Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69327fb-6efc-442c-9dfc-53701e5da02c.roa
File: f69327fb-6efc-442c-9dfc-53701e5da02c.roa (raw, json)
Hash identifier: N2WinJMH7LLHWwLeKG8pngiaLoG/CqqoQoggJi5dPXc=
Subject key identifier: 7A:06:E2:32:D8:94:BF:E0:D2:88:3E:E4:98:4C:49:E7:AD:37:AF:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 508E448BDEF18E53467DC5FE8C0D2178E91EEA4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69327fb-6efc-442c-9dfc-53701e5da02c.roa
Signing time: Sat 18 Oct 2025 02:11:42 +0000
ROA not before: Sat 18 Oct 2025 02:11:42 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:8e:44:8b:de:f1:8e:53:46:7d:c5:fe:8c:0d:21:78:e9:1e:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:11:42 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4ee3dfcb5fcbddcaa1847b1f488e0a112e96b90be9a1afb0bb66cea76d4dbe79, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:02:ae:60:c0:09:e8:b2:4c:ca:1d:05:71:6e:
15:e7:7e:30:e0:45:53:24:d3:eb:a9:e4:49:5b:93:
f4:cf:b1:ae:bb:ce:33:46:c7:38:15:29:d9:38:c6:
40:48:4d:df:9e:e7:b0:f1:aa:06:da:27:37:31:4a:
7a:62:83:64:ee:57:56:2c:75:ad:2b:3d:2c:f1:60:
e9:02:0a:7a:41:fb:98:52:2e:fe:fe:98:be:e2:71:
36:c2:07:30:39:c2:cf:d2:1e:98:0a:16:9e:40:3c:
ad:6b:ab:46:0e:84:dc:8a:39:9b:e8:c7:86:db:e0:
b6:e4:4a:b8:01:bb:b4:13:35:7b:fa:6c:67:03:53:
e8:67:1c:66:ea:c5:c7:ff:18:86:ee:57:34:db:1a:
50:ed:8e:08:44:79:07:2a:39:0e:85:6e:28:cd:31:
23:81:06:8b:81:06:24:fa:56:5b:91:8d:31:40:68:
47:d1:05:cc:19:0a:2b:b9:3b:e4:04:30:77:b5:a9:
e0:2f:c3:4f:34:60:27:5b:6c:85:4e:18:96:e4:3c:
57:17:b0:e0:d3:4c:88:79:44:ee:e3:98:d7:48:a3:
4c:bb:45:35:94:52:04:90:32:09:af:1d:dd:b3:e8:
30:c0:3b:fe:f2:98:8c:01:83:9e:c3:95:7c:32:a4:
b4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:E2:32:D8:94:BF:E0:D2:88:3E:E4:98:4C:49:E7:AD:37:AF:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f69327fb-6efc-442c-9dfc-53701e5da02c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.94.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b0:36:cf:59:88:dc:04:b4:74:e1:dc:05:4d:00:af:08:f1:
45:ed:70:05:4d:f6:9c:a8:3d:98:c4:10:e0:bb:44:07:82:ad:
fc:c3:45:31:9b:3f:c6:22:83:80:48:cf:a6:84:d1:56:23:69:
aa:68:2b:c8:b5:2d:94:76:24:4d:c1:d3:78:c5:fc:72:0a:ee:
04:c0:0f:b2:b9:e1:a5:6d:11:d3:94:26:c4:67:2b:59:69:ae:
d4:4b:ca:94:b8:a8:58:3a:22:ca:a4:39:ee:63:33:c1:f3:89:
3a:7c:a6:48:cb:52:8e:db:36:e7:59:62:97:53:06:54:79:22:
6f:b3:83:59:e3:62:3f:37:7b:02:54:ce:e9:b0:36:e7:d1:92:
c4:d3:b6:89:9c:ad:d3:7e:c9:c4:5d:66:52:38:c9:ae:a5:cf:
d9:a3:a4:7c:b8:f6:ee:87:7d:5a:17:76:ba:b9:91:c6:ee:f4:
94:51:28:e5:8e:36:3c:50:9f:83:71:89:e6:7f:f1:54:8b:4d:
3b:0a:53:be:67:5b:e6:e2:32:08:ca:44:6e:4c:fc:b6:1e:4e:
73:d2:3b:11:84:81:70:8b:54:f6:81:27:7e:a1:7a:19:8c:64:
4b:28:bc:d7:9c:68:eb:3b:79:f5:6c:0b:62:15:4c:44:b8:61:
78:3c:f9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:39 2025 by rpki-client