Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43b4a23-7322-427a-ac5d-4be07d957239.roa
File: a43b4a23-7322-427a-ac5d-4be07d957239.roa (raw, json)
Hash identifier: 97p3405NYj91PbIpeVVciIsOKBwntQekx1NxI+/hw5M=
Subject key identifier: 8B:7E:E8:57:F6:71:54:FC:2C:FA:29:E2:64:1E:83:44:70:1F:4B:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 286F02DABFC23C1D21642CCD66B9782124172FEA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43b4a23-7322-427a-ac5d-4be07d957239.roa
Signing time: Sat 18 Oct 2025 03:51:00 +0000
ROA not before: Sat 18 Oct 2025 03:51:00 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:6f:02:da:bf:c2:3c:1d:21:64:2c:cd:66:b9:78:21:24:17:2f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:51:00 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=2512bfc1344125b925c7379e8edc7e3dc16214813217729344ff3519327d1845, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:56:2b:57:2f:f7:26:5d:ee:b9:33:dc:f6:
da:ae:be:a5:2e:48:6b:bb:b1:2e:10:1f:08:c0:0b:
79:ff:49:db:69:bc:59:7f:0c:ea:30:ab:69:42:26:
48:a1:94:6d:d8:b5:dd:8a:87:c4:14:74:b5:85:24:
72:16:37:c1:b5:fb:69:09:f2:b7:7e:4a:70:27:39:
ac:c5:82:3b:1c:13:63:c1:48:ed:40:44:ea:cb:36:
5d:82:c6:45:f0:99:c7:c3:61:f5:4b:50:b0:67:c5:
78:90:29:ce:ae:0d:3b:37:9d:a0:1e:01:9d:8a:f5:
3d:37:34:e9:26:da:d2:e6:5f:98:a0:55:01:88:9e:
ed:73:92:bd:71:45:d4:e6:5b:7c:b6:ad:77:a1:59:
75:79:de:c2:f6:22:c0:ba:33:2e:88:71:c7:c5:c7:
47:66:1f:92:43:0a:de:42:74:03:3b:2b:89:ed:8d:
b1:ef:b2:f5:b4:79:f2:5d:6c:39:20:d5:aa:c2:73:
d5:fd:95:ea:35:70:df:3c:cc:24:3d:40:1f:d1:0a:
6f:d2:7f:73:b6:f3:35:10:ad:32:34:b9:4d:86:32:
74:87:a0:fe:df:dc:98:dd:ba:be:4e:7e:e9:ac:71:
b5:1a:76:e0:af:31:bd:20:e6:ce:32:78:83:a3:8d:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:E8:57:F6:71:54:FC:2C:FA:29:E2:64:1E:83:44:70:1F:4B:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a43b4a23-7322-427a-ac5d-4be07d957239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b6:62:82:dd:d1:d2:27:d4:4a:f2:55:cd:66:02:2a:09:7c:
76:02:3f:9f:ef:fa:21:81:ad:25:64:9e:d3:b2:d8:8b:56:e9:
5b:6c:fe:2f:77:ce:1e:16:de:c1:f3:16:1e:5f:4b:c0:e9:5b:
1b:a5:49:57:0c:71:03:61:56:58:df:23:6d:5d:7a:70:a8:b5:
82:44:0d:e7:d9:cc:0a:1f:37:c5:cf:9d:df:fd:0e:e8:2d:aa:
57:b3:f8:89:1c:01:a3:25:4f:8b:97:68:fe:41:7f:23:01:af:
3c:35:07:02:38:75:4a:de:e1:27:1e:63:e7:e7:34:6b:b6:23:
91:a7:fb:4e:bc:e7:89:5b:b8:51:4e:d8:9c:29:a5:df:4a:01:
f8:ac:46:d7:f8:69:6a:3f:04:61:bf:fe:9f:b4:26:53:3e:33:
29:eb:13:40:49:6f:de:07:1b:c7:4a:e7:29:f6:ce:98:2f:31:
c8:b8:86:44:b1:ee:89:ff:92:c2:29:2c:d7:e4:66:ab:2c:f1:
cf:59:85:aa:35:1b:44:2d:f0:30:57:21:bc:03:a4:40:08:de:
1b:8c:77:57:b7:ee:7e:71:c1:cd:72:99:23:66:2f:23:8a:9c:
42:dc:2c:2e:3e:0e:e5:62:51:59:d3:73:1e:c6:7d:15:3e:41:
6b:19:67:d7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKG8C2r/CPB0hZCzNZrl4ISQXL+owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDM1MTAwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTEyYmZjMTM0NDEyNWI5MjVjNzM3OWU4ZWRjN2UzZGMx
NjIxNDgxMzIxNzcyOTM0NGZmMzUxOTMyN2QxODQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVKlYrVy/3Jl3uuTPc9tquvqUuSGu7sS4QHwjAC3n/Sdtp
vFl/DOowq2lCJkihlG3Ytd2Kh8QUdLWFJHIWN8G1+2kJ8rd+SnAnOazFgjscE2PB
SO1AROrLNl2CxkXwmcfDYfVLULBnxXiQKc6uDTs3naAeAZ2K9T03NOkm2tLmX5ig
VQGInu1zkr1xRdTmW3y2rXehWXV53sL2IsC6My6IccfFx0dmH5JDCt5CdAM7K4nt
jbHvsvW0efJdbDkg1arCc9X9leo1cN88zCQ9QB/RCm/Sf3O28zUQrTI0uU2GMnSH
oP7f3Jjdur5OfumscbUaduCvMb0g5s4yeIOjjf/DAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUi37oV/ZxVPws+iniZB6DRHAfS/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E0M2I0YTIzLTczMjItNDI3YS1hYzVkLTRiZTA3ZDk1NzIzOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCXowDQYJKoZIhvcNAQELBQADggEBAAG2YoLd0dIn1EryVc1mAioJfHYC
P5/v+iGBrSVkntOy2ItW6Vts/i93zh4W3sHzFh5fS8DpWxulSVcMcQNhVljfI21d
enCotYJEDefZzAofN8XPnd/9Dugtqlez+IkcAaMlT4uXaP5BfyMBrzw1BwI4dUre
4SceY+fnNGu2I5Gn+06854lbuFFO2Jwppd9KAfisRtf4aWo/BGG//p+0JlM+Mynr
E0BJb94HG8dK5yn2zpgvMci4hkSx7on/ksIpLNfkZqss8c9Zhao1G0Qt8DBXIbwD
pEAI3huMd1e37n5xwc1ymSNmLyOKnELcLC4+DuViUVnTcx7GfRU+QWsZZ9c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:26 2025 by rpki-client