Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c12ff1b6-b674-49fa-8904-7b32e2f35b44.roa
File: c12ff1b6-b674-49fa-8904-7b32e2f35b44.roa (raw, json)
Hash identifier: oA1clXd8RFOUMYcGPLtXWZ1rVlllDiv+XFVP33/Sd4s=
Subject key identifier: 16:32:CC:85:16:97:73:91:4E:E2:76:98:77:64:53:95:BD:0D:93:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 788AD86A26FFA847FABCEF6D353AA03A619D39F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c12ff1b6-b674-49fa-8904-7b32e2f35b44.roa
Signing time: Sat 18 Oct 2025 02:11:39 +0000
ROA not before: Sat 18 Oct 2025 02:11:39 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:8a:d8:6a:26:ff:a8:47:fa:bc:ef:6d:35:3a:a0:3a:61:9d:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:11:39 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=6c2145ca40842b4bc543bebef00cceadfeaf432e3b2e41242c6c0c0dbe921ec6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:98:e4:a7:f5:e7:ab:fe:29:5f:67:1f:92:
ee:db:85:84:dc:29:80:49:ad:a1:23:3e:77:62:1f:
83:d9:68:33:2b:d9:5c:b7:46:6d:91:6c:4f:df:32:
de:0d:3a:cb:e9:cc:db:a9:dc:16:d1:94:a0:ee:45:
35:36:80:ab:64:74:8e:41:b9:5a:ae:d1:bd:30:60:
70:99:7e:18:cf:7e:c4:76:0a:24:a9:ba:92:60:82:
0e:4c:8b:28:bb:a7:e6:07:3c:26:52:15:a3:13:1e:
dc:ad:a2:40:12:7c:d2:c7:7b:f3:8d:1b:db:5b:07:
a7:32:f2:a0:1c:46:85:7c:14:d5:6a:b2:10:f6:fb:
75:d8:05:30:e6:cf:8b:42:1d:40:a1:bc:b0:f8:66:
5e:08:ac:f8:61:07:d1:bc:d1:89:af:bd:6b:bc:99:
22:18:3c:c4:85:a5:bc:10:28:83:33:86:52:b2:8c:
77:b6:bd:fe:76:a0:ac:36:fd:9a:e1:3f:e2:26:db:
db:90:e7:68:8d:1f:a4:97:cd:3f:3f:fd:f4:77:2d:
f3:ba:ea:73:06:67:db:be:d4:d7:ba:d1:72:f7:52:
b0:25:69:58:8a:67:ab:e5:75:7b:3b:aa:8f:7b:76:
25:ac:f9:1d:46:ec:29:65:3f:bb:e2:29:90:2a:c1:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:32:CC:85:16:97:73:91:4E:E2:76:98:77:64:53:95:BD:0D:93:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c12ff1b6-b674-49fa-8904-7b32e2f35b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.188.0/24
Signature Algorithm: sha256WithRSAEncryption
61:10:8e:00:67:48:79:13:60:5b:69:b9:ba:f3:78:a1:b2:4a:
52:f0:2f:7e:09:7a:34:a2:6c:e1:88:6e:23:5f:ad:56:b9:df:
e0:bc:b3:c8:24:d0:cc:72:cb:65:5b:c3:b4:e4:f0:27:80:6e:
3f:8e:2f:03:25:aa:ec:56:8c:12:e8:ff:05:53:e9:5b:f3:b9:
22:74:cd:b3:fa:1c:a7:b7:1e:c7:a6:16:f7:8f:f4:f3:b2:4e:
04:5b:16:c3:b5:3d:47:45:78:d9:eb:e0:79:bc:34:90:03:3c:
f4:db:04:19:38:50:5c:e9:39:04:4a:33:57:ad:9e:aa:18:1f:
2b:9e:db:18:7a:d9:bf:3f:58:d4:95:f2:d2:ac:88:c9:5c:9e:
2d:73:a9:65:18:bb:fe:bf:6e:8c:d9:75:5b:45:27:5b:00:4c:
eb:1b:ca:63:d3:fc:72:7d:95:68:aa:df:34:2e:a5:2c:a6:23:
50:fd:70:cd:ae:b6:25:76:28:35:84:70:c2:f1:92:ba:47:8f:
d1:e4:f0:b0:93:a2:9a:a9:01:02:61:b3:5f:09:8c:74:5e:41:
ee:48:dc:3f:54:20:51:3e:62:8f:87:dc:78:bf:d9:8a:b6:d8:
0f:da:5c:a9:8b:50:86:6d:e2:53:61:01:10:c7:11:32:4c:74:
9b:73:d1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:58 2025 by rpki-client