Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9adb07e6-62b1-4987-b463-76c893796cfc.roa
File: 9adb07e6-62b1-4987-b463-76c893796cfc.roa (raw, json)
Hash identifier: POK0uFQJBKZb0ZL0VvgSWQcoYg52LgZc7X4Qi3RgoYs=
Subject key identifier: 49:FB:E2:CA:0B:A2:66:99:BB:F3:88:E9:BB:EC:D7:C6:86:2B:E8:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D9168A976FEACD9F6E4963A9A6A4A7753E06DA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9adb07e6-62b1-4987-b463-76c893796cfc.roa
Signing time: Sat 18 Oct 2025 02:31:09 +0000
ROA not before: Sat 18 Oct 2025 02:31:09 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:68:a9:76:fe:ac:d9:f6:e4:96:3a:9a:6a:4a:77:53:e0:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:31:09 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=b46589c8470e4a7523eb20cf3189a4f2c13a596db7cd3999b90537d2a28f24b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:12:6b:28:5a:bb:47:bf:cc:ca:d1:08:a7:
52:45:58:0c:f3:61:0b:89:0f:ce:4f:29:b8:3e:70:
7c:73:8e:af:83:7c:ae:d8:39:4f:a5:d6:15:21:bb:
c5:37:66:4c:46:c7:99:04:1d:6f:b2:cd:7b:36:0b:
bd:ce:0e:af:45:93:10:34:c8:80:ac:e6:3e:f6:d6:
a7:1d:31:78:e1:99:7c:3d:78:e0:b2:36:8c:df:e0:
87:2f:d4:4d:cc:d0:f5:22:b7:b1:c3:7a:c1:f6:c2:
53:2a:26:e8:0f:66:78:07:04:9f:24:58:3e:45:f2:
d3:61:c5:5d:c7:c7:3f:80:16:6a:0a:e5:9e:c6:3b:
92:d6:cb:2b:c1:a3:9e:c0:d5:5a:fd:2b:0d:10:2b:
e0:0d:6b:cf:49:03:8e:1e:b3:ff:f5:1a:9d:63:0a:
c9:b0:88:96:40:6f:71:c0:9c:59:9d:85:52:df:23:
77:64:8d:30:05:46:44:47:22:f9:8e:48:fa:2a:b8:
68:27:a6:ed:b0:c0:ff:0b:4d:56:e4:51:65:1c:c8:
ee:68:f3:7b:49:b9:ec:5e:c7:de:91:88:f4:df:64:
3c:d5:ab:a2:f3:21:eb:d0:3b:5b:34:7e:cc:2d:95:
18:5d:79:e6:3a:7f:31:39:41:33:31:44:4f:10:59:
1a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FB:E2:CA:0B:A2:66:99:BB:F3:88:E9:BB:EC:D7:C6:86:2B:E8:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9adb07e6-62b1-4987-b463-76c893796cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
89:87:53:1d:af:dc:68:48:ba:a9:85:c6:3d:56:e6:d6:c4:38:
a4:a7:b0:a9:6c:c6:46:6e:53:f3:8f:05:1b:bd:da:c8:0b:77:
5f:ad:4c:1b:2e:88:d5:1b:a0:4a:7c:46:60:be:3b:9d:29:40:
e9:e6:e9:21:d5:57:85:e9:62:cb:a1:6f:19:5d:44:a0:a5:4b:
9f:a6:ea:f5:24:cf:79:66:78:a9:47:3a:a3:b6:96:90:3f:d6:
22:a9:83:40:27:07:2b:97:11:1a:d7:51:c0:4f:54:b1:61:0d:
58:fb:57:30:cd:24:14:b8:4f:f9:25:12:28:a9:1a:4c:38:73:
c1:d0:9a:ce:8a:bf:a3:cb:9c:03:f5:63:ce:cf:8e:b8:bc:e7:
4c:b9:c2:0d:ef:f0:ab:38:f8:7d:ba:9a:32:2e:f0:c2:6d:88:
97:c9:d7:37:4b:31:39:b2:61:61:fd:ae:a4:c6:17:8f:6a:c1:
13:6f:c9:21:12:68:68:4c:77:14:49:b2:a9:2e:7c:d9:5c:f6:
d0:e7:62:49:75:c7:8e:dc:36:e8:52:db:b6:af:f1:c9:8c:05:
fd:11:35:7a:59:8f:6d:3e:17:74:40:3f:af:8e:eb:ea:98:77:
bc:7d:7c:fb:ec:ea:97:2e:17:dc:5f:02:46:04:9a:6f:1a:a0:
e7:da:65:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:47 2025 by rpki-client