Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f35a2e-8935-41dc-8261-e1c51c7f632d.roa
File: d1f35a2e-8935-41dc-8261-e1c51c7f632d.roa (raw, json)
Hash identifier: xDmB8ADmiBXADLxtigdGnKiZc2sqX5cr9royHphWoLM=
Subject key identifier: 2D:7B:40:F2:97:10:85:56:CC:C0:F8:67:7A:46:D2:E3:11:7F:C5:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C37E47F0AC9EED06A3609859793AE66135CD155
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f35a2e-8935-41dc-8261-e1c51c7f632d.roa
Signing time: Sat 18 Oct 2025 01:41:22 +0000
ROA not before: Sat 18 Oct 2025 01:41:22 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:37:e4:7f:0a:c9:ee:d0:6a:36:09:85:97:93:ae:66:13:5c:d1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:41:22 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=dd5173f4f1964642c67346905b982bea580afe62164629b68588eb2266fb0e47, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:43:f5:81:d3:61:83:7e:ed:fd:d0:52:6d:d8:
ed:6d:c1:92:30:a4:93:23:87:46:9f:e9:6f:50:6c:
3a:26:9a:35:7a:d6:69:16:70:dd:1d:df:9c:49:36:
99:74:41:16:f0:29:6f:2f:8f:1a:94:91:85:3b:b8:
71:6d:f8:6f:ba:5c:68:b8:9e:9b:fa:87:59:e6:9b:
fb:d0:8d:9c:d1:66:46:3d:11:89:14:5b:93:e1:9f:
c6:87:e0:91:98:3c:60:47:66:98:83:8b:17:d6:30:
94:b6:82:ef:21:fc:5d:cd:fe:ae:34:95:a5:9c:c2:
6c:a1:a9:db:0a:56:3e:3d:77:02:4c:a1:dd:04:0e:
1a:ef:1d:fe:6b:b7:37:bb:4f:45:6c:66:5d:bf:10:
7a:57:66:37:cb:23:3a:c6:43:df:8f:dc:54:cc:6c:
cc:c4:51:9c:c8:0f:bb:1f:67:a7:cd:57:4c:16:9b:
db:35:a2:9f:fe:bf:b5:07:f0:ba:d8:5d:5f:64:90:
19:da:c7:65:b0:91:0c:9d:b6:87:b7:93:75:8c:fe:
d4:9f:d6:9a:b1:1d:8d:65:42:12:98:f1:1e:c7:a2:
6d:e4:d7:a8:ea:2f:75:fe:e4:11:b9:4a:27:20:0a:
c4:a1:a9:74:cc:94:7a:d8:8a:a3:24:ca:48:ed:65:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:40:F2:97:10:85:56:CC:C0:F8:67:7A:46:D2:E3:11:7F:C5:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1f35a2e-8935-41dc-8261-e1c51c7f632d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.245.0/24
Signature Algorithm: sha256WithRSAEncryption
12:56:54:9f:cd:58:86:e9:d9:6e:12:ce:9c:42:3a:05:58:e2:
99:6d:d2:96:f4:e7:cb:c4:1d:c8:3e:d6:a7:70:e8:47:0c:2f:
88:87:51:39:c2:83:9b:5f:95:bb:db:7a:3c:f4:6c:ec:1e:a5:
88:e1:c2:45:e0:07:23:e7:ff:46:1e:22:1b:8b:0c:54:c1:90:
08:d0:24:73:51:9e:62:57:08:27:3b:6a:6c:10:2f:2c:e8:2d:
6a:f9:63:d7:15:be:9e:ad:b1:cb:3b:d9:27:e5:43:b8:cb:fb:
30:38:52:f3:0c:fc:b7:aa:b8:14:71:df:c1:00:cb:6d:f1:f9:
84:e6:90:56:c5:40:bf:10:b9:b7:df:83:fc:57:66:12:2c:c9:
bd:45:4c:98:18:4a:94:d1:6b:1f:15:f6:40:7b:c1:50:38:e1:
56:6b:18:47:ca:54:40:7a:92:8f:5a:cf:ca:cd:17:f8:ad:75:
97:ef:4e:34:f6:f5:2f:64:fb:af:99:7b:af:67:fe:79:2f:b1:
b4:65:70:b8:e2:59:52:3c:77:bb:36:03:1b:a9:a9:b2:69:87:
70:eb:f5:34:48:19:c1:28:8f:55:67:89:22:20:01:d4:6e:e5:
27:e1:94:38:e2:8d:83:98:86:9a:68:a6:af:4a:8e:a3:42:a5:
1d:bc:3a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:03 2025 by rpki-client