Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2337714e-0d78-4480-970c-c8c01e22eaf4.roa
File: 2337714e-0d78-4480-970c-c8c01e22eaf4.roa (raw, json)
Hash identifier: js6fiu2RDy9HwGbJJWPaq+mHnIS3zCelkRM7wFDr84g=
Subject key identifier: 2E:3B:A6:DF:A9:C6:FB:ED:EA:1C:99:4B:BB:F8:1F:E2:93:98:4D:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AE792007CFA029A6E56CCA7A89FC1C4CE9F77B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2337714e-0d78-4480-970c-c8c01e22eaf4.roa
Signing time: Tue 14 Oct 2025 22:40:21 +0000
ROA not before: Tue 14 Oct 2025 22:40:21 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e7:92:00:7c:fa:02:9a:6e:56:cc:a7:a8:9f:c1:c4:ce:9f:77:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:40:21 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=ada9bca077152d5c9e102fe33e8159d24a24c5b1908fccf33cfa63ffbeda47f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:06:0a:a0:8b:22:44:16:4f:e7:31:2e:8a:
3d:4b:7c:b6:e0:24:2f:e6:df:90:8b:14:1d:e5:3e:
ef:da:ee:db:74:70:6b:e3:9e:06:80:b4:f1:48:26:
e2:c3:fc:e0:5a:e8:11:c5:68:9b:35:a7:aa:a1:95:
dd:63:c4:b3:98:4f:40:fb:17:78:f1:fb:9a:72:41:
7e:bd:48:92:4f:b2:51:1a:b7:f8:02:03:75:30:90:
d8:dc:50:2e:4b:9b:80:21:af:08:22:41:f5:bf:e6:
30:42:fb:46:26:73:c0:d6:93:3f:dd:38:e8:c8:2b:
b2:b9:d3:19:61:22:58:e5:98:f3:55:c9:45:c9:9e:
6c:1e:33:b2:7a:b4:16:f6:bd:c0:e7:10:01:ee:84:
1f:09:16:76:f3:ec:bd:9f:83:21:06:fb:22:07:a4:
12:b5:72:a0:8c:23:27:36:86:72:d8:76:5d:92:1e:
8e:7f:ac:53:75:c3:5e:02:fc:2a:f9:77:fb:56:a0:
19:5a:03:9c:23:4c:68:37:c4:e8:cb:94:af:60:69:
25:81:34:05:69:18:ff:91:09:d3:87:fa:bd:7e:fa:
d8:30:d2:35:99:a3:06:c9:44:23:46:21:91:ac:04:
c5:0c:46:a9:aa:7c:ce:d5:99:84:da:eb:c5:6e:24:
c4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3B:A6:DF:A9:C6:FB:ED:EA:1C:99:4B:BB:F8:1F:E2:93:98:4D:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2337714e-0d78-4480-970c-c8c01e22eaf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0a:94:2c:af:39:e8:ab:52:40:e0:5b:24:80:29:2d:3d:fe:01:
da:8c:1c:e1:d2:06:4f:8b:bb:4c:89:69:98:fe:83:65:77:0b:
74:78:a2:cc:86:43:8e:48:e6:11:18:cc:6b:d8:23:17:a5:24:
a3:a7:c2:01:2f:87:f3:fe:e0:5b:62:af:3a:e1:41:9e:9a:bc:
a3:7c:78:ae:29:89:c1:4a:ce:9d:43:82:e9:27:47:01:e1:40:
ca:22:7a:f9:f0:90:f6:19:5f:b3:06:ed:1e:53:19:5c:a5:63:
e1:f7:8c:34:6d:f1:9e:b4:80:ae:15:41:9f:ce:ae:9f:99:df:
43:f4:08:bd:c9:da:8b:43:ed:fa:ae:eb:fa:a2:d6:4d:83:13:
1c:61:75:02:99:9f:45:e6:f0:2e:b4:95:ff:3a:2d:b3:04:9e:
5e:2d:56:72:3b:a4:3f:81:fd:2a:96:a0:08:a1:a6:1f:d3:1a:
55:39:4e:da:be:24:98:f4:98:ca:20:fd:b2:eb:f3:d1:41:55:
15:24:d1:5e:ce:aa:ed:e1:2f:90:d8:2d:ae:42:bc:8e:3e:f4:
b2:30:22:09:47:69:49:f6:a8:33:72:68:c5:0f:6c:01:52:6f:
be:68:69:a8:1b:9c:62:6d:14:40:41:e5:a7:ab:02:4a:05:c8:
4f:80:ef:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:12 2025 by rpki-client