Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea765ad8-9801-4066-beba-5526e63012ea.roa
File: ea765ad8-9801-4066-beba-5526e63012ea.roa (raw, json)
Hash identifier: lw2O72iGWzOt7Un+TdenaGWcCGr4x/4rqt57KwzEA38=
Subject key identifier: BB:37:2F:9F:D4:74:21:0F:E0:63:68:9C:5E:DB:BE:5F:0C:96:3F:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70575FBEEADCAA3CD0FDBE119E862A1C9AEEF065
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea765ad8-9801-4066-beba-5526e63012ea.roa
Signing time: Sat 18 Oct 2025 00:41:10 +0000
ROA not before: Sat 18 Oct 2025 00:41:10 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:57:5f:be:ea:dc:aa:3c:d0:fd:be:11:9e:86:2a:1c:9a:ee:f0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:10 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=0655a21d9f714c59fba3408aee9812b00d39b0c11274217768f59c9b5d1590aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:7a:30:2b:f2:f5:af:dc:69:3e:4e:48:59:
77:bc:26:a4:eb:02:a0:d4:63:6d:33:2f:cf:82:9a:
1f:2e:7b:c6:a2:ff:f9:64:56:c2:5a:ee:fb:9d:1d:
3c:4a:cf:c0:96:98:6e:ab:b0:84:4e:56:61:55:38:
f8:8d:58:e3:90:8e:1a:58:19:8a:cc:e9:e9:f9:dc:
fc:9f:4e:a5:f9:99:dd:09:ab:a5:9e:ba:2a:f6:97:
53:75:08:96:4b:39:89:1e:19:62:9d:cf:69:74:96:
4e:63:92:15:02:75:f8:2b:99:36:95:ca:f7:c7:50:
2c:46:4d:3b:a2:d9:b7:37:2b:af:4b:b3:c8:06:19:
66:fb:b6:76:6c:bf:4a:b7:c6:63:ae:d1:e3:0f:08:
38:16:48:05:51:16:5b:1c:db:c0:93:28:a9:72:8a:
e7:66:ab:09:97:7d:d9:e2:8f:5f:3b:35:69:62:45:
7b:29:35:cf:7e:bf:92:3a:f5:b1:fc:58:b9:9d:cd:
a8:33:25:14:e2:bb:88:c4:c1:d3:ab:a4:eb:c8:07:
93:4d:d3:9d:4b:50:a1:a3:b1:d0:83:47:b6:f6:a6:
5c:cb:02:d6:f6:bf:a7:b6:61:fc:73:4f:8b:c9:f5:
35:45:32:51:c5:d0:86:bf:77:23:4b:8e:ca:5f:78:
a6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:37:2F:9F:D4:74:21:0F:E0:63:68:9C:5E:DB:BE:5F:0C:96:3F:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea765ad8-9801-4066-beba-5526e63012ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.40.0/24
Signature Algorithm: sha256WithRSAEncryption
32:bb:39:8e:33:9f:db:c6:13:e4:a5:9e:46:d0:37:74:1f:c3:
d2:13:f8:a8:a7:a5:7f:9a:aa:f8:92:b4:e4:47:6c:65:d0:1c:
24:df:68:a2:da:6b:49:d1:46:55:ed:64:3f:c6:b3:ac:cc:26:
39:0b:ed:5f:56:6f:48:27:23:23:51:5a:2b:52:46:cd:e6:2f:
6b:08:62:57:27:c8:8b:0c:3f:80:b9:d4:7d:d2:fe:83:c5:7c:
bd:f7:b3:f2:7b:d4:54:d1:56:e1:e0:0a:f5:a3:2b:90:e3:ef:
28:cf:0f:a7:94:7b:ad:bd:33:3e:ef:2d:6d:4c:41:c7:54:7d:
a7:79:08:f8:82:1e:3e:28:9c:42:22:87:c7:95:6d:46:34:06:
a7:5a:de:b5:eb:9e:72:e0:b2:f8:99:d7:b8:13:57:90:ec:d7:
43:1f:71:63:52:a7:7c:27:76:99:71:4a:3b:21:8d:0d:50:ed:
bc:1d:11:cd:77:9f:c3:84:ca:46:29:8a:58:b6:da:ae:4d:b6:
db:e1:f8:86:9c:4e:90:8d:8a:a2:62:b0:99:9a:b8:9a:d6:6d:
19:c4:ee:16:f2:36:4d:77:46:6d:7f:4a:5b:90:47:26:5f:1d:
29:1a:24:f0:ea:31:61:fe:3e:46:d3:b4:07:fe:71:12:81:84:
dd:3c:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:35 2025 by rpki-client