Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c85352-2553-40e0-a733-161e24fcb05d.roa
File: 50c85352-2553-40e0-a733-161e24fcb05d.roa (raw, json)
Hash identifier: 0DksXXFmkA6OMuRaXnkj/Q2mYHgGa1iAlgGZJAdNTAo=
Subject key identifier: 99:A3:CD:25:19:0D:18:24:15:6C:F4:B1:B2:8E:A9:F4:1B:65:4A:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 192454E08CB395267A90338B9389ABF91BBDA516
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c85352-2553-40e0-a733-161e24fcb05d.roa
Signing time: Sat 18 Oct 2025 03:32:00 +0000
ROA not before: Sat 18 Oct 2025 03:32:00 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:24:54:e0:8c:b3:95:26:7a:90:33:8b:93:89:ab:f9:1b:bd:a5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:32:00 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=1a930a7b5f3ac13167707bb201508946dc0f4dd93a14f8ee813488b158a5819a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:30:4b:02:f8:ac:52:1b:6f:4a:5c:69:31:
b3:fa:78:03:cb:07:76:94:e8:5c:3d:d9:53:d8:64:
b7:77:71:81:f1:74:85:48:ed:0e:fe:d3:25:3e:91:
d4:d4:78:21:3a:2f:98:5b:73:ba:76:c2:56:d9:c4:
78:9b:9e:5c:41:cd:20:b5:7f:5e:93:52:52:58:58:
a5:c2:aa:48:87:b0:17:6d:d6:bf:49:f4:df:0a:6b:
0e:1d:30:1a:90:73:e8:58:24:71:ff:00:49:eb:5e:
20:d1:20:79:66:50:a5:6c:a3:29:db:c0:95:6e:26:
2d:36:ab:25:c8:10:ce:3e:45:36:d5:bc:f4:5f:ae:
39:4c:0c:e4:f9:0f:9a:18:a3:fe:16:86:99:b8:d1:
29:ce:b9:14:6f:2a:84:6d:b7:0a:22:d0:c0:7b:5f:
02:20:86:ae:78:a3:32:d6:45:26:96:57:f4:b0:11:
bf:4c:22:cc:a8:8b:67:60:dd:50:77:0e:37:5f:c8:
3a:de:99:5e:96:49:a1:08:bc:48:71:af:86:f1:5c:
b6:1e:59:76:0f:06:cf:93:d2:1c:da:66:06:87:23:
60:f4:62:5c:d4:e1:cd:30:46:c5:6b:9e:3f:43:54:
ab:0a:e9:cb:6c:2f:07:c5:86:30:57:85:e8:75:d9:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A3:CD:25:19:0D:18:24:15:6C:F4:B1:B2:8E:A9:F4:1B:65:4A:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50c85352-2553-40e0-a733-161e24fcb05d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a5:0d:0f:65:dd:36:3d:18:02:de:92:cb:8e:2c:f8:cd:20:
a8:c0:50:a4:6c:60:24:56:cb:7f:44:4c:46:ed:1b:ac:2a:fc:
e8:5f:aa:b8:ac:0c:62:41:a8:02:db:4b:33:bb:08:2c:28:b7:
fc:3a:61:8c:a7:db:66:e2:e2:40:a5:38:fa:fa:f5:78:14:aa:
b5:80:18:ca:b9:cc:a9:49:ab:b3:74:f3:98:e1:1a:e7:f0:c5:
1a:ae:60:87:19:e4:b1:5e:cf:14:3e:85:8b:ed:70:32:a3:db:
07:5d:5b:ec:1a:de:61:6a:70:f2:45:fc:14:df:6a:cc:17:03:
e0:48:9d:3a:6d:c2:f4:f8:50:31:80:c7:c0:f6:de:6f:86:23:
2a:a9:4b:4e:b6:75:eb:8b:a2:10:4e:81:9d:29:47:8b:03:65:
ae:88:45:da:3d:fa:85:53:b3:1c:d4:df:3c:e1:14:9d:8b:70:
d2:8b:b0:7f:64:a7:a3:a2:06:3f:c1:da:10:05:20:f2:4d:ef:
53:96:79:82:ea:90:d3:3a:3d:bb:cf:ce:2b:d3:30:9f:b0:06:
ec:3c:ca:6b:95:f7:d0:6d:64:6c:7f:5c:d9:cd:1a:f6:b6:71:
ae:aa:38:c4:61:e2:df:9b:97:a3:0d:35:43:98:49:16:ce:d3:
8e:1e:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:14 2025 by rpki-client