Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2e86ee4-434c-4f5d-964c-6c0fa30f45dd.roa
File: f2e86ee4-434c-4f5d-964c-6c0fa30f45dd.roa (raw, json)
Hash identifier: LWSrShtUTaNXMDwgOAhnMRmKe0tPvETN61lMh9oFr0w=
Subject key identifier: 1A:D0:A6:B2:EB:DD:D0:CC:0D:E0:CC:E5:AB:70:A6:93:7F:64:13:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D0E8404D32A1D93687898FE80BDD81A72699F3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2e86ee4-434c-4f5d-964c-6c0fa30f45dd.roa
Signing time: Sat 18 Oct 2025 04:40:51 +0000
ROA not before: Sat 18 Oct 2025 04:40:51 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:0e:84:04:d3:2a:1d:93:68:78:98:fe:80:bd:d8:1a:72:69:9f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:40:51 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=930b10e932e00ab43aded6ce9fb4753686bdf869fa5be09ff78201f021df5691, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:90:98:55:7e:44:06:51:c6:64:fc:83:07:
e5:70:4e:a1:e6:93:78:76:f6:21:6e:6b:40:41:27:
ef:e7:63:3e:d3:67:ca:e4:05:12:7b:77:a2:45:20:
64:7f:9a:ae:e4:0a:6e:72:ed:87:7d:b3:9c:7f:52:
69:95:32:05:92:29:76:4d:9d:53:c5:72:3e:5b:3b:
24:74:c0:db:c0:ec:d7:0e:bf:8c:01:4e:e3:b1:35:
fa:69:46:9f:61:ca:4d:d0:69:55:4c:63:79:b8:42:
08:e7:11:12:22:9f:ef:7a:eb:72:16:24:b6:71:16:
bf:26:8c:a6:7b:3d:9d:0d:41:15:16:57:d0:cc:41:
58:03:b5:e6:25:2e:90:be:ee:b7:2f:ae:fc:62:cb:
6d:20:9f:64:31:5c:3e:23:55:dc:ef:a4:c7:b8:8b:
a4:27:c0:3d:42:32:ab:49:6d:18:c0:14:61:5f:f4:
c7:3c:2a:1d:76:7d:b5:53:cf:33:0f:fe:77:c4:39:
6b:37:58:27:cf:14:28:3b:55:f0:70:7d:a1:3d:50:
b0:55:cc:5d:c3:a3:18:34:43:99:b6:87:83:d8:8c:
d5:86:1c:41:95:19:11:cb:b5:73:49:12:b4:01:73:
ff:de:e3:97:69:69:77:ec:74:70:cf:03:34:88:f1:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D0:A6:B2:EB:DD:D0:CC:0D:E0:CC:E5:AB:70:A6:93:7F:64:13:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2e86ee4-434c-4f5d-964c-6c0fa30f45dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:f5:66:21:3d:f5:38:4f:6c:34:b0:51:0c:71:25:8e:b0:5b:
c3:6d:b3:f1:25:68:ab:86:8e:2f:79:70:dc:2c:6b:9c:b0:2d:
15:e6:a2:b0:19:94:11:65:90:bf:55:fb:57:00:9b:36:46:b2:
b6:b7:60:02:42:43:d2:d3:b9:b9:b1:f9:29:1b:54:93:ee:36:
a6:c4:22:7f:ae:07:dc:79:1d:d2:7b:27:59:59:28:54:54:7e:
c0:3c:74:07:39:81:c3:d8:77:bd:5b:1f:59:4e:00:42:30:bb:
af:ec:c8:ee:3a:53:3c:10:22:71:66:ce:1e:c4:4e:c7:41:a5:
e4:9c:7e:43:ab:63:f5:a8:a4:25:53:f0:de:04:9f:4d:59:81:
81:ef:42:89:de:16:bd:66:e4:72:31:fd:4f:85:88:a0:7c:a4:
df:d8:57:e0:49:51:27:1c:33:01:cc:8a:a9:b1:79:85:d8:2b:
18:a3:d7:0c:81:9d:4d:ec:e7:ed:b1:3e:f9:9e:d5:a0:32:0c:
0f:2d:8c:67:ae:6b:89:c0:c4:7b:8c:c2:5f:48:6c:3c:9c:60:
c9:6e:be:0c:68:34:84:3a:0c:55:63:ac:11:59:85:93:e0:9e:
f7:e9:69:b8:9a:06:85:01:13:41:ed:6b:d4:aa:71:9c:2f:8b:
f0:40:e4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:50 2025 by rpki-client