Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3878a8-a2a7-47d3-b6a0-40da9f173584.roa
File: 1d3878a8-a2a7-47d3-b6a0-40da9f173584.roa (raw, json)
Hash identifier: 6uPNVGSf377FPP5UuVT+WSul7RRW/3PzMJfbrT7pUgo=
Subject key identifier: 7E:5B:C2:81:66:5A:EF:72:2F:19:7D:DF:4E:59:94:E2:B1:81:BC:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5877634FF98958A943D7FC0BB6A647A87A25A49C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3878a8-a2a7-47d3-b6a0-40da9f173584.roa
Signing time: Tue 14 Oct 2025 21:42:50 +0000
ROA not before: Tue 14 Oct 2025 21:42:50 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:77:63:4f:f9:89:58:a9:43:d7:fc:0b:b6:a6:47:a8:7a:25:a4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:42:50 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=16f554bf9588d3ce6e748c259321611f42edb98bba688711519c354d49e59d96, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ec:ae:9d:04:82:01:05:48:fb:f3:3c:9c:a2:
7d:8d:34:78:bd:83:91:dd:6a:56:3f:33:96:4d:02:
39:a5:19:ac:dc:8b:28:ac:ed:f3:d4:d6:07:9e:12:
9b:bc:2d:70:06:3c:8e:cd:5e:72:48:a3:03:33:3e:
3a:8a:76:3e:74:6d:46:5e:bc:eb:2f:37:30:ac:cb:
38:90:b5:4a:90:41:fb:de:4e:61:2b:31:c9:5f:20:
c6:cd:67:fd:3c:7b:9f:bc:a4:f8:de:d7:d2:95:83:
20:0e:e0:b9:aa:c9:a9:5a:83:72:23:ba:1a:0d:0b:
bc:20:d2:75:75:88:e4:5b:91:26:5b:88:25:0e:2b:
6e:8c:2d:b6:ea:4f:ee:51:18:33:f0:d7:1f:ce:c4:
68:c0:e1:b9:0c:9f:cd:51:02:95:18:e6:6e:99:d8:
11:e9:c8:cb:6c:53:be:70:d4:42:65:21:13:d2:82:
46:f8:f2:19:87:2f:07:b7:a2:46:50:f5:38:44:9e:
c2:d7:43:d4:26:55:54:62:29:fb:9f:e7:6c:c3:08:
b2:35:be:b9:d6:31:05:79:fd:12:95:41:25:db:2b:
8b:cb:80:63:89:33:30:a3:50:43:0a:60:1d:86:11:
bb:b3:10:3c:50:89:4a:b9:70:43:b4:48:aa:cb:71:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5B:C2:81:66:5A:EF:72:2F:19:7D:DF:4E:59:94:E2:B1:81:BC:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d3878a8-a2a7-47d3-b6a0-40da9f173584.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:f4:8d:fa:76:d2:ce:8e:30:29:ba:cf:46:4d:6c:a9:ad:3c:
0d:bb:16:f7:4e:20:ed:40:70:58:07:fb:ef:33:da:46:04:ab:
2b:9c:48:ec:38:67:28:25:1d:86:17:85:41:fd:33:51:c7:a4:
c1:9b:e5:83:e2:33:e3:6e:cd:95:24:34:3b:2f:b9:ee:95:6e:
2d:25:53:fc:6c:fa:f2:ce:f1:c0:1a:bb:2e:e5:e6:8d:61:c9:
56:dc:7d:e7:0a:cf:88:4a:4a:c5:81:12:13:5f:1b:6e:24:55:
8a:1e:6e:b6:ee:eb:ae:e2:ee:bd:db:e7:2e:35:c7:57:22:35:
9d:b4:9d:99:e1:74:ae:fd:50:07:cb:d3:1c:f5:c2:c3:6f:d7:
2e:23:a8:b8:ab:1e:c1:44:36:a8:e2:6c:67:01:d2:9a:e2:a3:
0d:31:1b:59:01:44:e7:4e:44:2b:17:66:06:0e:9b:57:87:b2:
6d:e2:ae:9b:5e:29:a4:51:d0:75:fe:44:aa:55:71:66:75:d7:
56:fd:8c:23:11:4c:13:c7:ce:44:64:6b:e8:18:1b:08:51:a1:
93:01:b2:65:0c:80:da:cd:b1:5b:5c:7b:c5:86:9b:e6:7c:46:
39:1b:82:e6:ed:b8:10:87:f3:eb:e7:70:e6:c7:5f:2f:0a:dd:
5b:bd:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:53 2025 by rpki-client