Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7f98d-846d-4451-9118-8240ccdb2953.roa
File: 13a7f98d-846d-4451-9118-8240ccdb2953.roa (raw, json)
Hash identifier: kADJ5yEcFeP0kDfCSL/TOAD+Hc8ExcDDfjtsf2Nfzgw=
Subject key identifier: 27:B2:DB:7D:12:80:6B:0F:F5:11:64:DB:E9:CC:DC:EF:9F:46:D9:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 296E2619F3D98CEE77C4CC1C6E5ADDFE9B7311F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7f98d-846d-4451-9118-8240ccdb2953.roa
Signing time: Wed 15 Oct 2025 17:21:07 +0000
ROA not before: Wed 15 Oct 2025 17:21:07 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6e:26:19:f3:d9:8c:ee:77:c4:cc:1c:6e:5a:dd:fe:9b:73:11:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:21:07 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=7141f67a62661fe5c8f071be2663c2d92c43dd1915fb0b71aad5ff89da5d28f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:94:bc:d9:cc:da:b1:0a:df:22:a9:47:f5:
97:c8:70:64:74:4a:db:6d:cf:07:b6:5e:fb:87:b5:
8d:08:e7:c6:4e:c4:61:eb:35:44:6b:4d:3a:a4:66:
2f:a7:aa:47:ed:7d:7f:e8:4f:56:93:72:83:90:ac:
62:fe:e5:fa:f0:7b:6b:66:42:e2:0d:76:98:e9:19:
66:4f:32:79:56:6d:57:3e:29:8e:a9:c8:96:81:c5:
18:98:60:00:91:35:26:e6:4a:00:e6:22:1f:62:84:
a0:09:60:58:fd:5d:22:66:78:d4:b4:6b:e0:80:d9:
15:dc:80:f9:10:71:18:a9:42:39:33:9f:c6:ed:e6:
ff:3b:c4:2a:c1:6e:43:d9:e3:d7:3a:64:13:d4:60:
1c:96:f7:c1:38:b4:6a:18:a0:07:4f:71:40:59:3a:
63:94:8b:25:da:83:1b:24:50:f0:95:77:5d:49:7e:
3d:3c:3b:a9:9e:e7:7e:91:93:31:78:35:ba:ca:53:
fe:e3:15:98:7b:88:80:52:33:a9:b7:61:37:82:e5:
8d:de:d5:e8:ff:41:62:38:dd:44:2f:f5:9a:d7:c5:
e5:a2:62:62:39:8c:2e:f5:c5:b2:6d:eb:f2:63:77:
a3:84:1a:9c:a2:ca:4c:c0:74:82:af:f0:23:cc:e3:
54:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B2:DB:7D:12:80:6B:0F:F5:11:64:DB:E9:CC:DC:EF:9F:46:D9:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/13a7f98d-846d-4451-9118-8240ccdb2953.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.85.0/24
Signature Algorithm: sha256WithRSAEncryption
59:63:a6:fc:1a:76:4d:28:d5:c6:44:52:a0:cd:e3:5f:24:fc:
37:6e:c2:91:d6:00:d3:be:24:0d:05:d6:64:7b:d9:d3:52:4c:
a1:1e:b2:4e:6a:b5:30:0a:16:89:0f:5d:68:c6:a7:f9:a3:dc:
ba:33:ac:a5:f6:5b:71:a3:db:1d:3d:49:3e:58:e4:72:72:7c:
b5:84:33:9f:02:47:c5:80:bb:62:c5:63:d9:7a:d6:58:2c:9f:
73:e3:1d:c1:5c:fa:6d:16:7b:58:96:9b:f6:43:bf:2f:0c:01:
27:f1:e3:e7:83:57:3d:df:6a:03:fd:03:94:11:db:e2:26:f6:
6d:a1:f6:1f:aa:81:29:ba:06:f0:04:e1:6e:2e:ab:eb:29:a2:
65:55:a0:b0:ab:45:37:f2:d1:44:43:a9:97:53:c4:37:ac:52:
b5:67:64:a1:92:a3:8d:87:b9:e1:6f:27:e3:31:bd:9a:cf:97:
99:3e:d3:03:68:b5:e1:28:a4:a7:f7:5b:bd:2c:cb:8d:d0:7b:
80:3d:70:be:71:31:cd:af:77:72:9b:e6:0d:94:6c:98:dd:1e:
24:13:77:aa:9c:6c:8d:be:11:3b:ac:40:d0:e6:1a:c3:43:78:
a5:d7:97:93:46:f5:40:7f:28:01:8e:65:98:ba:98:40:32:b1:
75:79:06:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:38 2025 by rpki-client