Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20dfdf70-777f-423c-aadf-b8ef9133f3c6.roa
File: 20dfdf70-777f-423c-aadf-b8ef9133f3c6.roa (raw, json)
Hash identifier: TcmP6Woevg80dlQx0Ae7qdFqU8inq8dBzdepdX8ATaY=
Subject key identifier: 35:E6:6B:FB:40:8A:84:3A:3E:4B:0F:29:26:53:39:82:F8:98:1A:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19D5916342F2416BDBDA3546274855A7A50C3476
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20dfdf70-777f-423c-aadf-b8ef9133f3c6.roa
Signing time: Tue 14 Oct 2025 19:01:59 +0000
ROA not before: Tue 14 Oct 2025 19:01:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d5:91:63:42:f2:41:6b:db:da:35:46:27:48:55:a7:a5:0c:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:01:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=386ae8e0a3b93a00cc1eb02a2126a7dc38ed213d0990c9634c4f8c30c18b5e4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:44:68:9d:c9:b8:dd:0c:81:f7:5b:71:44:
b5:07:a2:93:a5:fa:1a:a5:b3:a3:05:58:ae:9e:21:
79:58:4c:24:b9:0d:a4:b9:d2:87:f8:8f:5e:2c:8b:
fa:7e:02:64:8a:4a:a7:ef:4b:86:e8:a9:cc:1d:ba:
de:ce:0a:98:ac:50:15:18:fe:fd:a2:31:0f:f8:c0:
d1:47:54:e8:f6:5a:5b:1c:14:ce:d0:06:97:52:19:
29:79:63:d1:d0:d0:08:f8:a2:03:11:c0:78:10:7a:
39:6c:2a:e8:7d:92:6b:45:97:f6:c2:75:37:57:74:
1a:87:cc:36:13:7d:71:62:86:56:11:b6:97:dd:ec:
65:84:81:2c:34:01:ee:44:31:57:6a:df:77:b0:95:
c8:7f:81:94:d6:59:e9:59:ca:ec:69:82:12:fb:c2:
0b:33:89:81:bd:92:5b:87:a6:d7:65:09:b1:3e:0a:
78:a4:0d:bd:09:45:c3:29:7e:8d:44:55:36:d4:f3:
4b:05:0e:4a:79:5f:ba:66:0d:36:61:52:0a:d5:d3:
e9:e7:e9:bf:1d:ea:d9:23:57:eb:fb:b2:bd:1e:5b:
8a:f5:16:01:4b:19:96:8b:bd:ae:ff:58:c5:50:5b:
6e:5d:4f:65:b0:e3:01:59:9b:6c:d7:5e:78:02:64:
84:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:6B:FB:40:8A:84:3A:3E:4B:0F:29:26:53:39:82:F8:98:1A:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20dfdf70-777f-423c-aadf-b8ef9133f3c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.145.0/24
Signature Algorithm: sha256WithRSAEncryption
19:15:fe:44:40:31:f2:47:3a:db:4f:2c:8b:2c:5c:58:c5:c7:
01:47:44:ed:cc:37:97:7e:20:0a:bc:0f:99:f0:9b:e1:de:39:
ef:b9:44:f9:d0:ca:e6:91:b4:0b:f0:d6:5d:b8:4a:43:20:db:
e9:d7:36:88:ca:25:1a:7f:5d:69:08:43:74:89:d0:07:8e:16:
d9:d7:24:17:ed:df:fd:7d:c6:f9:b7:c9:4e:59:0c:7c:58:13:
35:f2:35:96:b3:9b:3d:76:91:68:76:51:88:1c:cf:ad:31:6d:
5f:2d:eb:00:4c:68:7b:c0:4d:4e:06:58:f1:10:2e:94:af:54:
9b:3c:c9:69:17:1e:fa:0f:02:1c:ce:f6:29:bf:2e:77:59:c0:
76:52:3d:74:0f:21:f6:8a:81:18:a1:1d:ba:20:31:65:56:b0:
ea:72:69:39:ef:ec:83:de:26:41:d1:8a:f2:ab:66:30:d0:d0:
87:68:0e:b7:1f:01:70:9b:6d:fb:46:d1:32:f0:f2:ac:83:59:
ee:84:36:75:fa:5e:7b:8f:28:6a:bf:25:94:47:b1:e1:ff:7e:
1d:05:78:84:e3:5a:47:24:f4:49:13:0d:ad:77:e1:43:4c:d2:
88:9c:98:47:6e:8a:dc:47:84:1f:2a:e4:89:b9:28:15:78:62:
f8:4e:da:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:25 2025 by rpki-client