24f-425a-a78c-188ce52c649e.roa
File: a2212e87-c24f-425a-a78c-188ce52c649e.roa (raw, json)
Hash identifier: bZtNzBn4eIIEhODIvvQ7KpX+DUsvtZ3dS0103p/e9+I=
Subject key identifier: CE:C2:FE:E7:32:D1:1C:68:17:AB:31:2F:5E:C0:E0:02:C1:C1:F6:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CFD0A334B0A504F7ADEE79695E8D24E4EC11548
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2212e87-c24f-425a-a78c-188ce52c649e.roa
Signing time: Sat 18 Oct 2025 01:30:21 +0000
ROA not before: Sat 18 Oct 2025 01:30:21 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fd:0a:33:4b:0a:50:4f:7a:de:e7:96:95:e8:d2:4e:4e:c1:15:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:30:21 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=b636614b6300e141a81dd039d738769ae2f8c16d1d533fb5d1c9f6183ae9073c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2b:84:ee:77:c4:64:cd:04:86:31:b6:be:e4:
c9:d5:79:64:78:77:7c:66:b6:f1:a2:f4:89:85:23:
fd:fd:2c:68:21:9d:cd:6d:25:51:01:71:e7:85:d9:
09:e9:62:f8:14:3e:17:ea:be:c5:5e:21:e4:d1:cf:
a7:e6:29:f5:ca:87:32:23:b0:2c:b8:a1:4d:e5:bd:
22:dd:dc:0e:f5:d8:a4:08:21:9c:39:b3:2a:37:5a:
c9:2c:30:3f:a9:3e:5e:0a:b8:ad:cf:73:42:e0:27:
6a:e4:49:e3:5d:1e:3c:ef:90:6c:d2:17:96:76:fa:
d6:5e:eb:61:d5:3c:40:5d:22:d3:bd:85:dc:1f:cc:
59:0a:7c:7f:59:49:e0:37:51:77:3b:50:93:18:ba:
5e:45:46:38:6f:f1:7a:c0:06:98:67:cc:72:fd:3f:
bf:66:7d:e4:4f:58:0d:5d:85:b4:f9:57:58:cc:c0:
3e:f2:68:d8:2a:1a:a6:03:00:67:c7:27:0d:b6:70:
7d:3b:31:3f:7e:7b:75:85:6e:03:fe:62:17:a6:39:
52:d5:68:49:2b:0f:19:12:97:b8:07:e9:b9:a1:fa:
e3:ff:4a:53:8e:cd:0a:69:e4:d8:6f:62:96:c8:d7:
29:05:b9:32:a1:22:da:58:07:d3:cb:3b:45:04:fd:
ac:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C2:FE:E7:32:D1:1C:68:17:AB:31:2F:5E:C0:E0:02:C1:C1:F6:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2212e87-c24f-425a-a78c-188ce52c649e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.20.0/23
Signature Algorithm: sha256WithRSAEncryption
34:db:fb:ff:de:28:1a:8e:c7:69:98:22:b9:ab:57:ab:00:3c:
45:3a:af:86:36:61:20:fc:86:cb:0e:51:11:8b:c2:bb:25:a8:
fd:e4:a8:b5:94:fb:e3:aa:cc:ee:12:8a:26:ad:dc:07:67:1d:
1f:09:27:85:45:1c:07:63:ad:1d:26:72:27:03:a3:31:f8:3c:
f6:48:82:fe:90:80:8c:a3:56:0d:5e:ea:3f:0f:69:71:a1:8f:
54:ed:65:d2:b2:58:31:a1:20:b6:8a:0c:04:71:c5:d7:bc:05:
c1:7c:9f:bc:11:fc:f8:a5:9a:09:a7:34:fe:80:45:17:d8:a1:
2d:14:e8:71:73:2d:ab:20:d6:77:2d:eb:74:7e:ee:24:82:48:
66:ff:2b:28:70:ce:56:7c:7d:55:12:fa:c6:5e:f9:90:f1:18:
24:30:c3:79:54:a3:7e:91:de:e9:df:5b:4c:8e:dc:6a:8e:47:
29:cd:e4:d7:08:99:0b:9b:1e:57:31:83:4e:06:49:61:6a:b4:
82:8f:61:37:e6:33:53:6e:93:0e:40:59:71:10:2c:d6:c0:11:
32:9f:f2:6a:6c:04:cd:a7:3a:ef:27:ba:59:04:4e:f2:50:eb:
c9:8e:eb:cf:77:a3:86:cf:b1:23:f5:74:64:9f:e5:a8:66:28:
7f:18:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:14 2025 by rpki-client