Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1718f885-e1a6-4f5d-9fbe-54c5246c4f71.roa
File: 1718f885-e1a6-4f5d-9fbe-54c5246c4f71.roa (raw, json)
Hash identifier: m/xR5emAdmbuUMlh5xWrkNZPY2Z3QFyYhXnEABBnYYo=
Subject key identifier: 0B:0B:21:70:3B:5D:D5:38:E9:6F:9E:3D:6B:29:26:02:AC:6E:38:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 9703713B4AA017F36A89244B1F1CFBDCF6488D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1718f885-e1a6-4f5d-9fbe-54c5246c4f71.roa
Signing time: Sat 18 Oct 2025 05:21:22 +0000
ROA not before: Sat 18 Oct 2025 05:21:22 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
97:03:71:3b:4a:a0:17:f3:6a:89:24:4b:1f:1c:fb:dc:f6:48:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:21:22 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=17f015280685c66d43da34fcdd1f5c3f7e288373ab2874441137cb658de4393b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:c4:93:67:1d:31:37:c8:87:7c:57:d8:11:
05:8b:68:8d:e9:9e:b6:fd:65:48:84:8b:ae:67:9a:
fd:bd:ba:0e:6e:d7:27:86:f2:c2:00:47:7e:87:50:
e6:25:a1:48:b2:a0:2f:dc:c3:85:bf:40:6c:92:5f:
74:01:7b:9a:6d:19:04:f1:b4:f9:ac:b8:bb:1f:42:
bc:92:56:0f:db:36:f5:48:82:e1:7e:68:4c:03:bc:
11:a9:34:5e:e0:90:d1:4f:e7:ae:75:59:0a:18:24:
83:b0:2b:b9:e0:8d:18:f7:9e:9e:d0:d9:99:e4:4e:
f8:61:a6:00:4a:6a:17:7f:2c:ef:4c:59:b0:1b:ac:
e5:60:05:1e:a5:79:3d:a1:83:36:a9:3b:cd:7e:bc:
01:bf:ed:a4:bc:aa:9b:d5:84:a2:78:29:96:49:ff:
3b:8a:07:b7:8d:4f:14:32:a4:3f:a1:0a:2b:83:d5:
ec:48:7f:7f:d1:bd:a9:c6:71:73:10:2b:d8:ff:be:
3d:ab:07:d7:90:3b:7b:67:e4:2e:4e:1d:fa:a4:7a:
b6:3d:d0:4d:b7:b4:02:fd:f9:42:8c:63:82:2d:8e:
e2:01:1a:f3:57:ba:df:20:4e:db:31:74:70:eb:c8:
b3:ee:00:37:46:b8:5d:d5:f3:3d:ac:e6:ad:0b:8f:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:21:70:3B:5D:D5:38:E9:6F:9E:3D:6B:29:26:02:AC:6E:38:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1718f885-e1a6-4f5d-9fbe-54c5246c4f71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.217.0/24
Signature Algorithm: sha256WithRSAEncryption
76:08:a7:6a:01:54:d3:d0:86:96:8a:45:72:df:f0:4f:33:ef:
91:12:40:1b:cc:71:c1:14:e3:3c:1e:6d:86:d1:fa:ed:07:7e:
06:09:31:68:10:7a:2b:9d:f8:27:be:b3:42:8a:25:12:bc:32:
36:fa:8b:ee:47:a1:b6:ef:5a:c6:11:3d:c2:fa:d2:7d:02:90:
b6:c4:d6:71:8f:9c:36:81:db:38:41:6a:ae:02:34:63:37:83:
3f:c8:c3:26:62:dc:63:99:34:0a:82:14:5e:e0:4d:67:85:75:
2a:69:28:d2:da:bf:2c:a2:b4:a7:ec:34:40:38:0a:31:2a:21:
1a:7a:28:bf:8e:07:ca:80:da:07:f3:b0:f4:85:22:ff:c0:3b:
7f:3c:f6:79:20:04:25:05:ea:80:24:cd:37:4e:bd:53:eb:75:
ac:43:ee:65:49:dd:da:1f:f4:d9:9b:cc:61:39:3a:92:0d:cd:
11:8c:1a:ed:57:b1:93:38:f3:84:6e:d7:46:fa:6b:30:e5:15:
bf:b5:ee:91:ed:c7:59:e8:5c:2e:34:7e:ea:be:89:dc:2a:e3:
56:f8:0d:7b:da:a5:96:3e:35:3e:ff:f8:96:09:df:ef:cd:a1:
03:1f:e6:3c:eb:ef:e1:90:ff:98:2e:39:a2:5f:73:2e:f0:a7:
73:9a:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:49 2025 by rpki-client