Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae0a208-a261-42ad-aee4-cd09d9708aae.roa
File: aae0a208-a261-42ad-aee4-cd09d9708aae.roa (raw, json)
Hash identifier: EC05iW74i3FfKvHiKmJFYfvtEgTbbVRk4Xgpue1wb8E=
Subject key identifier: 9E:B6:9B:06:D9:97:46:09:6E:16:8F:D4:87:45:30:C2:1F:A5:16:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77CF674E968A462C82164BADE76AFFB62AE97D96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae0a208-a261-42ad-aee4-cd09d9708aae.roa
Signing time: Sat 18 Oct 2025 03:31:15 +0000
ROA not before: Sat 18 Oct 2025 03:31:15 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cf:67:4e:96:8a:46:2c:82:16:4b:ad:e7:6a:ff:b6:2a:e9:7d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:31:15 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=ddfcd062d39148e159926b689a82a02a602e8ec7b6fd6327803deaa398c946ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:61:e7:ee:88:07:df:85:d5:df:e3:01:fb:
40:6b:ff:28:d8:7d:6d:ce:95:28:22:9a:b9:c9:b7:
84:08:86:7f:01:f8:a3:91:23:f3:6a:68:6c:04:30:
f9:b4:13:9a:04:d3:3f:c9:df:1e:d2:16:a9:01:aa:
50:2e:86:9f:0d:09:60:e8:f5:ad:78:8d:e6:89:ab:
95:d3:65:3f:ac:a3:7b:ce:a6:28:0a:e9:27:9f:3d:
4e:2a:50:84:23:a9:f2:fb:2a:03:9d:cf:b5:c4:2f:
5b:7c:76:f7:91:06:60:45:85:06:df:52:d2:e7:93:
0a:c0:84:73:10:ae:76:dd:a1:db:f9:00:33:27:35:
46:3a:0d:ee:db:6c:78:98:40:d5:ce:1d:62:89:5e:
2c:52:4c:e5:dc:6d:c1:7e:cd:38:e7:c8:c4:8f:d9:
5e:06:35:f2:0f:9d:c7:f1:db:7e:63:0d:5a:17:73:
b7:20:23:ee:fa:37:f6:22:b1:1c:ec:c1:68:bb:92:
93:a1:79:2d:3b:4c:90:ca:52:51:a0:38:c7:9c:0b:
70:97:5d:fa:c0:85:0e:2e:15:53:00:6d:29:c9:df:
11:e2:b2:ef:60:78:8b:ae:e7:e5:d9:16:17:4d:50:
bc:a5:04:05:75:fd:47:4b:96:06:71:80:94:33:75:
9c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:9B:06:D9:97:46:09:6E:16:8F:D4:87:45:30:C2:1F:A5:16:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae0a208-a261-42ad-aee4-cd09d9708aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:eb:4e:29:7d:84:45:52:07:d0:9a:1f:b6:cf:9b:0c:70:46:
fb:9e:8d:64:47:48:f1:be:79:c3:ff:6a:a3:2f:09:ee:f5:e7:
23:75:12:7a:8e:10:54:55:90:e2:52:5a:27:76:4a:cc:de:f0:
b6:4e:d6:c7:35:55:80:a7:69:af:90:f0:cf:13:9a:f8:9b:78:
e3:06:b7:5a:55:23:7f:ca:cf:ab:01:72:b2:92:d8:4d:15:c5:
ac:25:3d:0a:03:07:3c:87:d8:ad:82:c1:6d:07:29:13:d2:59:
fd:2e:4a:ea:fe:de:24:89:0a:62:43:8c:c7:77:1c:91:0c:41:
89:b0:0d:e2:20:79:c6:b1:d5:3e:e9:d7:e1:43:f2:7c:3d:0e:
e0:2e:af:10:82:53:0f:e6:e0:0d:27:f3:59:ea:ae:0c:05:ba:
3c:4a:cb:63:88:ca:f2:86:8d:93:0d:61:9b:c5:ab:f7:7d:3c:
e7:7c:80:d7:2c:22:62:ab:05:1d:9d:ed:d7:2e:c6:af:31:c3:
d5:19:33:11:69:32:1c:4a:8e:16:a4:2c:6d:01:a6:d9:6a:02:
47:c7:9b:b8:c2:91:54:64:31:20:e5:b3:20:59:92:e5:37:b4:
61:4e:83:41:58:b4:77:3d:2e:e3:33:c5:b3:87:68:2c:7d:4e:
82:db:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:23 2025 by rpki-client