Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c03cd1b8-c280-4089-9d8d-42851658ec5a.roa
File: c03cd1b8-c280-4089-9d8d-42851658ec5a.roa (raw, json)
Hash identifier: 8zUQYZeDwpg+yycTjAvBGmZEzSwyn+sKeCpPSM9VfKU=
Subject key identifier: 00:68:31:0B:D7:B6:16:45:DD:35:58:A5:DE:11:AA:61:E6:34:69:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A0EC0A588CD48E3D184AA32A83E93AE191CE9AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c03cd1b8-c280-4089-9d8d-42851658ec5a.roa
Signing time: Sat 18 Oct 2025 00:41:50 +0000
ROA not before: Sat 18 Oct 2025 00:41:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0e:c0:a5:88:cd:48:e3:d1:84:aa:32:a8:3e:93:ae:19:1c:e9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=a29a70e1de1c36beafc721415497da352e0045442da05b95cd3bf07605817a3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:bc:59:23:9b:1f:45:18:cb:c8:19:fa:f2:
23:79:c9:55:1f:46:62:a5:b3:9e:f4:e4:48:71:f5:
e7:0b:1d:ff:5f:ec:f0:90:71:61:aa:7f:5b:9d:38:
57:a5:b1:8e:e8:07:59:4f:5a:d6:9c:13:d9:c3:8d:
0e:a7:fc:a3:ca:1f:80:e5:76:4d:ef:73:eb:85:72:
ee:06:73:73:24:cd:9e:04:90:f1:06:35:1a:4b:c5:
b6:0f:32:08:6b:b3:f6:e5:f7:a0:cc:4c:70:39:3f:
56:ef:46:e2:cd:3c:be:2c:d9:65:f4:a5:06:5b:43:
dc:67:65:89:51:4a:a6:8d:a4:f4:0a:29:5b:24:f4:
fb:6d:1d:bc:39:12:1f:c7:0f:3a:1a:4b:86:2e:57:
85:a3:95:ee:21:d1:6e:72:e6:a2:d9:3c:1d:14:73:
e6:5c:9d:59:05:12:92:e0:b2:ea:17:c3:a1:b5:dd:
6d:08:5b:47:58:df:04:77:d7:96:85:04:29:65:8e:
f3:e6:cc:d0:ec:9d:f0:4d:8b:69:70:5a:73:3c:5c:
3a:2e:06:5e:a3:23:91:ca:83:19:5c:53:20:ff:f8:
b1:46:b0:d8:e6:63:3c:7f:29:d1:c4:2e:56:5b:9d:
71:97:c6:68:2b:f8:13:a3:a0:9f:a6:ac:97:42:28:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:68:31:0B:D7:B6:16:45:DD:35:58:A5:DE:11:AA:61:E6:34:69:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c03cd1b8-c280-4089-9d8d-42851658ec5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.77.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cf:67:a1:1c:a3:e6:42:2f:65:59:e4:6d:59:9a:13:49:5b:
84:e7:2a:62:3a:46:a2:dd:f2:eb:32:d7:d3:35:8e:c5:ff:24:
1b:7e:77:6b:22:18:22:4b:e1:dc:96:f3:a7:d1:ff:e6:65:cb:
9c:42:91:80:70:2c:af:9d:56:fc:69:71:0f:19:11:73:f2:29:
fd:af:62:77:54:dd:82:96:ce:8f:50:6f:b5:7f:6b:22:12:c0:
6b:49:09:63:79:59:56:2f:64:79:0a:e2:36:90:c9:e6:bc:06:
52:c3:76:a4:fe:ef:56:77:0b:8a:cd:29:e5:19:be:2f:0e:bf:
ab:c7:5e:69:c6:2a:ba:78:c0:6c:f8:c4:23:d8:5b:42:82:b1:
0a:a6:17:24:71:a3:19:d5:08:55:52:7d:f8:0c:7c:a8:ac:7c:
f6:55:5c:fa:09:62:70:c3:53:c3:93:cf:46:8f:43:ba:76:d4:
26:70:a2:2b:72:dd:c5:2c:e8:9d:85:5d:e0:0a:82:0e:21:93:
d4:6d:dd:dd:72:d1:38:bd:4e:98:69:30:57:1c:40:69:e2:e2:
45:ec:1d:94:af:25:58:ac:bc:aa:77:57:e8:f7:a5:23:ae:9d:
1c:c8:ef:93:47:1b:58:da:77:c0:9c:d8:54:1d:2f:bb:b5:fb:
e3:e7:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:09 2025 by rpki-client