Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86744d1d-3518-44f3-92f1-475c51a93c3c.roa
File: 86744d1d-3518-44f3-92f1-475c51a93c3c.roa (raw, json)
Hash identifier: j20zsNMxSKa8oM2qDEYtR5qIRpRkc71gVfEFOWM1v/E=
Subject key identifier: EC:04:40:CA:B5:DE:27:F1:38:A2:E1:62:CF:E8:D2:BB:2C:C9:66:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 221604954AC2F81B3F05B6C8BA35195C144457E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86744d1d-3518-44f3-92f1-475c51a93c3c.roa
Signing time: Sat 18 Oct 2025 00:31:48 +0000
ROA not before: Sat 18 Oct 2025 00:31:48 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:16:04:95:4a:c2:f8:1b:3f:05:b6:c8:ba:35:19:5c:14:44:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:31:48 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=971e2769b6d3100d1221149387ae0c324ff2f4a0f00f9f097ee37553566d0275, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:f9:3f:66:1b:47:65:10:bf:7e:3f:fe:17:
bd:91:5b:4c:ea:cb:b0:73:77:93:1a:e4:07:cf:e7:
04:a5:2c:f8:e2:2e:74:09:b5:5a:91:63:9c:f9:46:
03:4f:a6:7e:67:18:03:54:dd:9b:ee:9c:39:c0:9a:
b3:4d:35:7b:4e:fa:0a:33:a2:39:80:71:68:ff:57:
1a:19:69:c5:4e:22:ec:17:b6:34:e3:ce:57:62:f7:
48:45:db:4d:3f:9d:74:60:06:d3:2f:fa:81:29:d9:
9b:31:8e:6b:43:ca:c0:79:12:d5:27:ac:fd:29:ef:
e9:d3:43:5b:40:15:61:b6:9b:52:b7:c5:b0:38:27:
fd:b4:81:e1:12:84:40:64:77:09:15:7f:1d:2d:00:
30:d3:e1:35:99:f6:ba:4f:9e:30:26:ee:d7:f8:49:
0b:b1:ae:7e:ce:5b:a8:46:28:fb:21:8d:27:7f:91:
5d:81:be:27:67:b1:27:88:25:1c:5a:5a:ed:0e:af:
7b:6e:0f:91:a2:ed:76:56:65:4a:c5:f9:32:17:bb:
c6:a3:17:74:7d:bf:1d:ef:53:7b:bd:5f:3f:e3:33:
5c:19:55:de:ec:b6:7e:52:1a:23:dd:3f:c6:ed:dc:
e0:bf:65:35:39:12:7f:aa:66:08:3a:3b:07:21:f5:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:04:40:CA:B5:DE:27:F1:38:A2:E1:62:CF:E8:D2:BB:2C:C9:66:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86744d1d-3518-44f3-92f1-475c51a93c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.48.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:f9:6c:80:14:5b:23:6a:00:d5:13:79:ec:ec:d8:79:8e:db:
34:81:90:62:19:77:96:e6:4a:2d:29:80:f9:23:14:ce:e3:e5:
63:0b:b0:13:38:14:f2:29:c1:3f:db:7a:28:b6:67:0f:ed:c1:
eb:30:0b:c4:1e:9f:1f:34:88:48:0a:d2:09:67:12:03:8f:99:
da:e2:47:4f:bb:a9:bd:4a:bd:de:44:f0:34:a5:bd:6d:06:f3:
9a:c7:9f:44:c2:64:d3:2d:07:fc:ae:e1:c6:0e:e8:1b:61:82:
b1:3c:89:a0:0a:d2:a6:7d:c2:69:15:28:04:60:16:08:7a:e6:
70:1e:4f:c5:52:27:e8:90:d9:31:b3:8d:31:16:1a:63:bb:70:
79:d8:e5:4a:4d:e9:d8:82:4c:8d:50:54:cf:3d:2b:de:7f:f8:
52:d7:10:40:b9:02:c1:0f:26:4b:ff:09:c6:65:77:d1:8c:89:
e6:71:1a:ac:46:66:c4:b6:a5:af:b5:fa:6f:ba:e3:aa:e0:60:
f6:23:13:b5:5c:98:ec:48:a4:8d:7c:ea:21:e9:17:98:0c:8b:
71:52:15:03:bd:1b:e0:1c:5d:8e:80:e7:14:f8:e8:5b:2c:6f:
88:ee:70:cb:e3:28:c2:78:4e:b7:35:a3:08:33:44:0a:20:af:
36:ab:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:30 2025 by rpki-client