Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f9275c-3baf-45c0-800b-ca4affba831e.roa
File: f3f9275c-3baf-45c0-800b-ca4affba831e.roa (raw, json)
Hash identifier: 1pP309ZaTGD+kkmDgdR0zsaeWGSZ2AQP5nq2p8uZbeo=
Subject key identifier: 51:E3:28:61:C4:F5:B5:80:AF:E0:A7:DF:2D:81:06:02:65:EC:2C:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B51B9BA23F3CBCDA2B7586AEA79A5979816B097
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f9275c-3baf-45c0-800b-ca4affba831e.roa
Signing time: Sat 18 Oct 2025 04:30:19 +0000
ROA not before: Sat 18 Oct 2025 04:30:19 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:51:b9:ba:23:f3:cb:cd:a2:b7:58:6a:ea:79:a5:97:98:16:b0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:30:19 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3eb5da59fd209c5f530ae3e78c384566ad0d0826513743b7acde7b8ee32daabb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:42:e0:ec:9f:84:2e:54:71:45:e9:59:f0:0f:
78:0b:9b:e5:0e:d5:57:dc:95:49:a0:0f:49:c0:e8:
68:a4:1d:4d:d3:fa:65:9e:c5:6b:f8:54:4c:bc:aa:
dd:e2:fc:63:cd:4c:be:23:ac:52:f4:79:8b:53:34:
50:b7:79:a0:85:f5:cc:4c:54:31:00:01:2d:85:a6:
8e:73:ed:ce:47:54:93:50:86:e3:b5:b0:04:4b:93:
62:47:c0:b7:97:96:b7:45:55:e9:34:db:c3:27:40:
09:fd:1f:fa:0b:d9:42:d0:df:3f:ad:7a:84:73:d2:
db:a5:25:b9:59:f0:7e:64:4a:9b:60:7f:f7:5b:91:
56:86:52:b3:4e:a2:a7:f3:66:42:c1:d6:90:5d:85:
a8:81:48:57:f0:d3:41:59:5e:f5:f2:3a:19:a9:33:
7e:3e:08:96:57:80:d1:be:50:b8:da:50:51:85:28:
9c:2b:52:fb:64:93:45:2a:56:5a:f3:4b:e4:d2:1b:
28:f8:07:7c:9a:dc:24:1f:3b:cc:06:66:67:f9:05:
19:72:af:df:2d:35:9e:69:b1:9b:52:01:a6:f3:6a:
31:0a:9e:0b:90:ac:33:c5:81:65:fd:4a:5c:55:08:
59:2d:60:24:1d:29:e1:8e:27:a1:38:59:19:ec:17:
07:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:28:61:C4:F5:B5:80:AF:E0:A7:DF:2D:81:06:02:65:EC:2C:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3f9275c-3baf-45c0-800b-ca4affba831e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.89.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a6:0a:63:3a:30:9e:b0:df:5c:16:e3:1b:38:7a:2d:1e:33:
3d:33:9e:21:7c:2a:9e:15:48:d6:18:27:d7:eb:d5:78:52:1c:
de:92:c4:43:58:5e:27:bd:07:28:95:a0:fd:95:9e:43:d9:2e:
68:0f:c6:71:2c:41:c0:cc:ce:10:af:7e:99:7c:81:17:42:02:
d1:c2:67:7f:f9:8d:85:ca:c0:6c:d8:64:2b:f5:19:4c:10:4f:
49:b7:0d:f0:b8:3d:a3:8b:bb:aa:24:42:bf:2d:3b:a1:6f:68:
94:e6:a8:20:67:fe:c3:ab:dd:05:d3:2e:91:1f:04:f2:18:ed:
24:34:e2:c8:bb:81:75:07:13:a6:36:48:84:a4:a3:fa:0c:d0:
b6:8d:3d:c0:a2:66:f2:6a:37:08:ad:d6:2b:77:72:a3:18:db:
a8:ce:66:00:19:09:53:c9:25:0f:53:86:75:84:a0:8b:67:c8:
cd:5e:39:d8:72:f6:77:63:72:c8:b7:8b:ec:57:f4:d1:ed:cf:
03:1c:12:a5:14:05:c3:69:d3:fd:0b:7e:77:8c:75:71:72:86:
5d:8c:31:64:fb:71:d5:4b:12:73:1b:56:cd:0d:6e:3a:28:23:
3f:e9:e4:ff:d8:d2:a1:a0:3e:9b:f9:05:b2:69:5e:a4:ae:1c:
88:bd:fa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:01 2025 by rpki-client