Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea2867-f872-4e5c-a99c-dc24f9829318.roa
File: afea2867-f872-4e5c-a99c-dc24f9829318.roa (raw, json)
Hash identifier: gQ7fglEL80mbc5jOCjlDhqn306J7yQv1LOHrFih4bac=
Subject key identifier: B1:4B:72:4A:00:D5:DA:73:8B:EE:3F:1E:3A:35:8E:CD:C7:9D:DC:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06FFC0DF02F6025B191C40650947467EA2995EEC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea2867-f872-4e5c-a99c-dc24f9829318.roa
Signing time: Sat 18 Oct 2025 04:00:08 +0000
ROA not before: Sat 18 Oct 2025 04:00:08 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ff:c0:df:02:f6:02:5b:19:1c:40:65:09:47:46:7e:a2:99:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:00:08 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=30799fcb3bff706eaa6d4206e12cdfa2ee90678ba7e3c76f204d74ba36df57fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:a9:aa:42:65:b4:dd:d8:85:cd:c5:ca:c3:
eb:8c:1e:3f:9f:d5:55:9c:4b:76:3c:32:93:83:0f:
93:ed:ea:22:6d:f2:93:c4:e6:f2:7d:35:c1:08:91:
cf:1c:44:dd:cd:c2:16:98:71:15:52:98:62:98:e1:
05:08:d7:6b:5d:58:2f:b4:43:8a:fc:46:3e:ca:23:
d5:e5:c0:61:50:c5:a6:c5:c3:7b:ed:5e:22:51:46:
7c:85:7b:48:b7:5d:69:64:eb:68:5e:46:ce:a4:38:
22:ab:43:a7:f2:89:4c:0a:27:55:47:5b:7c:8b:3f:
7b:3e:37:68:70:e1:9f:f1:a0:ed:57:9c:24:55:80:
d7:0c:1a:94:c2:b0:61:fa:a9:5a:c8:75:e5:ba:e8:
02:a7:81:bc:54:68:a8:f0:d8:9a:18:d3:21:b4:04:
78:e0:5f:7d:a1:ed:e3:9c:7d:8f:85:0d:04:75:7c:
a5:e1:76:0b:5b:7e:b2:b6:9a:81:a3:7e:51:34:2d:
a2:26:81:ce:ea:e5:93:33:03:fe:9f:12:19:e6:ca:
2f:ee:c5:13:0f:08:7c:d5:83:5e:9e:2a:f4:82:42:
f7:ce:3f:42:31:68:3f:45:73:ba:eb:0a:55:d2:49:
fa:c6:50:3b:8a:19:11:fd:ee:ac:19:24:e1:ec:57:
26:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:4B:72:4A:00:D5:DA:73:8B:EE:3F:1E:3A:35:8E:CD:C7:9D:DC:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afea2867-f872-4e5c-a99c-dc24f9829318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.23.0/24
Signature Algorithm: sha256WithRSAEncryption
26:64:4d:59:cf:b0:87:0b:05:0b:be:8a:e5:d7:f6:2a:ce:2c:
c9:06:27:d0:15:c2:59:a6:a4:03:73:06:23:4e:4b:fc:d4:c6:
7b:7c:93:0a:ef:cd:3d:82:c5:6b:68:2d:56:ce:cf:7c:7e:2a:
fc:d3:f0:3c:2f:6b:de:3e:3c:19:ce:24:49:58:96:e9:01:9c:
10:b1:32:87:65:1c:f2:80:6c:54:fe:82:c3:82:5f:45:84:a4:
cb:0f:08:83:26:06:49:31:04:74:67:be:c9:17:04:44:7d:92:
1d:dd:16:b0:eb:34:43:2b:1d:fa:49:82:c8:72:c8:67:14:f4:
44:0b:36:69:3b:14:ef:4b:a4:15:27:f2:50:0e:f0:ad:ea:65:
77:b6:6d:b6:02:27:c4:03:94:cb:88:95:cb:80:9b:ef:6a:a4:
ff:38:fd:90:32:e1:be:d3:81:3e:09:2b:87:f8:d8:ef:6e:2c:
31:b6:f1:15:c0:d2:04:52:da:21:e3:db:a9:43:f3:31:cd:66:
18:05:27:cd:56:0e:19:f4:e4:17:f4:64:59:70:2b:d4:7b:fe:
99:88:a3:4f:d8:4b:68:e9:99:77:81:70:b6:42:6f:5c:ed:f6:
c8:d6:21:e1:6f:84:62:3b:48:a9:95:d2:86:a8:dd:a3:5f:61:
c9:d1:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:33 2025 by rpki-client