Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5b090ae-c3bc-4c65-951b-4f9f4859df90.roa
File: a5b090ae-c3bc-4c65-951b-4f9f4859df90.roa (raw, json)
Hash identifier: KFT37TBP5Lq3ymLQHkQSDFyLXgR2vaagm2IgYC7EorU=
Subject key identifier: AC:6D:94:D9:38:88:75:B7:67:21:2A:E2:FC:E2:F2:D1:19:13:42:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 093D5CD84C12D95D7A658F6B66E87B3D30BC6A4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5b090ae-c3bc-4c65-951b-4f9f4859df90.roa
Signing time: Sat 18 Oct 2025 04:31:50 +0000
ROA not before: Sat 18 Oct 2025 04:31:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:3d:5c:d8:4c:12:d9:5d:7a:65:8f:6b:66:e8:7b:3d:30:bc:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:31:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=b71c36d1a357768fddb8cce066908c821f40b58900c2d7839faf56cbbd8274bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:57:65:c5:5a:39:e2:a9:50:fb:9d:1d:61:
c8:72:6b:00:c1:5f:36:3d:18:16:e9:b9:23:c4:2b:
46:84:fc:05:f9:c4:eb:7f:e8:c0:83:2e:0d:c4:d5:
44:2e:0d:16:3c:8b:60:89:78:d7:3a:d0:ce:b7:21:
77:34:98:c8:1c:13:f3:37:29:4a:2b:14:dd:fb:29:
cc:84:51:d8:d5:b8:96:cf:1a:4b:ca:69:90:cf:a6:
1f:d9:66:a5:cc:f6:61:9a:18:e5:ce:bf:14:8d:d7:
3a:d6:10:74:af:d4:ab:ea:e5:8b:3c:2f:01:12:cc:
20:e4:b8:bc:01:fd:a8:8f:51:9e:85:10:3e:54:fe:
f1:66:87:7e:07:60:eb:02:3f:7e:8b:c2:9d:62:fa:
0a:f8:26:1e:f3:11:79:dd:7f:2f:89:5c:d3:34:da:
02:19:60:76:94:e3:03:dd:0d:dd:02:37:2f:13:32:
2a:95:98:fd:b6:d7:c6:29:ed:fb:ab:ad:4a:f3:5a:
8c:9b:61:62:41:57:cf:95:2d:69:c2:e3:c2:67:57:
47:05:df:4d:47:f6:0c:ae:f0:8c:a9:ec:64:b2:84:
48:d3:7c:ac:20:c1:75:ea:7f:53:f4:64:b5:a2:f7:
04:67:06:84:3b:6c:94:45:a1:dd:34:d2:14:c6:a4:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6D:94:D9:38:88:75:B7:67:21:2A:E2:FC:E2:F2:D1:19:13:42:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5b090ae-c3bc-4c65-951b-4f9f4859df90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.85.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ab:f1:21:cf:5b:27:00:e9:60:c4:bf:18:dd:fb:82:6e:52:
d2:f2:66:f8:ff:27:5a:6c:1e:22:52:24:90:91:ea:7d:cf:37:
f0:d5:af:06:5f:be:fe:ac:2a:ee:9c:0b:6a:56:5a:7b:52:c9:
76:1a:ab:eb:e2:c1:ad:c0:ed:f5:20:0f:be:e3:be:a0:15:59:
b9:8b:98:f0:b2:dd:2c:39:28:96:48:f6:fb:80:8a:c6:10:ae:
04:70:b9:87:6e:dc:c9:f5:7c:0e:01:e0:1b:73:86:be:f7:09:
e2:16:40:de:71:6c:91:94:13:ac:02:ef:3d:36:dd:bb:98:7c:
72:d6:9f:fc:46:84:c0:00:20:1b:bc:91:c4:98:bd:54:62:cd:
ae:56:90:01:5e:4b:f9:c7:d7:84:23:2a:ee:4b:f0:1e:97:cf:
b6:92:bf:83:f5:13:b5:ac:dc:a2:de:63:d7:32:5d:38:82:72:
c7:f8:a3:7e:80:79:ba:4f:25:af:f9:26:5b:ea:b7:93:5c:ad:
da:d1:f0:18:7e:8c:93:2f:a4:cd:ff:ca:7a:61:fb:24:8a:74:
29:52:5d:0f:0b:a8:f0:ea:b5:33:72:41:f4:38:4d:04:87:cb:
c0:00:db:c3:5d:d7:4d:25:5f:c4:8b:6d:13:72:09:a9:76:07:
25:fd:0b:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCT1c2EwS2V16ZY9rZuh7PTC8akswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQzMTUwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzFjMzZkMWEzNTc3NjhmZGRiOGNjZTA2NjkwOGM4MjFm
NDBiNTg5MDBjMmQ3ODM5ZmFmNTZjYmJkODI3NGJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9/FdlxVo54qlQ+50dYchyawDBXzY9GBbpuSPEK0aE/AX5
xOt/6MCDLg3E1UQuDRY8i2CJeNc60M63IXc0mMgcE/M3KUorFN37KcyEUdjVuJbP
GkvKaZDPph/ZZqXM9mGaGOXOvxSN1zrWEHSv1Kvq5Ys8LwESzCDkuLwB/aiPUZ6F
ED5U/vFmh34HYOsCP36Lwp1i+gr4Jh7zEXndfy+JXNM02gIZYHaU4wPdDd0CNy8T
MiqVmP2218Yp7furrUrzWoybYWJBV8+VLWnC48JnV0cF301H9gyu8Iyp7GSyhEjT
fKwgwXXqf1P0ZLWi9wRnBoQ7bJRFod000hTGpJxtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrG2U2TiIdbdnISri/OLy0RkTQqIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1YjA5MGFlLWMzYmMtNGM2NS05NTFiLTRmOWY0ODU5ZGY5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCVUwDQYJKoZIhvcNAQELBQADggEBAD2r8SHPWycA6WDEvxjd+4JuUtLy
Zvj/J1psHiJSJJCR6n3PN/DVrwZfvv6sKu6cC2pWWntSyXYaq+viwa3A7fUgD77j
vqAVWbmLmPCy3Sw5KJZI9vuAisYQrgRwuYdu3Mn1fA4B4Btzhr73CeIWQN5xbJGU
E6wC7z023buYfHLWn/xGhMAAIBu8kcSYvVRiza5WkAFeS/nH14QjKu5L8B6Xz7aS
v4P1E7Ws3KLeY9cyXTiCcsf4o36AebpPJa/5Jlvqt5NcrdrR8Bh+jJMvpM3/ynph
+ySKdClSXQ8LqPDqtTNyQfQ4TQSHy8AA28Nd100lX8SLbRNyCal2ByX9C8c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:25 2025 by rpki-client