Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f099cbe-6f01-445d-bfa2-88bf09bf9f37.roa
File: 0f099cbe-6f01-445d-bfa2-88bf09bf9f37.roa (raw, json)
Hash identifier: LHM68tcMMCRuzfcVEcrHa+ZM3KrfC3D4kRXPFnWQ1s4=
Subject key identifier: C8:31:E4:4B:13:AD:21:19:14:45:7A:A6:C3:60:B9:B6:1B:8F:FF:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 044A072928FB58C4A46C5323107C9F2C5FC296B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f099cbe-6f01-445d-bfa2-88bf09bf9f37.roa
Signing time: Tue 14 Oct 2025 18:11:20 +0000
ROA not before: Tue 14 Oct 2025 18:11:20 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4a:07:29:28:fb:58:c4:a4:6c:53:23:10:7c:9f:2c:5f:c2:96:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:11:20 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fdcc70f72a1f278b8d33774a1c741fc9b27e998caea72c7d46d27a3a28b72eda, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:41:5e:4a:42:69:bc:70:2b:da:33:62:db:
03:93:75:27:ed:e0:7a:ff:a0:8d:1f:bd:96:41:1c:
7c:79:b6:a0:fb:bf:e4:2f:17:d2:be:9c:ce:9a:bc:
d3:de:db:10:0b:d4:0b:43:d0:17:a9:23:c3:48:e6:
4b:31:d1:d3:61:a8:81:0c:47:7f:8b:a1:7b:23:d0:
bd:9b:be:58:92:f3:7a:18:a8:8b:6c:28:55:2e:72:
d2:1f:c7:d9:3f:ff:33:e7:61:0e:79:d9:5b:ea:e0:
ff:be:73:38:a5:4e:dd:c2:d0:f1:37:5f:f0:ff:24:
23:23:1e:94:07:3d:c3:9d:56:6d:fc:94:52:2f:c9:
57:06:b0:02:e9:cc:49:c6:b0:3e:e7:d6:1f:5d:ec:
14:8a:6c:92:a4:df:c5:be:d4:76:58:81:74:4b:56:
ef:6c:c6:34:5c:0e:c4:9b:c1:d7:86:c7:d7:7f:79:
5f:16:fa:62:07:3c:f9:46:10:d4:fb:b7:13:34:b7:
06:c7:ee:cc:9a:be:51:7d:7d:12:d6:d4:e7:5c:c1:
17:10:3a:50:b4:03:f0:36:40:f8:39:c2:47:ab:09:
ba:32:96:b3:95:96:b9:0c:30:cc:2b:23:ab:db:d7:
3e:e0:4c:d4:4c:93:dc:7f:c9:27:d8:b4:c4:d5:5e:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:E4:4B:13:AD:21:19:14:45:7A:A6:C3:60:B9:B6:1B:8F:FF:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f099cbe-6f01-445d-bfa2-88bf09bf9f37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6e:f7:55:95:a3:5d:92:a9:7a:dd:4b:93:32:e4:82:62:72:
53:10:7f:b4:3f:9c:44:ae:dc:d6:4a:c4:da:52:ec:f6:af:60:
fb:19:3d:96:cc:78:7b:ad:f2:f1:08:44:c2:c2:aa:01:da:12:
b2:15:0b:52:9a:9a:d5:5c:52:94:92:13:1a:e2:4f:fe:52:ea:
de:d3:8a:e0:66:4d:c1:3b:fa:00:be:75:f6:db:b9:78:30:c8:
01:6e:23:5c:17:80:54:b5:92:a5:1b:25:87:eb:38:8e:f2:56:
1c:8a:91:4a:6f:ac:9f:ed:69:69:d3:f3:46:e0:98:06:b2:8d:
ad:40:62:2a:38:07:85:41:ce:3f:fe:e3:d5:a1:40:9c:d8:bf:
3a:3d:29:28:c5:5e:fc:76:e0:a5:e8:c1:29:6a:b1:00:51:bb:
16:f2:ff:d4:9f:09:a2:77:3b:50:96:80:e0:08:a6:21:75:da:
1f:63:8c:5b:3f:9c:18:ab:3a:5e:a1:24:1b:e2:9e:f0:ca:cf:
ac:be:46:6b:e3:89:84:fe:e2:d1:06:a2:13:f9:e3:c3:eb:f2:
86:d5:30:d8:24:37:90:a3:70:dd:02:b2:36:33:a9:ea:0d:87:
a4:fc:eb:c9:99:5a:7b:d9:d9:fc:35:3d:61:e9:de:fb:31:56:
3f:97:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:00 2025 by rpki-client