Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fb769a8-1acf-4810-9774-7565092d0bdb.roa
File: 8fb769a8-1acf-4810-9774-7565092d0bdb.roa (raw, json)
Hash identifier: rfTDILKDizOENlm9PhwqYg7FWCRYLyJ33lCnLlPaiHk=
Subject key identifier: 98:69:E3:A1:CF:9D:B6:AA:AE:18:7A:7A:5C:A8:72:0E:3F:28:02:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7ED06AFEE9DA6D7CA275365668187779293B80C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fb769a8-1acf-4810-9774-7565092d0bdb.roa
Signing time: Sat 18 Oct 2025 00:30:20 +0000
ROA not before: Sat 18 Oct 2025 00:30:20 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d0:6a:fe:e9:da:6d:7c:a2:75:36:56:68:18:77:79:29:3b:80:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:30:20 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=2b5abc2c37eb26de7c9c9d67ff2897e27622f285d0eabe6b9be7d40fa7fd528b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:70:ad:e3:de:00:33:1f:d9:11:ee:03:33:
ff:70:e5:52:b0:15:f3:0e:3f:7a:18:77:6a:2d:fd:
0a:86:4c:b3:a4:1f:c0:57:bd:9b:c6:5e:2d:2b:4f:
7d:02:e1:83:89:76:80:e0:c3:54:3c:8d:dd:1e:ea:
a0:ca:17:30:61:87:59:d9:52:8c:85:56:1e:ad:d4:
c7:03:ec:5b:2d:8d:ac:73:23:60:cb:e4:f8:ce:b1:
e7:de:cb:30:62:df:1d:7c:62:ce:62:a8:03:84:43:
af:74:7d:8c:7a:6b:0f:8c:4a:50:a7:90:1c:b7:56:
80:53:6d:30:15:66:24:cc:4f:7d:92:82:15:6d:9d:
4d:24:f0:18:00:07:ed:71:fc:2d:7a:f7:58:a3:f2:
48:0b:01:35:5a:87:3a:5e:e9:50:52:40:b4:90:2f:
62:da:e0:3d:af:f2:98:d3:f0:7e:e2:d4:64:d3:de:
be:f5:ce:16:ff:53:66:66:2e:d8:a8:ca:5f:b8:fb:
7a:9d:66:26:df:66:83:05:7c:df:ee:2d:8c:e1:6d:
38:c9:b8:a3:2f:77:04:69:be:6b:1d:54:14:14:b0:
48:9d:c8:5b:7b:f0:37:0e:fc:8f:b8:5d:ca:d9:30:
f1:d6:f2:b0:62:1d:87:02:de:b9:f0:5d:c0:a5:24:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:E3:A1:CF:9D:B6:AA:AE:18:7A:7A:5C:A8:72:0E:3F:28:02:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fb769a8-1acf-4810-9774-7565092d0bdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.211.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ec:61:5f:96:2a:45:9b:f0:17:a6:95:dd:a3:b7:de:59:f0:
46:8b:1e:1d:fc:a9:fd:23:20:f9:d6:2e:65:ef:c6:8d:3d:e9:
85:81:9e:dc:6e:f3:18:b9:cf:b9:81:0a:95:37:e6:7b:86:b9:
f9:d7:d9:57:d0:65:01:a9:ea:f7:52:d4:8c:7e:31:1e:2f:d3:
46:9f:56:2a:16:34:3e:c7:18:1d:d7:7c:d6:19:5d:f9:05:52:
11:d9:b1:0b:ce:98:fa:f6:92:c8:92:fc:b7:5d:b6:59:a1:84:
56:f5:a3:2d:fe:d7:d4:2b:fb:dc:0d:f5:52:11:9e:ee:22:ab:
24:a5:4a:3d:4a:91:d3:88:8f:ba:87:b3:95:27:f0:39:2c:c0:
f8:ea:ff:9b:32:ea:92:b6:00:3b:ec:8b:b9:ff:d2:b8:f6:eb:
bf:3b:c3:be:bd:98:50:ca:8a:f1:77:bf:9f:40:39:1a:7b:37:
62:07:0f:ee:62:05:86:ab:47:a0:3e:26:7d:41:b0:c0:b9:45:
bc:b2:4c:c9:bf:01:f3:31:6f:bb:c4:6a:3f:86:e4:e1:78:1e:
34:88:29:fd:c6:99:41:c6:20:97:6d:5a:d6:17:33:43:44:7b:
36:e3:dc:50:38:27:30:55:30:b8:f0:87:25:89:ff:ec:7c:7a:
d1:78:95:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:46 2025 by rpki-client