Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb97266-d864-4e54-9e64-bb12d4cfb258.roa
File: afb97266-d864-4e54-9e64-bb12d4cfb258.roa (raw, json)
Hash identifier: vyGMG813Z37ckUyDH4ZwAFZU31DyxYswlkOClJrce1w=
Subject key identifier: B9:4D:87:AE:74:B9:47:A4:67:14:55:81:7A:56:2D:C4:F4:53:35:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FB7E0B3B5625E23D206703916534F74063EF6C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb97266-d864-4e54-9e64-bb12d4cfb258.roa
Signing time: Sat 18 Oct 2025 01:11:05 +0000
ROA not before: Sat 18 Oct 2025 01:11:05 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b7:e0:b3:b5:62:5e:23:d2:06:70:39:16:53:4f:74:06:3e:f6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:11:05 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=7d10c03bbf8eda128c482c2898c030b5a1f1ac327a363a3b68e79899e086ee3b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:f1:c5:ad:e5:af:f5:23:97:d9:dd:39:cd:
fe:82:c9:20:0d:27:cb:98:a8:19:9e:bf:5f:c8:13:
47:18:2c:4c:4a:9e:45:a5:b4:b0:54:cd:2c:7e:64:
30:8c:ff:a8:a2:62:4f:70:e1:7f:76:3f:52:89:c9:
c9:91:9e:70:bf:ce:29:ac:81:4f:24:bc:cb:21:c6:
28:9f:9f:3b:6f:55:9c:49:a7:37:ca:a9:57:8b:08:
19:54:db:cd:6e:ff:90:a3:3a:45:eb:52:ed:74:a2:
de:51:16:f3:11:2c:a6:e6:7f:26:08:40:a4:d8:63:
c5:1f:e0:47:5e:32:c2:4d:d8:d4:6d:a1:e4:2f:0c:
0e:60:46:ac:aa:b6:10:4e:92:c0:69:1f:72:75:7c:
e6:3c:d8:a2:a4:d7:5c:6e:de:22:47:a9:cb:58:8b:
f8:12:0b:86:a4:9b:76:9c:01:4a:67:fb:41:93:56:
b0:41:a5:cd:9f:72:ae:eb:1c:6d:34:fb:d0:c5:b6:
a4:e5:7b:7b:ef:18:f8:57:d8:e2:35:22:51:6a:49:
1a:2c:a1:12:c0:6b:1b:58:bf:6c:34:4f:92:f9:89:
1b:f2:20:f7:94:90:68:56:9b:e8:0f:14:55:65:4b:
ca:60:b6:f6:eb:73:e1:16:d6:97:3d:3f:d4:c7:d7:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4D:87:AE:74:B9:47:A4:67:14:55:81:7A:56:2D:C4:F4:53:35:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afb97266-d864-4e54-9e64-bb12d4cfb258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:27:10:28:90:32:47:63:66:1f:56:98:63:58:47:e7:54:d2:
8d:b5:96:3c:14:87:f7:9f:66:b8:ab:b0:b2:f4:f3:dd:df:da:
44:0c:11:42:49:90:f2:05:29:f8:ab:a4:9a:89:dd:6d:5e:6d:
cf:1a:7a:13:ea:6b:03:5e:64:fd:e4:6a:4a:e7:de:3a:e6:5c:
4a:be:da:6e:5e:2f:c9:88:8e:32:93:81:de:97:7f:ef:1b:af:
f1:dd:00:5f:95:4d:90:71:5b:8c:44:21:87:c1:42:2d:63:0d:
f4:85:f9:df:7c:30:e1:b7:c6:f6:07:e6:4b:60:82:34:77:e8:
85:d4:ff:f9:f9:67:10:35:b7:8e:91:54:dd:03:bd:cf:c6:90:
6e:91:67:de:3d:64:18:8a:a1:64:eb:cc:32:bd:ae:75:b0:50:
75:5a:7a:cd:ee:59:a3:4b:f7:db:a4:cf:6a:b3:9d:25:43:65:
94:94:28:ce:6a:15:6b:16:63:11:f0:b3:61:0c:63:ba:f6:38:
bb:d3:50:26:3d:ce:c1:fd:7c:3e:2c:fc:bc:9d:af:11:64:ae:
da:ac:cf:62:33:b9:c3:dd:38:5c:d6:62:9f:19:71:06:21:c5:
dc:72:48:82:39:df:e8:e0:bc:5f:7b:de:36:f4:df:50:51:62:
98:39:3b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:07 2025 by rpki-client