Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49997ea3-9145-4453-8510-204d166f70e3.roa
File: 49997ea3-9145-4453-8510-204d166f70e3.roa (raw, json)
Hash identifier: fsVAuqkZZKFczIxn6WWDkBXJv20NJb5hz3QNopfErlM=
Subject key identifier: D2:4C:01:42:27:1B:A4:20:7F:35:C5:DA:46:6D:2F:AA:81:43:12:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D0BAC2CDEE8EFAD3056D100D87233F3C0AC1AD3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49997ea3-9145-4453-8510-204d166f70e3.roa
Signing time: Sat 18 Oct 2025 03:01:04 +0000
ROA not before: Sat 18 Oct 2025 03:01:04 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0b:ac:2c:de:e8:ef:ad:30:56:d1:00:d8:72:33:f3:c0:ac:1a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:01:04 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3cc6bdbe7bbeda1ed6b64e7a8458c239e3b18bb190bbb8787c97587110dc19db, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e6:76:b1:1e:3c:e0:37:dc:25:87:3d:f1:d8:
68:37:ce:c0:af:34:37:77:45:9a:d9:16:2d:f1:88:
e8:46:89:f6:bb:df:9a:b2:68:62:b9:65:16:cc:fa:
43:8b:54:61:e6:1f:8e:f6:97:9e:f7:f7:d7:df:08:
69:b7:97:d4:44:72:58:ec:49:f4:4e:ef:01:99:f8:
d4:3e:4a:cb:8c:24:08:a1:83:3f:01:f6:b1:5e:aa:
c6:58:59:84:67:65:df:42:92:2f:a2:8c:d9:33:df:
9a:c4:31:75:97:30:12:b1:1e:0e:0e:62:68:f7:55:
34:a1:f3:cf:fe:71:50:2f:3f:1d:8b:2c:f7:f1:49:
3f:a7:d0:c5:0c:08:14:a0:1b:a8:39:e8:c4:1b:22:
fd:de:ed:c9:d3:66:fe:d2:61:82:4b:7e:74:ab:9b:
af:70:90:35:03:53:87:fa:21:45:e7:9a:99:f4:5a:
c0:1a:0e:62:c1:e7:ad:48:37:f0:3c:70:ea:c6:0d:
0f:c5:42:24:21:86:3a:7d:b7:fc:5c:9b:25:d7:db:
7a:fb:3d:a0:d4:2c:61:19:08:c5:26:26:05:bb:05:
11:36:93:7c:21:69:c4:f9:d8:38:f4:ba:e0:2a:54:
30:b2:ab:03:ab:99:65:f4:6d:46:8e:75:1c:ad:83:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4C:01:42:27:1B:A4:20:7F:35:C5:DA:46:6D:2F:AA:81:43:12:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/49997ea3-9145-4453-8510-204d166f70e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:bd:34:0f:87:52:f6:99:1f:97:9f:19:5f:9e:71:14:e7:af:
36:95:9a:b6:af:b0:66:1f:c3:95:9c:e5:74:79:2f:8c:2d:b8:
64:c5:9e:6f:b7:84:f3:fb:5b:cf:8d:ae:27:74:03:0a:42:e5:
85:74:51:27:f5:44:9d:96:af:79:10:1d:1c:78:39:f9:ec:7e:
c6:9a:52:fd:12:dd:96:f1:8c:fb:7b:ff:4b:cf:12:99:10:62:
73:16:9e:ac:51:a5:cc:19:89:11:08:f7:cd:fc:b8:63:4e:2c:
70:7b:55:0e:e4:8d:0c:ed:d8:1e:77:a8:ef:76:63:b3:45:14:
49:b2:c3:d3:a5:0e:6c:ab:bf:7c:fa:51:f6:d4:58:f8:40:7b:
04:fd:11:a5:9f:4c:c3:da:6f:8e:db:7a:31:6f:7b:65:df:fd:
0d:a1:73:23:46:c5:21:8a:1f:aa:78:a4:32:37:a6:50:13:c0:
de:88:2a:83:bb:75:9d:af:95:b5:94:db:c2:f9:ed:4e:0b:80:
a7:83:69:8a:2b:14:43:d6:ed:2d:9b:42:9a:a2:44:ed:9b:be:
53:52:6b:ba:36:6a:fd:02:0b:5b:ac:4a:88:52:e9:36:5c:85:
c2:89:4d:94:01:56:a0:bc:49:a3:ca:70:64:1b:33:b7:e8:c8:
be:8d:4c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:47 2025 by rpki-client