Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14f78446-233a-4ea1-9aa9-282be775c8ea.roa
File: 14f78446-233a-4ea1-9aa9-282be775c8ea.roa (raw, json)
Hash identifier: Yd/9VqcL2IFDfWtQyInSjn7LuByd4nnyimSoCJn4VPA=
Subject key identifier: 10:1E:09:2E:16:D2:69:36:EA:21:6F:3C:EF:5B:38:B9:BC:D6:E8:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05167BF3753270A238C726B08F0B7CA765CE05C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14f78446-233a-4ea1-9aa9-282be775c8ea.roa
Signing time: Tue 14 Oct 2025 21:39:06 +0000
ROA not before: Tue 14 Oct 2025 21:39:06 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:16:7b:f3:75:32:70:a2:38:c7:26:b0:8f:0b:7c:a7:65:ce:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:39:06 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4778f69851248527776f13124f0170feb3742bda355d57c2a364de8aa1ca592d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4d:62:dc:61:38:b5:ac:c9:56:c7:38:b5:09:
69:a4:af:af:d5:15:f0:5a:b5:70:7f:69:95:71:3b:
e9:2b:cc:fa:89:1b:e2:db:24:6e:84:e7:05:6d:cc:
3b:8b:91:20:c1:d8:82:2c:0e:d3:fe:5c:4c:9a:a5:
74:7e:a1:18:60:27:35:bf:66:53:bf:19:4c:ea:76:
e3:a4:64:a8:15:28:ed:30:87:ff:b1:12:f9:1c:c1:
52:98:2f:6c:8d:7e:1e:e3:bb:13:d3:ae:3c:36:d8:
34:cb:73:6e:a7:99:ae:5e:7c:41:25:7f:8e:d0:8b:
a7:1d:34:7e:81:95:12:e1:ca:3f:bf:ed:28:0d:d1:
42:e8:66:de:88:9f:3b:8f:ab:2c:dd:10:d8:61:10:
07:a3:15:3c:ba:a2:32:1e:a4:57:df:a1:69:2f:08:
17:ee:72:82:7e:ac:a0:d3:42:4c:e5:8e:1c:ee:ed:
24:3d:9b:2c:d8:5d:1a:3a:c9:23:1a:74:f7:6e:8c:
52:5f:ea:be:ec:ca:77:a8:44:ae:f4:da:45:53:7b:
67:e0:66:87:c4:32:4e:ab:0b:90:87:83:5d:20:d1:
e1:4c:0e:5d:7e:46:5b:7b:25:3d:2f:95:58:5e:a1:
92:41:2b:7b:8f:26:3a:9d:c1:bb:71:13:fa:46:2e:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:09:2E:16:D2:69:36:EA:21:6F:3C:EF:5B:38:B9:BC:D6:E8:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/14f78446-233a-4ea1-9aa9-282be775c8ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.80.0/22
Signature Algorithm: sha256WithRSAEncryption
63:c5:b0:be:7c:d5:88:d1:17:8f:2b:cc:e9:46:c9:80:90:86:
2a:85:4c:5b:6f:32:48:d3:e3:57:1b:c2:f4:d5:f3:4e:b9:6f:
90:74:7c:22:81:17:d8:3e:5c:40:4b:1f:7a:7c:61:f8:90:0e:
74:d8:95:67:20:16:63:ac:96:4c:4d:f3:ec:a9:67:52:0c:d5:
07:14:3c:b5:95:ca:a6:c5:b6:25:ff:35:c9:7e:4b:6c:62:c0:
1b:b6:8d:d6:07:19:de:1e:1e:77:3b:29:4a:97:10:39:08:48:
74:bc:c3:10:74:e3:12:02:fc:f1:8f:3b:13:c5:08:e5:eb:12:
3c:3f:7c:b6:3b:a7:4c:6b:7a:be:f6:dc:db:9c:f8:78:20:14:
6c:e8:b0:82:f4:d4:7e:1f:be:bc:08:80:ac:36:96:47:08:22:
44:96:b6:bd:ac:85:a9:a5:1c:ad:85:32:2e:d7:a8:59:ee:ba:
43:b0:11:6a:96:70:c3:6f:57:8b:41:44:b3:26:11:89:4c:6f:
0c:e4:24:05:78:f1:29:0f:fe:0e:e3:df:f2:ed:c8:ba:3c:16:
60:a6:95:31:38:f8:73:3d:25:5e:94:4b:4f:7c:ce:33:97:ef:
79:14:69:56:d6:cb:ba:00:78:63:c4:ed:96:5a:71:5c:a6:5d:
1f:b0:e1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:27 2025 by rpki-client