Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4d19dc1-3c30-45c3-b84e-aace16e60f1e.roa
File: b4d19dc1-3c30-45c3-b84e-aace16e60f1e.roa (raw, json)
Hash identifier: If/Q9xKTcdbx/GFu5FK0619W3BybVjNGhJbq51JdHKY=
Subject key identifier: EE:D7:B6:1F:1B:22:DD:AF:C2:F9:DE:E7:2E:8C:9D:EF:1B:27:78:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B1584285D643FF8439370CB176AD323124DBDE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4d19dc1-3c30-45c3-b84e-aace16e60f1e.roa
Signing time: Sat 18 Oct 2025 03:21:01 +0000
ROA not before: Sat 18 Oct 2025 03:21:01 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:15:84:28:5d:64:3f:f8:43:93:70:cb:17:6a:d3:23:12:4d:bd:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:21:01 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=675b1cc8d32aa51f34afb2d14b27e17d839c50d39fb88b8eab187356484d870d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:40:82:5d:26:ae:75:87:12:55:cd:01:c8:
f9:71:fe:ff:d3:d7:b2:f7:99:70:94:71:3e:cf:7b:
bd:02:c6:18:0c:84:32:cb:c5:9c:51:c9:c1:65:31:
d2:0b:07:4a:a8:93:43:2b:a3:c5:b2:2b:8a:56:d0:
12:6e:6d:a0:01:a0:84:79:4c:dc:8d:be:7a:2a:86:
f1:a8:2f:51:b4:26:3d:e8:6a:08:a1:a9:c5:a7:76:
b8:5e:8f:57:78:dc:69:a7:c1:16:da:9e:fb:09:52:
3a:5c:fd:9f:c6:12:d6:4e:4f:ab:dd:2a:77:4f:45:
56:a4:6f:41:83:bb:56:8e:58:6b:b0:53:7a:a9:ad:
b1:2d:27:31:01:f6:bb:ec:ef:a2:17:06:4c:41:36:
eb:9a:55:d3:31:88:3a:22:dc:d3:3a:14:f2:b2:c4:
2f:ab:60:a7:da:26:5f:ec:7c:35:29:f1:05:7b:ef:
83:1b:51:ce:34:de:25:78:5a:b1:fe:e1:44:a1:a2:
76:00:69:85:8c:bb:a6:ce:13:9e:d5:58:60:5b:02:
44:be:1a:af:c9:07:59:4a:2e:43:25:e5:44:bc:5d:
25:dc:24:a1:23:e0:68:e0:2b:e4:78:9a:1b:a8:32:
26:41:23:73:90:80:69:72:64:9b:51:6f:d7:85:0c:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D7:B6:1F:1B:22:DD:AF:C2:F9:DE:E7:2E:8C:9D:EF:1B:27:78:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4d19dc1-3c30-45c3-b84e-aace16e60f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c8:f9:6a:6c:cb:ce:50:f0:8f:52:c2:17:75:ce:35:bc:31:
52:b5:bd:e6:29:cc:1a:0c:d3:ba:e0:2e:55:78:65:55:9f:10:
7d:54:94:8d:25:69:b9:e3:9c:1e:7d:36:86:e8:2b:ef:6f:43:
76:45:b2:1a:7f:e6:07:a3:2f:1a:b0:b9:e3:8f:d1:25:42:ba:
f4:44:6a:cd:ac:41:d4:8e:35:15:b2:b2:63:01:23:5b:c7:2f:
e9:9a:47:87:c2:3d:14:80:a4:80:0e:e9:6e:70:be:f8:a4:ac:
4f:38:c3:28:07:59:13:9d:d5:24:60:8c:15:22:cf:a8:76:3e:
5e:e6:50:04:0e:fa:0c:3f:e1:01:42:d1:9f:80:7c:dc:6a:6b:
7f:63:d0:41:4a:d5:53:f1:9d:76:b2:27:e6:3e:c2:90:5b:3c:
bf:21:07:0a:6c:f1:a1:28:3c:c9:aa:be:e5:9c:b4:fe:b3:b6:
f1:c1:7a:6d:71:a2:d0:40:1f:07:6e:e4:b7:51:d5:34:17:d4:
e4:06:fc:2a:55:2b:e6:01:c4:47:7c:a3:ce:2d:f2:74:d6:c7:
fe:d2:03:d0:b0:78:e7:e7:1e:48:ac:99:c0:4d:56:80:f3:d4:
40:5c:a5:2c:36:47:7b:dc:f1:81:7d:4f:39:98:7d:15:bf:5b:
42:70:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:59 2025 by rpki-client