Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf07347b-8368-482b-afd2-37a06dce10e3.roa
File: bf07347b-8368-482b-afd2-37a06dce10e3.roa (raw, json)
Hash identifier: G8o/WpT3cAk+1OLR3siSxpFa9KWd0J7veptdDo6gn/c=
Subject key identifier: C1:DD:BB:80:A2:72:D8:62:1D:0C:8F:47:F0:AB:B3:6D:18:D1:0A:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10A6936A96531AA3E106FEC6E24C91774F5AFE5D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf07347b-8368-482b-afd2-37a06dce10e3.roa
Signing time: Sat 18 Oct 2025 02:50:54 +0000
ROA not before: Sat 18 Oct 2025 02:50:54 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a6:93:6a:96:53:1a:a3:e1:06:fe:c6:e2:4c:91:77:4f:5a:fe:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:50:54 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=8a6d9d0136305649b9906cac0b7e33761c217ff410183e1238323dcd092de177, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:c2:5c:25:f7:1d:ca:1e:57:e7:a9:02:e8:
a3:cf:13:4a:09:0c:35:44:f0:90:26:b4:21:ac:f7:
e8:5e:8d:ea:d3:cb:c8:3d:5f:31:39:e3:34:05:3b:
a3:3a:31:bd:a5:0b:31:6e:fd:65:48:c4:91:81:c3:
04:e0:cf:d8:b7:21:66:c6:bf:c3:0a:5d:37:dd:09:
18:c0:9b:b4:b0:61:a8:2b:7e:3c:a0:75:94:7a:b4:
cd:a1:6a:85:8f:59:f6:0f:f9:e6:3a:49:03:e8:76:
f2:5c:05:e3:96:93:44:74:0d:10:2d:7e:5d:86:ee:
49:a5:5e:ee:cf:6d:c7:33:d3:b8:20:14:41:90:78:
51:9a:26:8f:07:29:56:02:d4:fe:8b:5a:f9:23:00:
22:ba:77:7d:34:af:c0:28:9d:08:2a:37:69:a0:0f:
a8:3f:b6:09:b7:84:09:67:d7:28:9e:c9:33:ae:60:
a8:7b:40:d0:ce:90:ce:de:f8:99:cd:30:11:5a:0f:
a7:7e:62:d7:d2:ad:00:e5:79:a6:de:50:2e:c7:30:
62:9e:33:28:dd:a5:d6:1d:91:ea:09:e3:05:c6:02:
cf:1d:4d:40:e0:a5:b9:af:e9:1e:08:37:10:c1:32:
e2:d9:4b:6b:d8:2a:3d:46:3c:9a:0b:eb:85:e1:d9:
fa:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:BB:80:A2:72:D8:62:1D:0C:8F:47:F0:AB:B3:6D:18:D1:0A:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf07347b-8368-482b-afd2-37a06dce10e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:9e:43:fc:54:a5:c4:74:64:9c:f4:2a:f7:63:ea:f4:a4:5c:
84:9b:09:d5:41:1d:73:2c:dd:b9:47:97:ac:ac:54:7d:c6:f4:
b5:98:86:ba:92:f8:fe:e8:86:81:b3:e6:9d:40:e2:6d:55:79:
bf:b5:aa:f5:11:09:c6:b7:50:12:ad:ba:56:4d:bf:91:e4:c6:
67:24:c2:1b:6b:cf:d1:b1:e8:b9:8c:7a:a8:ea:1f:34:b3:35:
7a:09:50:90:bb:f2:5f:f9:55:33:d5:fa:66:8f:17:81:ac:6b:
9d:13:3c:ff:6b:c9:44:95:7f:a3:b5:ee:73:69:5b:1b:1b:3f:
b0:99:e4:e5:ea:94:58:66:53:37:17:e6:ef:3a:2b:d9:b4:18:
e9:84:06:7e:14:12:00:57:8c:bf:e0:6a:f8:a7:27:c4:f4:70:
d9:85:fb:6e:f8:ff:86:d7:65:b2:89:f0:83:63:41:48:3d:d8:
8e:87:22:a1:1c:b8:86:a6:c5:a0:53:83:e0:6a:60:7e:86:57:
fa:fe:44:89:41:4c:8c:b9:c3:4e:f5:b1:12:e9:79:73:03:23:
bb:b9:1b:88:42:a8:80:4f:a2:43:a6:20:bb:2a:e0:74:2a:00:
f7:15:3c:14:61:72:57:3f:a6:10:0f:3d:60:a8:f8:98:51:9a:
84:27:f3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:59 2025 by rpki-client