Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be890686-b794-40ca-9649-3ebdc29649c0.roa
File: be890686-b794-40ca-9649-3ebdc29649c0.roa (raw, json)
Hash identifier: SdD+HO2rbfWZ+/M+jmFDmp44EI457KiwTl8KSVkwV6k=
Subject key identifier: AC:A9:45:56:57:81:E6:C1:C1:2F:65:EC:AD:85:F9:D7:DA:9F:6B:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C18FD6C849EB288659B4C28D172272973D6AA17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be890686-b794-40ca-9649-3ebdc29649c0.roa
Signing time: Sat 18 Oct 2025 00:41:48 +0000
ROA not before: Sat 18 Oct 2025 00:41:48 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:18:fd:6c:84:9e:b2:88:65:9b:4c:28:d1:72:27:29:73:d6:aa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:48 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=abfa6e20ccc631e28ee57378a9ae1a6237565cf7bead8dfd34d6cd0e69f588cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:60:95:84:6b:5d:18:4e:19:d3:ff:e4:70:
2b:08:6c:d8:35:78:11:4c:ee:7a:16:d9:c4:00:2b:
d1:68:6f:17:02:fe:3b:af:5a:fb:69:e3:63:a2:a5:
8e:a5:29:19:8b:f5:6e:fb:8c:89:9c:be:c1:50:90:
6f:77:31:64:9f:84:8c:fd:58:cd:7f:62:17:12:8c:
41:ab:db:95:c6:9f:ad:3c:1c:77:cd:9e:eb:68:c4:
9a:87:55:04:9c:ff:c9:f5:2b:e1:d9:c8:61:80:bf:
3e:2d:2a:cd:be:7c:f6:90:16:3c:5d:9f:05:c2:1c:
54:a8:ae:8f:56:b4:6c:aa:1e:d4:4f:d8:20:be:a9:
a4:76:9d:cb:a0:a9:3c:ed:00:ed:a3:5a:2c:1c:88:
66:17:31:33:36:e9:1c:f0:2f:ff:9e:3b:1e:ef:b3:
d2:12:5d:67:4c:a7:13:1e:21:92:71:11:34:54:bd:
c0:06:72:62:d1:a1:a9:6c:99:85:5f:19:2a:c2:eb:
87:34:69:de:b8:20:26:c9:16:55:59:96:16:c1:b1:
ba:43:aa:99:67:d1:4d:fc:31:f3:4b:4f:a7:e1:80:
5b:7f:12:fa:7e:d3:9f:5d:84:a6:af:1b:f6:9e:b8:
02:69:36:6a:8f:81:df:61:3d:9d:ef:15:5d:6e:c4:
0f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A9:45:56:57:81:E6:C1:C1:2F:65:EC:AD:85:F9:D7:DA:9F:6B:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be890686-b794-40ca-9649-3ebdc29649c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6e:d6:e5:e8:9d:c4:bc:2b:a8:f9:ca:26:4b:cf:3d:76:1e:
4e:f2:59:86:13:af:34:50:47:0e:73:67:03:90:19:97:1a:ee:
d0:a4:d6:07:4e:da:01:4e:0d:54:35:c7:4c:7c:d3:47:6b:2b:
6b:19:93:b0:0b:60:7b:8c:57:40:7f:a3:d6:d0:2a:dc:09:83:
c7:23:3f:79:f0:7e:0e:de:01:62:9f:4b:6f:ea:ce:a4:c9:96:
5f:f5:56:9b:7d:14:81:54:40:07:51:de:29:6e:d0:c1:73:eb:
49:06:00:b4:85:f0:46:15:54:60:1f:10:dd:20:14:0e:3b:95:
43:1a:f1:0f:77:7a:68:1c:76:0a:36:18:7a:1b:08:73:9f:9a:
3e:5a:bb:c4:88:28:a3:20:f8:06:4c:6f:87:6a:b2:9a:67:2d:
38:7e:58:c0:2f:4e:b2:ec:c3:16:b2:6e:83:b0:b7:07:7c:b4:
5f:b8:f9:9c:ae:4e:ea:d4:5e:ef:a3:91:0d:b7:b4:93:16:36:
98:45:d5:21:44:16:08:32:e4:ca:b1:19:7b:08:03:b4:91:02:
21:9c:53:7d:46:5a:ae:bf:ab:1d:7b:e4:49:f8:d4:d7:96:02:
48:32:1f:99:82:9f:4c:50:6d:8b:34:b8:26:6b:41:17:1b:71:
7d:99:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:39 2025 by rpki-client