Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99d6495-722a-4c61-ba10-bd8b39e52d93.roa
File: e99d6495-722a-4c61-ba10-bd8b39e52d93.roa (raw, json)
Hash identifier: NqEy1rYDisjhgpOd1SGv0sjxcf6Q31DW+bL+omJA7uE=
Subject key identifier: F8:1D:A6:3C:AF:2D:19:72:03:71:5C:E5:76:BA:DD:85:91:CB:88:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68074674E8F3B7135D8678890F258F7A4784A4E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99d6495-722a-4c61-ba10-bd8b39e52d93.roa
Signing time: Sat 18 Oct 2025 01:40:44 +0000
ROA not before: Sat 18 Oct 2025 01:40:44 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:07:46:74:e8:f3:b7:13:5d:86:78:89:0f:25:8f:7a:47:84:a4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:40:44 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=bf0a3b1bddd662c9e2e99968497d662ca3e4b4f66c1d05d91f7b4730510e7370, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:3b:ce:9e:af:da:37:eb:51:cc:f6:c0:93:
8c:96:44:56:f6:98:8d:34:e4:31:e7:0f:07:6f:e4:
82:02:7c:fa:6f:36:3b:38:a2:8a:42:15:fd:00:44:
66:4a:08:93:31:76:67:fe:e4:26:b9:56:77:82:18:
1b:82:e3:2a:21:0f:62:6b:b6:c3:e2:f0:20:76:0d:
d8:79:aa:46:a6:0f:1e:48:27:4f:09:33:81:5b:8f:
e4:49:f9:88:44:4e:18:20:2f:2d:a7:95:60:ab:0b:
6d:43:88:73:0c:4e:65:13:db:66:c9:48:4d:ad:3f:
4d:2a:20:4c:80:73:80:05:85:56:7d:7f:0c:70:31:
93:7d:a4:2d:2d:43:f3:13:dc:df:92:98:da:15:1b:
1e:e9:1b:a4:04:fd:bf:7a:b8:64:3b:f2:aa:b4:2e:
de:10:9e:31:e4:72:d8:a9:19:11:09:70:49:98:59:
7e:70:54:41:21:db:93:47:e0:f2:9a:f3:d5:68:85:
be:85:fd:97:95:75:dd:d9:cf:ad:bc:5e:5b:86:c2:
54:8c:87:07:d3:66:25:ee:80:1c:15:05:3e:96:74:
5b:4d:f0:1d:03:9c:d8:53:49:a8:5a:59:bd:f5:0e:
3a:c8:cd:ef:de:be:25:d3:2b:65:f0:19:ee:a2:84:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1D:A6:3C:AF:2D:19:72:03:71:5C:E5:76:BA:DD:85:91:CB:88:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e99d6495-722a-4c61-ba10-bd8b39e52d93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.138.0/24
Signature Algorithm: sha256WithRSAEncryption
23:cb:89:3a:29:2c:be:70:a2:85:f3:9c:c1:58:cf:6a:db:58:
11:d1:88:97:42:10:6e:e6:43:05:18:9b:48:24:cc:be:22:1f:
f6:20:00:87:e7:7e:79:6b:83:e7:6d:1f:9e:13:90:ba:87:e6:
e7:a9:9f:92:a4:85:51:6c:a9:65:bf:89:72:f1:04:b1:23:97:
0f:74:1d:b3:f5:c7:2a:49:dc:e1:b8:ff:e1:ab:d8:1e:9b:34:
24:c4:db:90:13:fb:ad:b0:c5:3c:0c:38:35:11:fe:0a:8b:55:
79:e9:7d:a2:8d:97:d5:fc:59:14:42:1f:cf:69:ba:bd:c7:96:
12:58:5e:cb:a3:90:3c:55:07:bd:0f:bd:99:53:d5:36:e3:c5:
5e:df:98:a0:06:fd:55:9e:bc:76:04:4d:8d:3c:12:49:13:d5:
36:b0:98:52:6f:75:28:77:ab:44:f0:a6:ac:7a:96:c5:a1:26:
fd:e6:41:3f:8c:8c:06:89:71:ff:97:41:cf:09:ff:1a:9b:f7:
e1:ff:ce:4e:0a:f9:25:0b:32:d3:62:14:d0:79:6e:2c:04:76:
cd:d6:8a:a1:2e:e2:5c:76:fe:c0:04:8e:b7:79:83:36:c2:20:
38:04:69:14:bd:9f:f1:61:a2:ae:25:a6:68:99:5c:d6:2b:3f:
13:c0:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:27 2025 by rpki-client