Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa
File: 1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa (raw, json)
Hash identifier: M7BQXPkSrMnxfof87TvLRKiJVt8u+qrRtKohCdDLPxY=
Subject key identifier: BF:FD:9F:DF:E8:CB:2B:3A:09:05:E5:30:4A:63:4D:47:0F:48:F4:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71DDC7DA5ABF7D74D247059586C0B6442CFC2680
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa
Signing time: Fri 03 Oct 2025 00:52:11 +0000
ROA not before: Fri 03 Oct 2025 00:52:11 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:dd:c7:da:5a:bf:7d:74:d2:47:05:95:86:c0:b6:44:2c:fc:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:52:11 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=f639830cd40c22fdb193d3e176276ab03a5408b17a3024e30f20d83487c4d20a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:0f:3d:d3:c7:da:74:69:be:e9:a0:86:30:
74:05:f6:87:86:35:5e:fa:2f:e4:fe:2c:39:46:4f:
0f:ab:9e:1b:ac:2e:9c:3b:d2:f6:eb:3b:93:ba:9f:
1d:8c:dd:a2:a2:cd:c4:55:21:52:fb:22:c9:28:48:
ce:34:f3:5f:c3:70:74:c4:54:62:14:a0:da:a6:2f:
b2:b7:78:55:c6:95:d9:4c:d7:ef:02:72:fa:cf:1e:
d2:89:52:ab:1b:24:6b:19:19:d2:1e:be:c3:91:2a:
3d:c7:ff:dc:85:e2:71:b6:3a:5c:2d:fe:58:fc:94:
e7:9e:2d:ac:44:26:22:aa:61:b5:fe:e6:b0:c1:11:
d1:3c:61:96:7f:bd:82:2b:ec:6d:5b:87:b9:66:cb:
d6:0f:ee:c6:9f:3b:3b:8e:ab:fe:64:c4:a1:c2:cb:
1f:de:7d:ef:ac:c6:e6:fd:d7:44:99:68:de:9b:10:
fd:52:6d:b0:20:9d:03:9d:e8:42:f1:ce:b1:3a:cd:
6c:5c:71:da:f4:61:2b:23:6f:4a:23:d2:42:d3:89:
56:16:c2:ee:0b:59:eb:21:7e:96:af:b1:05:1b:3f:
4e:7d:ef:6d:ea:7a:d9:d5:5c:83:78:0b:c9:cd:e3:
ba:ef:23:54:96:2d:3d:a1:87:38:6a:f1:ce:f6:d1:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FD:9F:DF:E8:CB:2B:3A:09:05:E5:30:4A:63:4D:47:0F:48:F4:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1505dba2-f5d8-4cfa-892e-d67f9fff862f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.250.0/24
Signature Algorithm: sha256WithRSAEncryption
30:df:77:e1:35:18:cf:e9:f2:10:4a:35:5d:1a:ef:db:fa:e6:
ed:c3:39:f4:61:12:88:35:c0:4c:ab:37:b9:4f:4d:f8:ea:1f:
9e:19:20:57:6b:74:35:0d:9c:6e:b0:5f:95:f7:18:23:31:33:
22:5c:fd:e4:fe:86:c9:d0:3d:9f:8d:1b:93:cf:ce:04:ad:a2:
fb:a2:54:e3:90:9b:15:16:ec:37:3d:84:4b:29:64:5e:36:0e:
80:e7:98:5c:52:6d:75:7a:99:12:44:d9:79:fa:fb:59:5d:ec:
21:13:98:c3:a7:83:27:66:60:7f:5f:5c:1b:38:69:09:77:72:
db:b5:45:e6:46:a4:46:04:78:9a:d3:d0:41:37:d5:bb:38:dc:
a9:60:10:bf:22:ca:8f:ce:99:77:2e:d4:8d:0f:45:13:c4:da:
1e:cf:5a:1b:17:ba:8f:e0:ae:17:b8:24:79:52:ad:53:9f:84:
21:16:b4:aa:24:3b:9b:eb:46:18:69:b6:38:ad:89:71:a6:38:
3f:27:bb:9c:0d:eb:ee:06:0e:be:d3:4f:87:77:77:95:3b:32:
57:fd:f1:fe:33:a9:e9:bd:46:ae:3d:c9:55:5a:e5:44:ff:48:
3f:68:85:bc:38:2a:1d:5c:82:92:a0:af:cc:b6:fa:f2:f5:98:
93:bd:58:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:37 2025 by rpki-client