Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d032a1a5-7f61-428b-b836-2a005bac2389.roa
File: d032a1a5-7f61-428b-b836-2a005bac2389.roa (raw, json)
Hash identifier: eRdTHEsFGQ4uz0HU3oD79DOz9OJYotnEnqWRPbmVKpE=
Subject key identifier: 1A:2F:B7:86:8B:19:A6:80:38:1A:41:42:3F:08:3B:AE:F7:E9:17:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B15CAA9FA50014562A17861BFCF31ABBF07DB85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d032a1a5-7f61-428b-b836-2a005bac2389.roa
Signing time: Sat 18 Oct 2025 03:31:57 +0000
ROA not before: Sat 18 Oct 2025 03:31:57 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.72.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:15:ca:a9:fa:50:01:45:62:a1:78:61:bf:cf:31:ab:bf:07:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:31:57 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=2cc355d9a98932f1b99d0f612b2a09d6d11ab48e7f967637881ebfddbca9fbeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:47:0b:97:c0:c3:e4:3a:05:09:63:e5:dd:
15:ab:2e:71:9a:ad:51:73:cf:55:3d:60:b3:bd:b4:
f3:17:13:14:f3:90:bd:aa:2a:ec:d0:3f:d3:1d:74:
21:5d:06:dc:c8:de:c7:37:95:25:9a:81:2f:22:c0:
68:81:ba:91:8d:70:56:72:86:13:d0:02:e9:28:5b:
05:7a:f5:6b:7a:7d:6b:e1:de:26:a9:ee:a1:45:5f:
d3:ca:e4:71:31:ad:fa:48:d3:5a:f3:4e:38:43:01:
4b:7c:54:20:da:b5:b8:cb:ae:9b:45:d7:6f:85:cf:
87:61:7e:25:fc:14:65:24:46:c5:f9:f3:46:62:4d:
55:43:ec:6d:0e:e4:35:2c:0d:55:8d:76:8a:69:84:
e7:d8:7d:2f:7f:b3:38:f4:0c:8c:f3:78:8d:99:5c:
a8:b0:8c:ab:40:bf:e6:7f:a3:1f:55:e6:0c:ec:03:
4b:1c:98:e9:fe:aa:ca:be:ba:a5:6d:f8:ea:b4:00:
bb:dd:09:bb:c0:6d:28:ee:2f:93:29:4f:cb:7b:4d:
18:34:f5:f0:b8:b1:01:a9:5e:14:4c:14:7c:8b:12:
3c:7f:83:6e:41:25:98:83:65:d7:eb:8b:fc:8f:37:
0a:6c:02:02:d6:f9:40:29:9d:3a:60:88:98:f5:80:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2F:B7:86:8B:19:A6:80:38:1A:41:42:3F:08:3B:AE:F7:E9:17:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d032a1a5-7f61-428b-b836-2a005bac2389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.72.0/23
Signature Algorithm: sha256WithRSAEncryption
be:38:46:57:85:1e:a9:1e:00:4c:6c:32:05:aa:27:5c:fa:e9:
38:87:a9:bb:e4:ea:0a:46:82:87:b2:58:1c:f7:08:32:f7:ea:
4f:a3:49:a5:44:43:61:12:cb:5b:e9:8b:78:e8:7b:5a:70:32:
c6:b8:5f:c2:bf:eb:6a:a5:53:0b:df:3c:de:2f:c5:cd:44:59:
c5:4a:3d:19:e9:d0:2b:1a:97:b3:b0:25:70:ee:0b:71:5c:29:
a1:46:02:87:1c:6f:8c:b3:3f:84:9e:7f:d3:21:d5:3c:a4:7f:
6c:3d:03:d6:a8:45:62:8d:f7:09:ea:90:a4:14:38:34:ac:f9:
6f:4b:b6:90:1e:f7:05:3d:ad:28:5c:62:6f:ca:87:05:aa:5c:
8f:d4:9d:85:3a:0b:73:29:0e:cd:0e:e6:5b:4a:24:42:e7:85:
3c:7c:8f:99:b9:33:64:63:4b:26:18:7e:6a:9c:b5:0f:f4:19:
62:c6:c0:ca:b6:df:17:5a:ac:65:2e:9e:fb:03:1b:2c:7d:ce:
95:0e:8c:de:e8:04:fa:53:32:a1:06:1f:8e:bf:4c:40:7b:f7:
b6:64:b1:28:cf:11:5f:9c:bb:d4:96:49:ae:0a:48:df:50:b7:
44:f6:43:15:35:2f:22:48:03:36:98:8a:78:02:51:ea:11:aa:
84:5f:7e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:46 2025 by rpki-client