Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00312bb4-a9c2-4fe8-b331-309f988b8c9b.roa
File: 00312bb4-a9c2-4fe8-b331-309f988b8c9b.roa (raw, json)
Hash identifier: +JN//nCTGyo4nGQ0wO/Y0Z8lVoHgFtP/A3XgxSkwONU=
Subject key identifier: 5B:1D:D2:43:32:0B:9F:96:39:45:13:58:04:D4:9A:0C:3C:49:BB:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20A76B562B57A1CD74C186BEFC82709A721D68AC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00312bb4-a9c2-4fe8-b331-309f988b8c9b.roa
Signing time: Tue 14 Oct 2025 19:51:15 +0000
ROA not before: Tue 14 Oct 2025 19:51:15 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a7:6b:56:2b:57:a1:cd:74:c1:86:be:fc:82:70:9a:72:1d:68:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:51:15 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=00da3475475a0c14e6a782dbfb9666fd4436b74a0205a90a5e1b8619fe689723, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:92:ca:64:00:96:8d:9c:66:8d:3e:fb:3e:
b2:f4:4b:ec:82:2d:0b:18:75:bf:3e:2d:87:40:ae:
32:ad:76:3b:25:48:a8:57:e4:bf:e7:43:29:29:35:
83:9d:5c:fc:f2:b4:95:c8:6c:9d:92:9b:2f:10:31:
9e:b4:00:ba:5e:1a:7c:4f:ec:ee:1a:f2:d7:81:bf:
7a:fe:77:74:3b:f8:49:c7:29:07:99:87:e6:02:12:
41:a3:49:21:8a:45:17:69:3b:c6:17:37:13:4f:74:
cc:bc:db:c2:8d:ed:aa:51:67:5a:8a:68:1d:c6:11:
00:90:7e:93:d4:8c:60:09:7c:16:f3:98:47:8b:2e:
e5:b6:a1:76:e6:38:c5:e4:1e:ea:43:5c:54:dd:24:
b5:a5:f2:81:6f:06:03:fd:85:33:eb:73:ba:fa:65:
e0:ef:a7:1c:77:b1:9c:f5:54:d7:f6:3e:f4:8a:c8:
1e:33:50:07:9a:8e:38:18:08:08:4f:62:97:df:9a:
94:d0:b0:ac:9b:08:94:e4:61:db:da:ea:9c:a7:72:
8b:d8:7e:7d:1a:ba:48:a1:b8:8d:fd:52:10:83:0d:
49:0c:76:26:ac:f7:7a:af:49:52:f4:d6:aa:64:0a:
8a:00:4a:c3:35:c5:5a:68:e8:5e:d4:99:ec:16:d1:
05:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1D:D2:43:32:0B:9F:96:39:45:13:58:04:D4:9A:0C:3C:49:BB:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00312bb4-a9c2-4fe8-b331-309f988b8c9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:81:d2:2a:aa:41:f4:fc:35:55:f9:4d:11:5c:95:3a:42:82:
97:71:50:04:2f:a6:75:9f:70:87:8f:ed:98:bb:cf:f9:ea:bf:
63:58:15:46:f7:6a:c7:a8:d3:80:ee:18:23:8c:60:29:7e:99:
5c:b2:c4:40:e8:6c:e1:83:e2:62:54:ff:3e:dd:78:17:de:32:
9c:bb:c2:17:8e:a9:ad:c4:7d:ff:3d:10:c2:62:6c:b7:0d:fa:
8c:d6:3d:28:8c:1d:63:47:7b:3b:58:3e:69:31:79:e0:e6:9a:
78:e1:bf:6b:0e:d5:93:08:11:1e:bb:ad:f9:dc:36:4b:54:d4:
57:84:3a:a2:77:28:c3:85:12:ef:d0:67:e7:25:7a:62:4d:b6:
0a:f7:7c:ac:b8:3b:62:a2:34:80:8b:3b:7b:3b:d2:45:19:e0:
d2:41:6d:ca:ac:e8:d1:44:b2:ab:97:90:0c:67:77:f4:c0:f0:
c4:75:8b:00:aa:da:9f:1a:38:ad:9c:0e:8c:f1:85:6b:2c:84:
74:75:22:dc:d1:cd:46:be:e2:fb:7a:fc:8d:b3:5c:53:7e:0f:
cd:e7:d7:5a:9d:23:a9:07:5a:64:b5:79:d0:b1:23:f0:62:20:
03:b7:7f:56:02:e2:56:fd:9e:ea:03:86:78:0f:5c:cc:d6:88:
4e:ce:da:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:54 2025 by rpki-client