Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c34078-38f9-4f17-a5ea-a9b4a57f8e6d.roa
File: 07c34078-38f9-4f17-a5ea-a9b4a57f8e6d.roa (raw, json)
Hash identifier: lTPJ9Fx78pp3U8eWIH8YmQwEWgEPmOrYTnkaoW5tmZA=
Subject key identifier: F3:39:2C:08:1F:DC:61:BA:93:F5:16:2F:EF:D1:78:7E:66:9F:52:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55E1F48C0F0823D2B297C51C005C1ADC8526C5E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c34078-38f9-4f17-a5ea-a9b4a57f8e6d.roa
Signing time: Wed 15 Oct 2025 16:41:53 +0000
ROA not before: Wed 15 Oct 2025 16:41:53 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e1:f4:8c:0f:08:23:d2:b2:97:c5:1c:00:5c:1a:dc:85:26:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:41:53 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=0cacc9f487c5b7a490787a9b6f9e7a18b501ce792103e710f766e6e228517fcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d1:5d:bd:b9:b5:3e:3f:8b:58:b4:86:e5:9f:
cb:9f:74:3c:cd:50:03:45:10:4c:df:81:ec:b0:61:
72:8d:31:b1:f9:42:ef:ed:c4:4c:0a:c0:3d:fe:08:
8d:fa:1e:9b:6b:eb:3d:b2:3f:4e:7f:ac:82:44:53:
0e:05:d3:be:5d:05:d3:a5:4f:b1:be:5b:a5:79:75:
ce:38:0c:63:e8:e4:65:eb:1b:de:5c:e2:cc:32:77:
89:1a:b8:9b:2f:ab:31:e6:77:8b:e1:e0:c9:08:d6:
c2:62:83:84:36:9c:9d:9e:57:3b:18:d9:7a:c3:05:
67:d5:47:30:f1:5c:a8:28:dd:4c:3b:ae:b3:44:4a:
56:50:d0:f2:6f:9d:e5:1d:c8:2a:84:8a:41:14:f1:
2a:72:8b:f7:40:c9:88:fc:8e:2b:15:ff:0e:56:f5:
db:ad:94:69:f8:64:52:f3:f9:ff:bc:af:ed:e3:0f:
c2:3a:85:97:e0:ef:3b:78:46:93:bf:6e:c6:99:a1:
1a:81:71:ac:d1:1e:c0:04:ac:b3:14:6c:2e:de:03:
07:99:ce:61:75:e9:6b:f4:20:cb:0e:b4:ae:a8:ed:
b2:d3:9b:78:bc:9f:4c:24:49:e8:50:94:a5:c8:37:
f1:e7:c8:7c:0c:92:5f:e5:8c:9d:63:f3:41:3f:ba:
91:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:2C:08:1F:DC:61:BA:93:F5:16:2F:EF:D1:78:7E:66:9F:52:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/07c34078-38f9-4f17-a5ea-a9b4a57f8e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:de:d5:74:7f:98:45:a8:40:86:f6:8c:da:7f:ae:f5:b5:7f:
c5:9a:a1:1d:99:b3:4a:4d:ee:01:2b:65:c0:9d:14:60:ff:cd:
88:1f:90:70:c0:fa:2a:77:43:1d:dd:ab:7e:31:4a:c2:54:4d:
21:35:88:78:78:11:1d:14:05:08:b6:8f:0e:77:43:35:88:95:
cc:02:a0:d8:b5:72:ad:a9:f6:e4:8c:90:92:f7:0c:e1:91:6d:
5f:86:53:fa:96:83:21:3a:3b:a1:76:97:75:8c:f5:28:ea:ab:
f2:49:6a:4d:f6:3e:6f:6d:90:e4:af:be:cc:e5:03:e9:af:1c:
81:ea:3e:70:49:0f:31:a1:20:91:b7:24:5a:d7:18:5c:53:93:
6a:15:b2:3e:67:b6:52:1a:08:22:45:6a:29:35:2d:87:0b:92:
77:44:7d:1a:42:7d:2f:33:80:f9:d9:2d:30:06:03:f6:2b:b3:
8c:b9:7c:dd:4b:37:6f:da:24:3d:f2:b9:4d:3f:f3:64:ec:46:
33:55:a2:b8:79:8e:c8:0c:0b:26:d4:16:a5:19:18:e6:f5:01:
9f:77:04:5a:ae:71:7e:db:9d:25:2a:1d:50:ac:14:b5:b5:73:
27:7d:c2:a9:c4:89:b2:7e:d0:e1:ea:c9:7a:8c:d2:14:48:86:
5e:f8:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:40 2025 by rpki-client