Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b43c4305-3d37-43e0-ba47-97c28cf54a1f.roa
File: b43c4305-3d37-43e0-ba47-97c28cf54a1f.roa (raw, json)
Hash identifier: cHSeDNc9QjlIwh0WH0voS6X6lhJWz/gi9YzeE1BKEjQ=
Subject key identifier: 8B:1B:4C:3E:17:6B:E7:60:DD:CB:E9:BD:51:37:B7:96:64:7D:F1:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EB6CC0363B92B3094DE3132ECFA70FF24060252
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b43c4305-3d37-43e0-ba47-97c28cf54a1f.roa
Signing time: Sat 18 Oct 2025 04:20:52 +0000
ROA not before: Sat 18 Oct 2025 04:20:52 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b6:cc:03:63:b9:2b:30:94:de:31:32:ec:fa:70:ff:24:06:02:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:20:52 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=5d152f9430647f4b9968ed646973ceea4e1fcc8314b888d9fcd0bdbdbf000ee3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:a1:2a:aa:cf:be:1b:ae:a0:8a:86:ed:54:
ff:a6:94:d8:9b:80:8b:0d:9e:f2:f0:46:f9:5b:70:
4f:c5:ee:39:e6:b2:49:e3:42:6f:0a:7d:4f:4e:1e:
85:41:17:cd:db:1e:f9:9c:13:e5:5a:26:d0:a7:13:
6a:cb:4e:e4:a3:91:41:45:8f:a1:9e:cf:10:93:1c:
de:7d:f8:42:e0:bd:19:07:41:a7:a4:29:ce:8f:e0:
ef:dc:e3:98:aa:a2:e0:07:08:5f:2a:ac:16:66:ab:
87:eb:70:b3:26:07:58:fb:55:ff:39:25:02:7f:0a:
8c:fc:43:0a:51:b6:07:40:e9:c9:ea:dc:01:f5:ca:
c2:f7:71:bb:eb:2c:9d:d3:59:be:b7:f5:91:c1:77:
61:ff:05:06:28:27:f9:d8:dd:2c:35:1f:0a:80:fc:
66:0d:49:ac:79:8d:6f:88:ad:15:43:4e:f6:94:9f:
6b:98:a8:dd:cf:4d:22:67:38:0b:b1:e1:6f:03:41:
ac:fc:a7:35:f9:52:d0:3a:dc:27:f5:bd:7b:af:07:
17:03:35:d2:b3:95:b6:d6:c9:11:1d:06:06:2b:7b:
2e:bd:57:fa:7d:d6:bb:c9:db:02:ab:16:3a:6c:04:
5d:c1:29:41:50:05:c7:0c:c1:4e:02:a6:af:d7:b3:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:4C:3E:17:6B:E7:60:DD:CB:E9:BD:51:37:B7:96:64:7D:F1:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b43c4305-3d37-43e0-ba47-97c28cf54a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.1.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:a9:3f:ba:f1:ca:da:0d:90:f4:66:36:ca:b1:45:5f:b0:3b:
9c:ad:e4:06:48:1b:fc:cd:53:f3:b3:2c:0c:be:fd:19:61:f4:
cd:3a:57:50:cb:c1:de:92:86:25:f2:b2:b6:8c:c6:d0:d4:1b:
0e:2a:05:8a:ef:11:43:d9:f4:f5:37:3a:c2:be:85:bb:f6:9e:
78:f2:0e:a4:5f:46:4a:39:ce:e0:02:52:7b:a9:4a:94:17:c7:
2f:ca:b5:1a:eb:91:99:65:db:e3:15:00:32:4d:ba:a8:7f:59:
e2:1a:93:25:d9:6b:1d:83:25:33:9d:e4:9d:e5:a9:3e:69:69:
8c:a1:c3:86:4b:11:00:aa:01:b3:fe:c9:81:d4:68:3e:19:b4:
a8:01:23:0c:9b:df:4c:73:37:b8:37:bb:29:43:10:23:0c:b5:
6c:2f:22:ec:54:8d:0b:a5:10:05:ac:b7:fb:a9:81:85:90:6a:
3f:69:ea:4b:18:14:3a:00:55:84:b9:f2:b5:70:4b:16:c2:2e:
1f:60:45:9b:f8:ce:7a:fe:55:fb:72:34:0d:d1:74:35:7c:22:
02:89:32:36:11:41:59:7d:93:03:73:9b:c2:8f:fd:02:c0:f3:
46:90:a0:4e:3c:ed:6c:80:a8:2a:46:88:36:ad:89:6f:d1:25:
80:a8:77:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:38 2025 by rpki-client