Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ad5e972-28e4-42da-b89e-8f40db19979c.roa
File: 1ad5e972-28e4-42da-b89e-8f40db19979c.roa (raw, json)
Hash identifier: dLz4si4Two3sG1S2O7Rg4Y0cJBkE5lV98n3A4MJjUF4=
Subject key identifier: 4C:36:8F:D8:BD:B2:53:A0:DA:04:FD:01:AA:34:63:40:78:0F:75:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E92A7D37D76ADDB772637BDD5CC337454D36E7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ad5e972-28e4-42da-b89e-8f40db19979c.roa
Signing time: Tue 14 Oct 2025 19:12:13 +0000
ROA not before: Tue 14 Oct 2025 19:12:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:92:a7:d3:7d:76:ad:db:77:26:37:bd:d5:cc:33:74:54:d3:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:12:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bc0e362870fb7622f1f0ded4406cce1d04bfaeb4c4f6e2fbde0e438cde33a8d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:69:60:62:46:f5:2a:6f:65:7e:b7:57:13:
bd:2e:80:83:0f:09:02:1b:cd:56:17:80:63:34:ad:
92:d0:16:b1:56:9f:d1:9c:5a:bf:c1:b7:79:02:54:
ae:eb:0d:41:8b:23:2f:2c:fc:fa:76:2f:08:34:2b:
e6:82:3d:df:f6:9d:3e:20:3c:04:0b:0e:e5:3c:d4:
02:50:e0:da:6a:82:1d:03:45:a3:9b:f1:91:37:6d:
21:9e:b1:20:c9:ca:10:14:f2:e2:3d:43:07:fb:03:
96:95:25:b5:4c:5b:7e:d0:09:13:2c:89:f9:34:29:
97:cf:de:53:cc:4c:ce:f0:08:82:4b:9c:a6:03:f2:
aa:89:64:fa:31:ce:ea:e4:6b:50:28:07:c5:53:05:
34:2a:c9:1d:cb:25:1d:d8:16:ec:13:08:ad:6a:4f:
05:92:55:10:57:9c:90:7b:20:92:54:21:63:a8:f0:
34:5b:75:da:4d:94:9b:5a:53:ad:39:c4:3a:30:34:
c0:ed:96:f9:5c:fc:05:65:e8:fe:96:83:21:74:2c:
cd:a7:8f:b9:7a:13:45:59:3b:c2:b4:49:2a:1f:c1:
16:41:5f:39:67:92:a5:d4:7c:a2:c7:32:64:3e:9b:
c8:91:2e:ff:0c:68:26:73:00:95:17:83:dc:c2:e7:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:8F:D8:BD:B2:53:A0:DA:04:FD:01:AA:34:63:40:78:0F:75:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ad5e972-28e4-42da-b89e-8f40db19979c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.254.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ac:61:07:1f:3d:72:d6:70:0e:7f:bc:7a:17:54:d8:8b:8b:
01:51:b7:67:3e:fb:a0:b4:a5:ac:3b:08:34:f1:56:60:ee:48:
ce:5e:53:f2:fe:d2:17:df:1a:44:dd:82:22:4d:ee:fd:7d:92:
c8:00:62:e7:e5:3b:9b:56:51:c0:a6:1f:0c:9b:c1:28:85:8e:
92:2f:70:69:f1:19:03:b0:f8:0c:54:c7:cc:81:95:7f:f3:01:
4b:8d:20:c2:1e:2b:0b:67:08:2b:85:4d:b4:bf:f5:8d:18:4f:
51:9d:14:79:a5:91:27:cc:bc:69:c9:50:20:b6:fb:df:aa:aa:
6b:84:de:c6:3d:56:5c:5e:1b:78:58:b6:af:19:ae:5b:f5:c8:
1a:48:56:42:42:2a:33:5a:d7:93:43:e5:92:e9:ef:81:e7:ec:
39:01:e9:e1:45:1d:03:c1:44:3a:61:ea:19:89:7d:a2:85:e7:
b0:70:4b:d6:3c:0f:18:1e:f3:8e:a2:04:eb:e3:b1:7f:3b:3c:
6e:1e:31:ed:42:65:38:4c:b7:a1:d0:2e:35:35:3f:51:32:19:
96:50:4b:2d:d2:e8:a0:92:0f:48:f6:3d:d1:d6:8d:db:5e:71:
7f:f6:51:d9:4c:09:7b:76:55:82:a7:1c:d5:93:59:19:37:49:
4f:5d:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:08 2025 by rpki-client