Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/252887c6-d382-486f-8758-2063b698d48f.roa
File: 252887c6-d382-486f-8758-2063b698d48f.roa (raw, json)
Hash identifier: kwSjwKrvdhDBc3NFuhBbHJhS6IABOgcrxk9/6yInOro=
Subject key identifier: CC:61:A4:88:64:28:CA:9E:81:B7:52:E6:36:71:BB:5E:42:A2:C3:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 35DCBBA4CADD63548E028E36B1A17D7193217B7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/252887c6-d382-486f-8758-2063b698d48f.roa
Signing time: Sat 18 Oct 2025 03:50:09 +0000
ROA not before: Sat 18 Oct 2025 03:50:09 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dc:bb:a4:ca:dd:63:54:8e:02:8e:36:b1:a1:7d:71:93:21:7b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:50:09 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=6d9d1b27871d41f4286ae7d77b2075eb48bbf4e2fc662728a93534507b59b44b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:2f:78:fe:dd:a2:8a:79:c1:e5:db:06:d5:
93:b7:07:ef:d6:a7:42:17:46:be:39:61:23:cc:2e:
c2:2e:49:46:00:a0:d2:85:b1:7e:04:50:f1:a9:29:
3c:ac:ca:c6:c4:8c:e8:65:54:9e:41:ea:bc:f5:97:
9c:f0:e0:1f:4b:12:53:48:a8:77:eb:02:37:1b:17:
0e:1a:df:c5:d0:f2:73:ac:3f:e4:92:ce:84:3d:bc:
3c:a8:74:f1:6e:d3:d7:c6:ae:79:81:38:05:9e:34:
0e:76:69:54:da:e8:98:c0:80:c0:ec:9c:da:d4:fe:
10:40:02:2d:c8:b3:97:37:dd:b9:61:88:a0:41:60:
ce:d0:9e:73:ed:2e:59:92:bc:ca:20:2d:e6:88:7b:
e7:ae:0b:98:8f:25:15:5d:75:ef:6f:68:54:93:11:
d2:41:0a:a2:75:b1:cc:7a:f8:60:c6:a5:3c:9c:6f:
7d:ff:66:67:f2:e1:1f:c8:c9:2b:45:d7:ce:c3:c5:
8a:31:79:ba:c8:06:d3:94:09:4f:30:44:de:d0:ea:
da:db:c9:7f:b6:3c:1b:ad:03:e1:8a:1d:6a:b3:71:
ef:19:4e:e7:23:98:27:6c:2b:a9:9c:8e:59:34:45:
67:2a:89:2c:4c:2c:e9:18:9c:de:f4:b2:7d:d3:bd:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:61:A4:88:64:28:CA:9E:81:B7:52:E6:36:71:BB:5E:42:A2:C3:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/252887c6-d382-486f-8758-2063b698d48f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.125.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1e:20:52:29:28:ee:00:e7:9a:e4:9d:5f:4a:a6:95:6c:ff:
25:19:82:37:68:13:fb:f9:e3:77:2a:cd:41:1a:71:fb:7e:7e:
f0:24:ae:09:35:3f:67:78:3a:34:8f:aa:b0:0f:2e:ce:3a:dc:
5c:1e:a3:fe:34:c2:ba:22:8a:a8:c2:e0:ec:29:ca:98:cd:a2:
44:96:be:74:94:bc:d8:bc:58:dc:7e:80:cb:67:20:50:93:24:
5f:ff:ed:b7:30:49:5e:ef:e8:85:f0:2e:bd:66:39:95:2a:6a:
06:77:ad:99:e7:62:92:ef:c9:c8:ea:03:85:32:b6:a4:99:5b:
ac:d6:ab:98:b0:ac:66:ac:a2:64:39:41:0e:e8:c6:8e:ee:17:
76:07:0b:4c:36:b8:6a:d1:21:e4:9b:0e:4a:4f:cc:ea:71:37:
09:d8:df:03:a4:7b:80:ad:05:f8:a5:39:9e:67:f4:65:67:b0:
36:9d:cd:d8:87:b2:48:3e:55:94:ed:ce:7c:a1:7e:52:b5:10:
d9:1c:ed:9e:ce:7f:36:ab:8e:1d:32:ee:32:c5:3d:1d:57:42:
de:09:cd:fc:b7:56:51:e2:de:d6:d8:d5:40:b7:35:76:d8:a6:
4a:56:7e:13:5a:07:66:2c:40:4b:40:b2:bc:c5:fc:35:76:33:
3a:b6:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:31 2025 by rpki-client