Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea5428d1-6fb6-40d2-b2bc-77179c4b511b.roa
File: ea5428d1-6fb6-40d2-b2bc-77179c4b511b.roa (raw, json)
Hash identifier: WatYqcxr+oo9icFI5kHcExptwFOHnELVfX9FBWwzi2g=
Subject key identifier: D2:F5:66:44:5B:53:78:1E:A4:3A:41:C5:CF:E5:6D:57:A7:60:F6:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 348F92EE65230EE2C70F0E3E7CABDA2FCC8B4A3E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea5428d1-6fb6-40d2-b2bc-77179c4b511b.roa
Signing time: Sat 18 Oct 2025 05:10:07 +0000
ROA not before: Sat 18 Oct 2025 05:10:07 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8f:92:ee:65:23:0e:e2:c7:0f:0e:3e:7c:ab:da:2f:cc:8b:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:10:07 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=151b0009931728fe8afe82c666a3974dec36420147d9442dae2e754cbde109f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:f9:bb:0f:fd:d0:18:06:76:8d:5d:86:e8:
b4:b4:a0:c5:f4:7d:bd:a1:af:c8:33:bc:eb:2a:29:
d7:20:e1:63:86:f5:76:16:c3:cf:46:5e:a8:28:53:
7b:85:96:29:c6:24:f4:e5:15:e1:d4:5e:b0:47:1f:
da:c2:2c:e8:35:03:81:98:57:18:54:14:2e:ac:f3:
a0:27:b9:a5:b7:d9:4e:a1:24:71:6f:2b:78:0a:fa:
8e:11:66:fd:32:8a:9d:f9:51:57:bf:f5:ee:63:3c:
7d:2d:28:71:51:a7:92:0b:08:23:77:d8:35:36:b3:
2f:ca:b4:67:67:58:08:bc:d3:02:23:a9:ac:30:d0:
95:e5:e4:66:61:fa:28:4f:c4:28:0e:d6:66:eb:84:
0c:23:12:a8:09:48:6b:07:eb:5a:4a:ee:56:2e:f7:
29:da:42:c4:a9:72:b6:7b:a4:38:14:6d:d3:eb:34:
69:64:5a:37:9b:a4:b1:38:6f:58:66:2d:75:bb:11:
d9:28:a0:6f:4a:6b:75:7f:31:b2:15:fb:4f:7f:cf:
5a:ea:ff:f2:ee:1c:cd:fc:92:dc:fe:fa:ad:b1:d5:
ea:b7:d2:70:db:54:08:5d:e6:ef:ce:ca:20:13:ca:
8a:f9:de:99:fa:6e:97:cb:3b:7a:3d:41:67:3e:62:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F5:66:44:5B:53:78:1E:A4:3A:41:C5:CF:E5:6D:57:A7:60:F6:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea5428d1-6fb6-40d2-b2bc-77179c4b511b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b8:aa:e0:8e:b7:c9:0e:83:84:4c:4b:be:3d:3e:79:2c:53:
5c:38:24:0d:08:5a:83:f1:7c:d1:e8:a5:5c:b2:dc:1b:5e:75:
4c:46:ef:1b:40:29:ea:3b:18:3a:a3:0b:0f:a8:43:5f:ee:57:
bf:4e:63:de:03:07:27:08:9c:d2:c5:6d:ea:bf:f7:dd:df:14:
3b:df:c0:6f:65:a0:98:6a:07:62:90:7c:9e:88:00:f9:9b:71:
e9:51:30:43:11:1d:21:94:4e:ff:c7:a4:a3:99:fc:7a:b1:93:
a0:20:46:4a:b4:fd:c4:6e:da:69:d9:ea:8e:1c:bf:b0:fe:40:
b7:a0:4a:57:9c:21:00:51:87:cc:d4:03:6c:32:dc:94:59:92:
1e:c8:39:ab:12:8e:80:83:5a:48:f7:a8:8f:11:2f:0d:33:d7:
33:1f:2d:8d:a2:3f:b2:4f:0f:53:70:a9:34:67:f1:f9:59:1a:
b8:e2:45:99:82:a6:34:74:43:6e:84:7d:0d:3b:57:30:2b:c9:
94:23:2f:13:e5:d0:df:f4:0e:03:fb:38:b5:29:1f:b3:20:17:
50:e7:69:32:c3:57:64:39:83:dd:8c:cc:a7:b3:81:39:16:14:
17:10:70:81:a4:20:16:90:f2:41:51:4c:0b:4d:be:cd:23:e4:
d9:c0:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:55 2025 by rpki-client