Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
File: 1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json)
Hash identifier: vJpz3orLUsOOoEO5DVJbyo2xQvrbm7GKkJj2EHLWrW8=
Subject key identifier: 6A:EE:FE:6A:B9:DA:6F:EA:FE:6E:1C:FE:C1:E8:A3:38:F4:FD:67:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6827566E0A76D343F65F65B35D170F5C0960C8B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
Signing time: Wed 08 Oct 2025 00:42:12 +0000
ROA not before: Wed 08 Oct 2025 00:42:12 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:27:56:6e:0a:76:d3:43:f6:5f:65:b3:5d:17:0f:5c:09:60:c8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:42:12 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=2f1943158107b7b348446d182767a7bcc6a27a50b2661273263e768fea3ce677, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:06:23:ce:84:0b:1d:c6:b7:23:9a:71:32:
c7:fc:90:b7:29:73:86:4f:fd:9a:f5:5e:d9:0e:b1:
15:56:eb:7f:0a:93:7f:4d:38:55:c7:16:82:10:0a:
38:74:74:3f:aa:4b:45:98:67:53:e9:21:e9:b3:39:
09:77:98:ad:94:55:c7:29:da:89:0c:47:5c:6a:46:
46:29:b2:50:9a:18:2e:de:b9:e2:9a:b8:36:9c:22:
0e:d0:a2:9c:a8:02:2b:c1:20:c6:f4:8d:57:f7:f4:
e4:0a:27:40:fd:4f:d2:78:4f:e1:1e:b8:9f:aa:11:
dd:dd:f5:bc:a1:86:84:9c:63:89:04:01:94:bb:e8:
87:63:c3:ca:8d:7b:e5:eb:1a:08:a4:70:98:78:4f:
93:bf:ad:b7:73:ba:37:bc:8c:fb:3d:7b:dc:a2:d2:
dc:35:7e:e7:74:2d:1d:b9:a7:91:76:e9:4d:05:49:
8d:5d:e9:b7:d4:d3:fa:65:03:09:f5:ae:41:4f:ee:
14:55:18:08:b5:33:5b:72:10:a9:c2:d7:6f:7f:13:
73:60:8c:43:ba:f9:99:59:66:d0:2d:3d:d9:a3:26:
57:74:b4:93:37:ec:93:8c:5c:b4:0e:78:cd:56:26:
70:53:15:84:d8:7b:ee:d2:ec:b2:b8:6a:3c:e5:55:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:FE:6A:B9:DA:6F:EA:FE:6E:1C:FE:C1:E8:A3:38:F4:FD:67:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.188.0/24
Signature Algorithm: sha256WithRSAEncryption
80:27:c6:94:b8:d0:78:5c:17:f8:ae:5a:1e:51:96:a3:4d:7c:
2d:08:09:dc:7a:ff:cb:ed:0d:e7:f6:14:39:86:a0:6f:80:79:
ec:34:a9:77:9b:44:b6:67:ed:03:eb:59:b1:cc:77:07:0a:03:
a2:44:b8:dc:c1:51:3b:cb:d8:ed:d7:04:05:fb:0c:5a:1f:6a:
3d:24:e7:d3:eb:e6:a7:4a:0b:b1:e6:ab:f2:a5:8e:e3:7f:6a:
cd:7a:0d:7a:62:eb:54:a0:0e:ed:60:05:b7:0d:48:64:95:c3:
37:97:a7:4f:de:d9:3b:a7:c9:17:72:db:fd:03:11:ad:c2:f6:
97:94:fe:bf:26:61:df:ee:ef:ce:eb:e3:65:4b:c4:21:4e:d5:
84:8c:32:2a:87:ff:07:d6:49:09:04:bc:2f:11:bc:83:28:ca:
72:d9:cd:34:ed:c7:af:eb:24:d2:2d:62:98:9d:2c:5f:06:3c:
00:83:55:8d:00:66:83:25:27:02:45:fc:d5:20:86:70:17:06:
0f:80:7a:9d:b1:69:a7:64:41:42:13:f4:4b:18:1d:e6:53:b3:
00:59:00:64:11:c5:91:30:4e:0f:62:f5:e1:71:e2:e3:1a:15:
e5:ca:e9:40:08:de:60:6b:e2:42:70:3d:10:eb:0c:b6:01:42:
fd:2b:f4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:15:32 2025 by rpki-client