Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c8ac01-27eb-4e84-ac67-aee368e54da8.roa
File: 23c8ac01-27eb-4e84-ac67-aee368e54da8.roa (raw, json)
Hash identifier: cUR8F2fF7t0SNKu8o5TALNp6DVJjJQp1ot7zpcBwQ80=
Subject key identifier: 2C:D3:C7:FB:70:B5:CE:B5:C8:4E:65:4F:FC:0D:D2:8A:DD:FA:9C:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 599122C2A91B1AFD48A39FA48321CDD9C31214C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c8ac01-27eb-4e84-ac67-aee368e54da8.roa
Signing time: Wed 15 Oct 2025 16:12:05 +0000
ROA not before: Wed 15 Oct 2025 16:12:05 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:91:22:c2:a9:1b:1a:fd:48:a3:9f:a4:83:21:cd:d9:c3:12:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:12:05 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=138f20b1e1509b72eb2cce91a1e3b09e149c5a2988bab764b2caa198b9ca3530, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:c5:31:8d:f3:c5:c5:05:1a:80:5f:35:ce:
bd:6b:d2:de:9d:b1:74:70:12:56:a2:3d:04:db:62:
37:cd:fe:05:0b:5a:d4:4c:c0:18:16:31:71:d3:f7:
90:fe:ac:b3:0f:50:c4:de:a9:55:67:98:9e:b2:89:
0f:1f:76:91:82:f1:8f:73:6d:a3:95:ce:c6:be:28:
c9:ad:d4:99:17:b8:a2:8e:35:30:f2:31:74:46:64:
e9:58:bc:bd:98:c8:66:9b:4e:96:d9:c7:d5:8c:f3:
fd:fd:3d:03:0e:06:29:5b:9e:28:78:03:ef:48:61:
e2:3a:6d:0b:a9:0c:9e:71:38:6d:9f:bb:ea:5a:98:
c1:5b:74:11:76:be:8b:ef:4a:31:cd:1b:35:12:5a:
aa:4a:a5:80:63:65:21:f7:d1:99:81:3d:e9:c2:6a:
ff:72:87:94:4b:46:96:a9:96:a8:63:b6:bc:10:af:
44:3d:a4:23:9d:6d:2c:96:52:d0:76:cf:9b:a8:a6:
c9:20:b8:ba:72:bb:bc:ec:17:81:b5:6e:e1:b7:d3:
32:3d:63:53:44:25:bd:d8:86:ee:52:6e:ed:5d:8d:
01:c4:44:b7:cf:1a:31:4b:f5:b7:61:ab:8b:41:87:
40:cf:72:f3:2d:c3:c8:aa:b3:4b:95:e1:3b:ae:7b:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D3:C7:FB:70:B5:CE:B5:C8:4E:65:4F:FC:0D:D2:8A:DD:FA:9C:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23c8ac01-27eb-4e84-ac67-aee368e54da8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.141.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:0c:3a:be:0a:72:c4:cc:96:11:66:3a:02:75:f1:35:2c:f5:
98:d0:fa:73:a4:b2:aa:89:d1:84:77:ac:e9:32:ff:d6:3a:c6:
b7:95:bd:85:8e:a6:56:e1:30:73:a2:71:44:69:95:16:66:13:
7e:c0:49:53:f7:06:ee:d5:ec:8e:35:69:44:12:1b:cb:7f:83:
78:ff:21:6e:80:38:36:48:be:94:ee:6b:bb:9d:42:83:fd:53:
9d:8e:6a:25:7c:1b:c9:82:5b:e3:95:a5:1f:6f:ee:f6:95:d4:
a9:52:b1:3a:ca:03:54:46:f1:81:91:0b:71:05:43:ec:9d:ef:
ae:11:3d:66:a7:67:07:07:c1:29:ce:4c:8b:29:3d:8d:fd:13:
da:94:f3:c9:7d:a0:cf:8e:c2:42:60:27:33:00:e8:64:63:44:
4a:64:ba:37:cd:bd:a3:2b:18:ce:1f:35:ad:87:89:87:97:bd:
ef:5a:52:9d:ca:7a:92:82:00:98:7b:11:12:fe:d0:39:51:4e:
64:0f:f3:1e:18:5c:53:3f:74:5d:43:90:0f:14:c9:2d:40:53:
72:2e:84:f2:07:03:3f:4c:ea:45:ca:64:a5:04:45:a7:db:ba:
c1:28:b2:f2:c1:7f:04:4c:59:68:bb:04:40:83:33:c0:44:8a:
23:06:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:22 2025 by rpki-client