Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8422e4-a055-466f-b6b6-0dcdbc4a14c3.roa
File: ca8422e4-a055-466f-b6b6-0dcdbc4a14c3.roa (raw, json)
Hash identifier: fapd7jbUhKQuLc0TtyhCIXuMnBvvuDHzW2WpPHd6sHc=
Subject key identifier: FF:59:51:6E:18:EA:55:2F:DF:86:46:BB:C2:63:9B:2A:63:B8:4E:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5966A90E8A6574E20E8A7A9E0A45AD67B8F72164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8422e4-a055-466f-b6b6-0dcdbc4a14c3.roa
Signing time: Sat 18 Oct 2025 02:10:12 +0000
ROA not before: Sat 18 Oct 2025 02:10:12 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:66:a9:0e:8a:65:74:e2:0e:8a:7a:9e:0a:45:ad:67:b8:f7:21:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:10:12 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=1fa859b93e28b6354d6fccc8de586935da61105e525505d4f62f27827423349d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:44:34:29:9d:fb:15:3d:ea:30:4f:db:ab:
1b:12:39:ba:76:00:75:57:90:5a:15:06:98:44:55:
69:d4:75:a4:28:90:1f:ba:bc:38:f0:9e:1e:f9:a2:
3d:bc:b4:e9:ec:16:1c:fe:55:86:34:37:4a:8c:cf:
d0:ca:14:db:db:50:d1:b9:1f:25:a4:7b:fc:67:d4:
3a:73:a1:5e:7d:4d:da:77:ac:38:13:c7:d8:2c:52:
81:e2:fd:65:01:56:b8:99:a9:60:99:03:b4:a5:ea:
ae:6c:b1:5e:ec:8e:5e:ab:2f:57:43:35:ad:31:6e:
59:18:78:a1:b7:36:c4:d4:d8:dc:6b:4e:23:ec:20:
11:3a:9f:6a:15:cb:c2:27:b8:88:9e:4d:3e:27:9e:
a0:b7:96:b7:28:60:62:8b:7e:60:1a:87:ac:44:1b:
93:91:c7:b7:0e:13:aa:9e:ec:3e:0c:3f:1c:69:ad:
1f:52:3b:39:61:37:e3:3c:aa:4b:d7:49:34:28:50:
09:f6:6d:cf:69:58:0a:ee:30:09:b7:bb:90:ac:21:
a2:f8:7d:3d:7e:63:92:62:4d:a5:45:40:11:4b:dc:
eb:d4:8a:c6:3e:39:dc:77:0e:e4:75:04:78:16:c7:
e4:39:e6:18:b9:5c:98:4e:1c:d3:76:18:18:bd:49:
69:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:51:6E:18:EA:55:2F:DF:86:46:BB:C2:63:9B:2A:63:B8:4E:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca8422e4-a055-466f-b6b6-0dcdbc4a14c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e4:a1:70:41:4a:72:b5:89:28:6c:53:f3:00:11:33:d3:be:
0a:5c:61:06:4a:de:59:9d:0f:3a:59:b5:87:6d:1b:35:0b:61:
52:42:07:02:48:6c:0d:62:87:8a:09:b5:5b:a3:1d:67:01:ae:
00:8a:41:6b:77:10:82:46:b7:9f:b0:58:61:54:b0:e3:79:a2:
fa:03:62:28:08:51:bf:86:05:bd:76:a8:13:21:7c:61:28:cc:
7d:fc:89:78:c2:a2:f0:31:c3:3b:8b:f9:bb:e4:4f:ea:a8:55:
89:a9:3c:1f:05:de:58:dc:26:d0:36:0d:ef:9c:0d:0f:c7:bd:
ae:cf:40:a4:b5:a1:10:55:5b:f8:31:d8:ac:e1:57:53:a1:80:
e6:d6:4a:94:db:88:84:da:5f:fc:6e:05:ed:08:52:79:2a:a2:
42:2d:c1:ba:66:b1:13:86:ad:57:65:f9:e1:e8:05:ac:35:12:
4f:18:3c:f1:f1:39:af:3c:51:fb:0a:13:b0:f3:91:64:a6:eb:
43:a0:e9:23:e0:d1:c6:07:04:58:85:d2:93:08:55:82:cd:29:
ce:fd:85:b4:cc:ab:32:fb:ea:8e:9e:8c:92:d1:6e:0e:16:ff:
bf:52:ac:10:62:cc:5c:eb:48:94:81:74:39:67:f0:a5:93:8e:
1a:cf:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:42 2025 by rpki-client