Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfd9a47b-7a8b-46e0-bee2-5d256e0f8866.roa
File: cfd9a47b-7a8b-46e0-bee2-5d256e0f8866.roa (raw, json)
Hash identifier: BRcxdgrgax7mzgSpRQRR76hYHrpBr/AA4J/GtyhZy/8=
Subject key identifier: DD:0F:A8:D4:BA:D2:6A:62:6C:7F:F6:A3:B9:8D:79:9D:2E:0A:2C:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3354F3C0EA16CE49C87788D6EC9071DB6702A3A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfd9a47b-7a8b-46e0-bee2-5d256e0f8866.roa
Signing time: Sat 18 Oct 2025 02:00:50 +0000
ROA not before: Sat 18 Oct 2025 02:00:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:54:f3:c0:ea:16:ce:49:c8:77:88:d6:ec:90:71:db:67:02:a3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:00:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=fbe3300283162f60531eb39ae302aa9d103e2842931053b64abee2792a63ff7b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:24:94:c9:39:63:06:50:8b:6c:e3:a3:1f:
c3:ea:64:1b:76:09:19:4c:f3:46:64:bc:4b:8d:9b:
8c:15:8c:ba:87:0d:06:b3:53:97:9f:13:56:9c:f8:
79:98:35:9f:2c:f4:9a:aa:5c:c4:ab:20:9b:4a:90:
e0:af:32:be:c1:38:40:97:31:f9:bd:6b:a9:1e:d3:
64:c4:f8:e5:79:d0:ac:fe:3c:e4:11:23:e6:cd:d8:
c8:6e:e3:ee:ea:51:a6:9c:a6:70:8c:f3:65:3c:dc:
71:c4:73:59:69:ec:78:fb:a7:d9:d1:b6:78:00:d4:
41:75:3f:f8:7e:21:64:e6:87:cd:c7:3b:0e:5f:bf:
7f:95:f1:34:d7:0a:ce:e8:63:b3:c8:65:48:b9:c6:
44:ca:f7:27:ca:8d:30:2b:80:61:9e:9d:57:62:6f:
14:bd:eb:a3:f2:f7:e6:d8:16:3a:75:71:cc:fd:66:
2e:77:7f:5e:b7:16:c0:ef:0d:01:3a:b3:1b:ad:a9:
67:38:d9:10:16:5c:75:5c:2a:84:02:eb:08:57:bd:
62:26:a8:3a:96:e1:5c:d7:45:1a:fb:78:6f:c0:0c:
b4:15:8f:ab:a1:1e:d0:00:e2:14:39:72:5f:a2:4a:
32:a1:c4:ce:94:1b:cd:77:78:c8:db:7d:2f:43:42:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0F:A8:D4:BA:D2:6A:62:6C:7F:F6:A3:B9:8D:79:9D:2E:0A:2C:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfd9a47b-7a8b-46e0-bee2-5d256e0f8866.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.234.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0f:13:3f:ff:ed:77:3c:fa:85:cc:ce:c0:6a:b6:03:23:32:
45:91:23:e8:00:98:3f:6e:21:d0:39:df:45:02:4f:d8:38:b2:
f3:0e:89:c9:ca:96:1d:25:03:10:8f:ed:68:99:30:1c:c5:0b:
8b:56:41:ab:4b:02:b6:8e:dd:4a:e5:93:09:86:7c:22:64:1c:
53:3f:d3:3e:c6:a8:62:12:c9:d7:e7:4e:47:92:66:39:1f:24:
60:1b:81:73:76:29:f7:44:3c:15:e6:f8:08:4b:e0:2a:c8:77:
be:27:58:1d:da:eb:20:b2:b9:b7:be:98:6b:c5:4e:41:3c:f1:
5c:d2:de:10:41:d7:b4:dd:64:98:cb:c7:93:82:c1:cb:44:8a:
54:9f:13:76:a1:46:fb:28:bd:d6:59:01:14:bf:10:49:ba:88:
b7:dc:b4:f6:0c:62:a5:3b:c6:f4:f6:ca:dd:09:dc:92:b7:22:
49:a6:73:88:13:82:ec:97:63:e0:e4:51:26:ba:1d:88:bc:b0:
af:37:c0:e6:52:bc:fb:b6:e5:ea:5a:d8:a7:3d:ff:39:57:5e:
19:ed:86:df:3b:c3:21:da:97:9a:2b:4f:35:2d:4f:d1:c4:78:
b6:1c:f6:9b:37:bd:80:13:c2:07:cf:30:f2:1e:1e:0c:0f:14:
65:82:d0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:33 2025 by rpki-client