Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bd9c4-1630-463c-825b-1687bb88569f.roa
File: d81bd9c4-1630-463c-825b-1687bb88569f.roa (raw, json)
Hash identifier: 0vH8ZcQcc7EzjYe6mGBUAqvcOTc0Q0n0boz5HGL0zIA=
Subject key identifier: EB:30:C0:5A:EE:C9:47:7A:75:D9:11:7D:47:8E:19:6C:5C:0E:4D:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6066C5D9B99E2DED1907F67C6904FD817EBFFCEC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bd9c4-1630-463c-825b-1687bb88569f.roa
Signing time: Sat 18 Oct 2025 01:50:53 +0000
ROA not before: Sat 18 Oct 2025 01:50:53 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:66:c5:d9:b9:9e:2d:ed:19:07:f6:7c:69:04:fd:81:7e:bf:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:50:53 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=41043c59550b369e6cf613cdaf628fbd6cab3663ce98e3b7c040ce98634cc0a5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:99:1c:b2:7e:40:ac:5f:ac:16:9a:57:85:
15:fc:a6:b1:37:bb:26:9a:87:f2:af:42:a6:bf:6e:
27:94:4c:f4:91:b1:da:c3:0d:ac:f3:6c:b7:cf:1e:
ba:c9:d6:13:8f:f1:c1:57:a2:a1:39:e7:ca:67:76:
55:2b:64:c7:9c:14:d1:13:b5:1e:b9:78:b3:08:00:
31:28:2d:b2:f7:41:2a:0d:55:4b:b3:9a:5c:cd:dc:
3c:1f:17:c8:6e:ba:89:e0:e6:28:8a:c1:4f:1b:a3:
f1:fd:f4:86:af:e9:e9:74:82:2a:d8:02:23:6a:30:
9a:16:fc:2c:d9:b6:6f:15:8e:f2:2b:e4:ac:4a:a5:
6c:5a:53:65:9d:94:93:a0:ee:8c:af:89:6c:dd:69:
26:8a:63:67:e3:c1:91:59:db:79:37:62:d1:2a:a1:
8b:0f:bf:b8:31:b3:0f:7a:75:3a:31:3b:30:aa:3f:
3e:2f:bf:1f:4e:77:ff:2d:b4:b4:a4:71:6a:98:b8:
e9:17:33:b6:af:82:10:0c:76:88:42:3d:aa:d0:d1:
8d:e1:d8:5b:95:57:c6:38:16:67:7f:bb:ae:8c:0d:
05:db:50:32:41:28:07:81:eb:a8:e8:16:75:2d:de:
4f:17:33:53:a8:91:5f:e6:88:ed:7e:d9:9d:66:4f:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:30:C0:5A:EE:C9:47:7A:75:D9:11:7D:47:8E:19:6C:5C:0E:4D:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bd9c4-1630-463c-825b-1687bb88569f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:c5:03:67:ad:2f:3b:c5:9d:76:f0:ac:1c:37:71:70:06:
78:46:3c:45:e7:89:f9:28:d3:d2:2d:a5:6d:a4:97:a7:32:81:
07:3d:ce:be:45:7b:a7:ea:d0:d8:8c:3f:d5:a5:ae:bd:13:1a:
38:de:8e:89:a9:b2:3d:b0:48:c2:e3:70:f9:ea:83:50:a4:7f:
64:08:0f:40:e1:7f:15:43:68:d0:6d:09:e6:d0:a2:f3:7c:d7:
ab:8b:4e:61:f8:57:41:67:cf:03:a8:e4:5d:d2:1e:12:36:8f:
78:a1:b4:a1:35:1b:eb:ea:28:02:d7:90:23:ab:ba:27:eb:24:
94:74:80:f2:51:b2:a8:6d:3a:a6:a8:27:cc:15:ce:3a:bc:64:
40:fa:81:68:b5:07:79:61:15:7f:dd:87:b4:6c:57:fa:c3:9e:
ca:16:38:96:c5:45:e7:88:c9:ba:98:8e:58:98:1c:7d:82:b1:
49:fe:6b:ac:54:d8:81:bc:b5:27:0a:6d:dd:d4:70:b2:93:7e:
2f:1a:31:ba:e5:f0:3f:82:09:f0:2b:62:56:21:49:53:02:6d:
a3:b5:a5:04:67:5a:ca:cb:5b:64:92:6a:66:b9:76:0e:bf:33:
07:37:db:0e:b6:6f:a7:a1:f1:3a:83:15:c6:32:2a:2b:6e:95:
6b:99:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:19 2025 by rpki-client