Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63ef5703-5e35-4e95-a411-83ca02523fa0.roa
File: 63ef5703-5e35-4e95-a411-83ca02523fa0.roa (raw, json)
Hash identifier: l9VKF4IfUkksIkA14xVjt7rVfHDnZvqC3Nk40misc/I=
Subject key identifier: 02:A5:76:49:4A:01:04:F8:5E:4C:9D:7A:C9:01:A7:8C:33:1C:BE:80
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A4339705E7076F866936860220FE61005823CC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63ef5703-5e35-4e95-a411-83ca02523fa0.roa
Signing time: Sat 18 Oct 2025 02:11:08 +0000
ROA not before: Sat 18 Oct 2025 02:11:08 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:43:39:70:5e:70:76:f8:66:93:68:60:22:0f:e6:10:05:82:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:11:08 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=b08bacd67e85aa626f144caace2883968de4a6a12827aa3bbc1b724f78420163, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:77:cf:83:0b:65:7c:71:14:3c:c7:b9:0e:
8d:07:b0:0d:e0:50:e6:c2:eb:bc:1a:70:e3:93:a5:
5e:9b:7f:60:03:aa:00:e5:39:6d:ad:6f:06:a2:9a:
57:84:7f:4a:b2:9c:09:94:d3:62:4f:ac:f6:be:77:
75:53:63:65:0b:dd:50:37:ac:09:05:b5:cf:00:e7:
c9:23:f3:87:f3:59:32:2c:44:ef:57:32:3f:8d:bf:
fb:09:5a:9f:89:25:1b:22:ff:9a:12:aa:25:0e:b4:
17:aa:bc:db:a0:bd:6f:12:24:1f:67:d5:c4:5f:49:
59:e0:fc:80:fb:33:9a:fe:2b:86:db:8a:6d:de:6c:
5b:ae:56:a1:17:ed:6d:bb:03:5f:d7:f1:81:10:41:
1b:de:cc:7f:4e:c0:91:9e:27:1b:db:7f:48:ed:b7:
de:a4:ea:05:ea:4e:52:a0:4e:b2:6b:d4:05:dd:fd:
83:00:8b:8f:0e:ea:95:3e:53:44:28:cd:07:b3:3b:
83:c7:86:42:7d:82:9a:6a:35:ed:6d:e8:0a:40:bb:
01:0d:47:d0:70:e1:17:7d:a6:d2:fb:7a:66:83:37:
7f:88:a0:a0:f9:4d:a4:43:f8:5d:fc:a6:80:1d:24:
d5:ea:bd:a7:7a:57:f8:9b:c7:a3:c8:9d:5e:ae:0a:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:76:49:4A:01:04:F8:5E:4C:9D:7A:C9:01:A7:8C:33:1C:BE:80
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63ef5703-5e35-4e95-a411-83ca02523fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.144.0/22
Signature Algorithm: sha256WithRSAEncryption
82:6d:b8:07:79:f1:1a:4a:69:2b:db:e8:5c:93:b5:0d:c6:29:
89:24:4d:07:0b:6e:04:1a:90:3f:86:90:93:ef:8d:9e:04:28:
45:58:d2:ba:bb:23:01:f3:0a:3d:77:10:cb:85:52:ca:26:05:
64:0e:7a:6e:64:80:24:31:72:d0:de:4b:59:7a:92:7f:a9:2e:
1a:ef:9b:2a:78:65:74:69:89:70:35:03:97:f4:ff:6c:74:45:
5f:4c:46:f8:45:68:0b:d6:a1:84:43:6f:89:c7:93:e8:d4:00:
9d:fe:32:cc:18:2a:bb:47:4d:0f:68:fd:27:bb:dc:fb:f4:a3:
e5:9f:a7:37:34:bc:6b:6b:2c:5c:25:b4:45:fd:9e:ab:c8:28:
c4:22:9e:23:f0:b7:42:b3:d5:62:ee:89:ce:6d:92:bc:ca:bc:
c1:dd:ae:8b:20:31:eb:a2:e9:57:e1:1a:98:28:d2:ed:a5:db:
b0:a0:75:54:a9:53:9b:de:cf:68:3e:26:dc:cd:c7:8a:20:a9:
87:40:ee:e7:2a:2e:37:ea:d0:1f:e8:a6:4b:f3:b7:76:a4:ef:
05:e2:90:da:e2:33:59:cf:99:04:1d:37:99:ff:11:5d:ed:df:
c7:1e:4f:3a:96:98:f9:8c:51:ca:22:0b:12:8f:b0:1c:0d:33:
5d:e2:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:20:07 2025 by rpki-client