Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634861b8-3084-48ce-a346-f0dd3c0dee09.roa
File: 634861b8-3084-48ce-a346-f0dd3c0dee09.roa (raw, json)
Hash identifier: 2vR0PPJTgTSbXL/gT/j1OrtemH+kxZfm9jmRr0zAFFk=
Subject key identifier: D7:8E:1D:94:8D:DB:86:21:29:53:8F:58:36:68:D8:AF:20:A5:6E:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B7D66C1BC32F511C32B7892429A4412673C459F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634861b8-3084-48ce-a346-f0dd3c0dee09.roa
Signing time: Sat 18 Oct 2025 02:20:11 +0000
ROA not before: Sat 18 Oct 2025 02:20:11 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7d:66:c1:bc:32:f5:11:c3:2b:78:92:42:9a:44:12:67:3c:45:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:20:11 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=13118aa9e4af4598d291c65a468ecf3caf628e2d31dd39eb898bab60f4bcd773, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:9e:fc:2b:0f:50:3e:78:37:94:dc:b3:d4:
e7:65:95:6f:b6:79:e4:34:df:2a:e1:e6:d8:f4:90:
98:cb:bf:df:69:3c:6c:2e:94:f8:e8:b6:3b:0d:3f:
a3:82:96:e4:a1:1c:37:6d:2c:63:a8:69:ec:44:44:
8a:dc:32:b0:ee:b2:30:66:1d:8c:73:14:01:97:6d:
38:75:7c:36:fb:3e:fa:1a:2a:7c:98:57:8a:d1:a2:
df:6d:de:77:1e:6e:99:67:81:b0:d7:4f:18:4b:25:
e9:d4:84:53:c5:fc:8d:97:10:07:04:b6:55:5c:a3:
c5:34:7e:61:89:ff:25:d5:12:29:5c:cd:f5:72:ab:
32:79:fb:cd:6a:d6:a5:2d:d2:87:15:34:f5:e6:94:
19:99:91:8c:ab:df:c5:9e:4e:5c:fa:5c:e8:45:8c:
a0:ac:b6:6e:ea:b9:b8:c5:df:00:fe:69:7d:ad:e5:
88:4d:c7:53:42:f3:7a:23:33:74:be:69:00:c0:20:
2a:20:4d:05:91:fc:8b:d8:d7:52:ee:f0:66:55:8a:
42:87:5d:d8:cb:87:1d:e0:84:1f:c9:ba:16:6f:f2:
3e:d0:d1:91:77:29:b8:44:b5:f1:d5:f1:e1:1b:7d:
80:5a:3e:f0:1a:6f:ba:3d:a0:45:14:9b:0c:17:cb:
8e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8E:1D:94:8D:DB:86:21:29:53:8F:58:36:68:D8:AF:20:A5:6E:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634861b8-3084-48ce-a346-f0dd3c0dee09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.240.0/24
Signature Algorithm: sha256WithRSAEncryption
94:58:90:6c:39:0a:62:cc:c4:1f:e8:84:d3:38:51:88:5f:be:
22:3f:8e:bd:d2:70:ab:6c:bf:30:39:30:dd:01:86:a3:cd:76:
dd:98:05:4a:76:b0:5c:ef:ce:3b:1a:cb:d3:75:31:1f:66:57:
ac:7e:13:92:8c:df:f7:d1:af:76:55:5e:5f:b9:dc:a7:75:a2:
77:9a:68:b1:d7:58:95:21:a2:9d:e4:03:a8:cf:50:70:46:21:
d1:e3:80:88:ec:0a:01:89:37:f3:58:99:8e:1a:c5:d3:6c:7a:
53:c6:da:5a:d9:aa:bf:a1:aa:2a:68:fd:f1:29:9c:3c:e0:49:
04:b2:e6:74:83:92:a2:d1:d7:57:0e:d9:51:9a:5d:bc:47:ca:
62:08:11:e8:ae:60:48:31:64:6a:a0:64:92:55:b3:fa:d4:c8:
dc:eb:55:df:66:73:29:7c:e1:03:52:4c:37:98:6d:41:82:ab:
bd:24:fa:d5:ae:46:81:d9:54:c5:3e:fd:b6:fd:96:ef:84:cd:
bf:b6:8a:07:f9:e2:01:51:68:97:c1:63:bd:9a:67:b1:07:fb:
30:0f:4f:01:bf:8b:88:9a:96:16:a6:cf:46:33:8c:1c:e9:bf:
9c:a7:37:94:b6:96:11:e0:cd:61:d4:3b:02:28:48:2f:76:89:
89:32:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:46 2025 by rpki-client