Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5b22cb0-34b4-4c82-9b0f-5805c4e86b3e.roa
File: e5b22cb0-34b4-4c82-9b0f-5805c4e86b3e.roa (raw, json)
Hash identifier: 3r7XHZVOpaLuq0ZWPsXE/1yI9udb0fgy1KhpN8NXFBI=
Subject key identifier: 1B:CD:01:C9:A4:D6:FC:AF:22:A3:76:43:86:58:E7:4B:23:1E:A1:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69902A954BB42B4C3A9A79B979C82AD1455A716A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5b22cb0-34b4-4c82-9b0f-5805c4e86b3e.roa
Signing time: Sat 18 Oct 2025 01:20:55 +0000
ROA not before: Sat 18 Oct 2025 01:20:55 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:90:2a:95:4b:b4:2b:4c:3a:9a:79:b9:79:c8:2a:d1:45:5a:71:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:20:55 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=816c56167add9775d9ce20e1ec80391b07b041f5edf5ab8cdaf1cd75fd91d347, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0a:ed:ef:e3:3d:aa:31:1e:32:92:d0:2b:39:
86:3b:52:c1:24:f0:d4:6b:31:7d:9c:22:4e:a1:6f:
1f:4a:cc:17:ab:e5:42:42:81:26:3c:01:83:c7:94:
f0:f5:8e:7f:14:1c:5a:10:ec:72:31:de:16:2a:6b:
c7:ba:c3:cd:23:64:ee:e9:0b:69:16:a0:2f:f0:66:
44:a4:5d:bd:74:4f:43:52:9c:ac:d8:83:4f:4c:d4:
83:c0:95:24:69:ac:12:1c:92:84:d2:bd:1c:55:01:
cd:0c:52:ce:30:2a:f1:43:46:fa:9b:5a:7f:0a:64:
d5:7f:f0:c8:02:70:e5:f2:53:94:aa:4c:0a:3a:de:
4a:bc:87:90:59:db:e8:2f:cc:15:04:bc:b1:09:4a:
11:a6:07:a3:76:34:0e:9f:ec:6f:67:ad:28:37:67:
e6:2d:94:4d:5b:57:cf:59:a5:07:22:2e:a4:23:86:
85:9b:ba:d8:e4:47:1e:ee:42:1f:80:99:7c:23:46:
20:59:c4:e2:fe:75:ff:3d:ea:d6:ee:83:b1:56:c3:
dc:3f:b0:ab:bb:10:30:61:cd:e6:db:b1:1d:95:c4:
ee:39:6f:5d:48:3b:0c:02:cd:a8:7e:6a:1c:6e:93:
fa:e8:4a:56:ad:53:b0:e2:54:f6:7e:f3:7f:6b:c1:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CD:01:C9:A4:D6:FC:AF:22:A3:76:43:86:58:E7:4B:23:1E:A1:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e5b22cb0-34b4-4c82-9b0f-5805c4e86b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:56:1a:b3:58:ee:00:71:47:92:bd:fd:f5:5a:0a:af:5b:dc:
6a:2b:69:50:e6:fc:1d:f9:85:30:95:3a:1a:64:b0:5f:93:0e:
d1:d1:f6:01:d0:83:a3:0d:ec:e7:ab:21:f7:79:71:7b:71:fe:
18:2b:22:1d:ca:00:51:21:38:d5:bb:05:14:b3:98:3f:90:41:
bb:03:29:cb:dc:ce:83:7f:d3:b5:53:c8:2e:7f:71:8d:ff:fc:
b3:c0:cd:c7:5c:27:6d:23:ee:84:20:e4:5a:c5:e4:da:d4:11:
e8:a9:87:f7:aa:57:6e:01:12:bb:30:93:3c:e0:35:93:04:0e:
b5:84:b8:d3:53:e3:fc:67:49:75:dd:32:e3:99:35:1e:ec:f2:
e7:5d:7d:73:2a:4d:fe:b2:85:11:cd:bd:dd:e9:9c:bc:a1:4b:
a6:18:ee:dd:08:e5:65:ef:bd:b0:2a:51:0e:e9:61:45:c6:77:
a5:21:7a:11:71:98:6e:a6:df:a8:16:1c:01:c6:52:37:4d:fd:
c0:54:37:ea:6f:5b:14:c7:24:d5:a3:20:61:44:87:7b:e6:5f:
6f:a6:a5:db:37:de:a9:05:9b:ac:d9:fa:cb:82:ff:f2:23:cf:
89:4b:45:a6:b6:fd:17:a4:81:01:3e:fd:d1:61:8d:9d:33:03:
d2:a8:d8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:25 2025 by rpki-client