Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a26b8ba6-5dd9-4813-b6c4-0fa14405a536.roa
File: a26b8ba6-5dd9-4813-b6c4-0fa14405a536.roa (raw, json)
Hash identifier: coaFEn+CXbYIaeIpk9betDgcoWF9SpuLoJAhXmb4n+I=
Subject key identifier: BA:33:02:37:73:A3:E1:AA:C5:4E:B7:4E:95:38:6B:FC:DF:DB:57:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08ABF64EF655061B52D0B71F45FE2EF704A70BA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a26b8ba6-5dd9-4813-b6c4-0fa14405a536.roa
Signing time: Sat 18 Oct 2025 04:31:10 +0000
ROA not before: Sat 18 Oct 2025 04:31:10 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ab:f6:4e:f6:55:06:1b:52:d0:b7:1f:45:fe:2e:f7:04:a7:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:31:10 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=2e5a27f8a2fa892d2bd91a593e093777e19362f58cf7810d74c1128e707a7e5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:34:ae:cc:4e:08:75:00:a0:84:a5:db:ec:
a3:59:b8:4d:c5:64:73:d5:be:dc:65:bc:f8:55:d9:
f3:6f:a3:19:01:8b:22:15:4e:06:ef:22:33:e4:ea:
29:a7:2e:df:10:34:30:ba:d2:3e:73:b5:0b:8d:3f:
ad:7b:f9:69:24:b9:5b:10:2c:ca:01:3f:74:a2:26:
1a:20:48:f4:39:55:e4:2a:47:0c:e8:07:34:e7:01:
b8:e4:cd:63:f9:72:3e:2b:33:58:a2:6b:0e:4b:87:
67:ba:77:69:47:cf:5c:69:81:ad:41:72:cd:d2:05:
5b:0c:cc:04:e2:83:47:3a:11:be:12:52:74:aa:b6:
46:b9:37:85:fa:7e:45:a5:da:5a:9c:59:77:18:86:
12:f5:c3:e7:30:39:aa:38:0a:73:3f:3c:ed:a8:85:
02:40:be:18:22:51:c5:6a:b1:b5:8d:4c:92:18:bb:
88:fa:08:50:3a:7d:06:3a:dd:1f:a2:2d:70:eb:e4:
68:04:81:83:61:fd:97:10:5e:01:d1:fc:67:2d:4c:
85:37:80:13:1d:c3:00:1d:53:da:b4:02:5e:e7:86:
89:c7:40:c3:af:d3:95:88:3e:ec:15:c1:81:4a:c0:
81:b8:3e:b9:a9:16:6a:ac:31:94:a6:c8:fa:4f:df:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:02:37:73:A3:E1:AA:C5:4E:B7:4E:95:38:6B:FC:DF:DB:57:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a26b8ba6-5dd9-4813-b6c4-0fa14405a536.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:b5:45:17:a7:5d:fd:ed:bb:56:48:f3:fe:17:b6:1b:4e:b2:
6c:48:2c:ab:0c:53:1b:2c:6a:eb:cf:b0:96:31:a9:80:de:20:
62:69:35:75:e0:a7:ad:1d:79:65:1e:5f:91:5f:b1:fe:98:f3:
37:45:71:cd:b0:c6:59:14:e8:e4:9a:d7:68:87:ea:14:13:a7:
f7:41:ec:c0:34:ae:f9:e8:03:29:78:51:34:33:c2:06:83:cc:
f6:8b:e9:e3:d5:7d:db:f4:38:8b:1d:89:65:54:e1:9f:1b:55:
f4:e2:5e:6c:ef:64:cb:7d:d8:33:be:c3:6f:93:24:16:63:85:
21:cf:0a:7f:b6:e7:bc:e4:e3:5b:d8:3c:5f:6d:1f:b1:79:d1:
e0:1f:e6:26:61:cf:5a:fb:a2:8c:e0:4a:28:ac:37:4a:58:ab:
74:4c:47:95:4d:be:50:9c:9d:1e:43:3f:88:e7:8c:d7:e0:60:
75:73:7b:e3:73:40:8d:4d:73:b2:6c:97:c6:0b:8d:17:f7:56:
c4:51:58:a9:85:18:dc:9e:45:52:f4:88:d4:52:e6:9f:58:98:
09:4f:3a:33:a6:e8:64:40:6b:35:7d:ed:f1:4c:ae:76:d2:36:
20:b0:77:61:23:54:98:24:c8:68:28:98:3f:80:ea:49:8b:d3:
d8:75:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:48 2025 by rpki-client