Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb882254-3f9f-47c2-ae21-a051c97b0deb.roa
File: cb882254-3f9f-47c2-ae21-a051c97b0deb.roa (raw, json)
Hash identifier: wk1VnAqJVlQUak0PaFph9dA67GwnzSKX8ilh4iQp6Ww=
Subject key identifier: DA:57:C8:3B:0A:34:42:79:FA:82:80:AA:D6:FC:D2:41:8C:CB:B3:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4005FFAAA96771686101AC9AA661C70949F0C1EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb882254-3f9f-47c2-ae21-a051c97b0deb.roa
Signing time: Sat 18 Oct 2025 05:01:57 +0000
ROA not before: Sat 18 Oct 2025 05:01:57 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:05:ff:aa:a9:67:71:68:61:01:ac:9a:a6:61:c7:09:49:f0:c1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:01:57 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=8ea4df69d22f6ba6663402c34ee15b8a4ffa457b99374d8d369a352e86f25bbb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:34:58:ec:a9:50:b1:3a:5a:2f:c5:ca:fa:
bc:66:5c:73:88:d1:3e:ab:24:8c:d7:12:cd:87:59:
14:85:8f:11:5b:8d:3a:db:60:49:51:4d:29:e4:4b:
78:d7:7b:96:eb:36:c7:d7:ff:c2:48:08:d0:0e:ae:
55:f9:62:c2:38:27:4e:df:1c:e9:1a:70:a3:18:37:
ac:8a:d0:e5:91:52:6d:18:e8:cc:d0:75:57:e1:0e:
de:b7:d2:b9:4d:0a:e2:cb:17:f0:e7:9a:17:dd:a1:
28:9d:70:69:f8:4e:28:f9:1a:b3:b3:ca:29:04:75:
84:b8:de:98:26:f6:76:fa:93:9b:e7:d4:01:2e:f5:
3e:53:c2:fe:91:4a:27:ab:8d:7e:66:eb:fc:48:c2:
80:99:c4:ec:df:68:07:8b:4c:5e:64:c1:f9:7c:ee:
04:17:ed:c7:e1:0e:88:b7:25:c3:0b:6b:8d:46:e3:
99:1f:36:12:11:40:1f:70:c8:e7:d0:21:5c:98:dc:
7e:88:7c:50:56:83:1e:77:0d:bd:68:cd:42:66:77:
09:53:37:56:eb:b9:8b:3f:17:a9:c0:0b:2d:b3:a6:
e7:a4:99:79:c2:2a:b2:2e:51:b4:f4:48:cc:3a:32:
73:4b:32:53:8e:63:d4:2d:3d:99:ca:9b:5d:ab:25:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:C8:3B:0A:34:42:79:FA:82:80:AA:D6:FC:D2:41:8C:CB:B3:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb882254-3f9f-47c2-ae21-a051c97b0deb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
50:97:47:bf:b8:ce:63:f6:5f:e4:4e:b3:29:b9:0a:05:8e:fa:
16:00:bd:cd:b5:07:47:75:59:04:8a:4b:11:ee:c6:03:46:ec:
99:53:8d:63:05:7c:4b:f3:2c:61:e6:af:e5:ed:80:1a:e9:1f:
42:ad:42:46:06:f2:82:23:9d:d7:8c:72:0f:af:b9:29:71:4a:
ee:42:f6:5d:44:98:8f:3c:46:7c:a6:e3:95:a5:b9:80:7b:c0:
59:ad:e8:db:99:f0:33:a9:5d:d4:f7:37:ca:4f:a4:d0:97:16:
be:fe:3e:9d:54:d2:e3:f2:5f:8f:47:96:3d:41:91:ef:56:ca:
c5:a0:e1:f3:03:76:dc:3d:99:8a:de:12:86:ba:4f:37:5e:24:
80:45:c6:4b:34:6f:c0:fa:c5:13:73:e6:9b:00:05:c7:48:16:
db:ba:ff:40:60:b2:68:dd:a2:3c:dc:15:9c:24:3e:9f:c8:f9:
44:8c:3f:d0:ec:94:6f:9d:42:f6:72:a1:46:f4:98:0a:c9:b5:
ed:51:ac:b1:e6:ce:34:9f:b7:b3:08:89:e2:38:f6:15:ae:c2:
19:0b:7c:61:e2:a9:35:d9:3f:17:83:69:cf:b5:c4:fb:cf:57:
ba:c4:32:8b:92:87:a0:6a:68:95:10:23:8c:91:0b:ec:b0:ed:
a0:63:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:31 2025 by rpki-client