Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c220fd2-9b01-40b2-a0b1-c32779e1d6a7.roa
File: 2c220fd2-9b01-40b2-a0b1-c32779e1d6a7.roa (raw, json)
Hash identifier: rpB3UabrMAzn8pDxKtzL3Tcd3IutHSWNpzQ/5ub1OlU=
Subject key identifier: E6:42:7E:DC:EF:E8:60:FE:CA:47:4C:40:A6:4F:7C:60:24:88:D0:9F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 60E1E35939312C0C90FBA49401258D91151F18D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c220fd2-9b01-40b2-a0b1-c32779e1d6a7.roa
Signing time: Tue 14 Oct 2025 20:52:02 +0000
ROA not before: Tue 14 Oct 2025 20:52:02 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e1:e3:59:39:31:2c:0c:90:fb:a4:94:01:25:8d:91:15:1f:18:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:52:02 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=5f4ae8680091430346308eb70c6b5fde77eabfb9c1059759b6f1c221b7e2033b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:e2:47:16:7d:bf:7d:25:9f:84:af:f6:a1:
7f:d5:d8:26:42:9c:dd:1b:d0:3e:f5:a1:2d:13:99:
cb:7a:31:20:35:6e:4f:ab:f4:c8:f9:bb:e2:29:d6:
1a:e6:34:09:9a:d8:6f:67:29:67:31:44:be:20:7e:
d4:72:6b:1c:28:74:08:fc:e7:ae:8a:90:e6:7d:24:
8f:3b:28:e7:47:e4:7e:9e:b5:df:47:42:52:8c:f9:
f6:05:7d:14:09:fc:04:eb:ba:e8:45:58:cb:91:65:
0a:1b:e4:ff:ff:91:af:37:1d:d5:65:1b:91:4b:59:
43:50:25:7b:3e:b8:ba:22:d8:08:16:e2:63:1b:e2:
e7:5f:65:4a:8a:ab:a6:6c:5f:a8:a4:43:ae:ec:a1:
51:6b:1c:2d:df:81:c1:a2:10:a1:90:fd:57:3b:5f:
86:a5:22:4a:80:3c:3c:8c:a0:7e:07:8f:1a:b4:02:
e9:27:07:b7:f2:46:dc:79:77:16:a0:69:35:57:d1:
02:94:a7:a8:80:27:5c:33:11:bf:c9:6f:34:b5:73:
0f:43:eb:76:8d:87:89:02:b8:01:ea:45:be:a2:84:
52:80:d8:cd:3d:b7:71:0d:67:92:38:57:f7:6f:e4:
04:a5:1a:fd:54:29:73:9f:21:59:cf:8a:f8:9b:bc:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:7E:DC:EF:E8:60:FE:CA:47:4C:40:A6:4F:7C:60:24:88:D0:9F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2c220fd2-9b01-40b2-a0b1-c32779e1d6a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:48:63:bb:ea:06:ec:f2:9c:95:86:60:5a:e8:b6:7d:82:c9:
df:29:9d:79:47:41:61:02:7d:8e:6d:4a:88:af:ed:67:b3:d0:
fd:e7:40:a1:0d:95:2f:5a:89:4f:62:2d:24:be:18:48:98:df:
c9:0c:30:eb:05:38:45:79:b7:ec:52:d9:27:58:76:27:a3:4c:
a3:2d:1e:73:ac:7f:a3:f9:2c:76:8b:6f:e7:64:35:b7:f9:1c:
7e:86:0c:3c:1e:a9:c0:82:e5:8f:b7:b6:74:a6:49:a3:fb:d4:
94:15:f4:2c:2f:ae:a4:c7:ff:c3:7f:a9:00:dc:7a:6a:d3:b8:
a9:86:79:1e:e6:8a:84:74:bf:26:fc:c7:a0:79:1a:10:1e:fa:
40:d9:05:4e:8c:3f:3e:fa:aa:ba:ed:3b:ee:10:21:7a:36:ad:
ab:6f:cc:9c:b1:f5:48:7c:64:7f:d5:09:02:70:7e:00:f7:7d:
ac:ae:18:68:bc:88:ce:46:c3:2e:87:eb:26:fa:69:c5:f6:8f:
8d:34:41:82:80:74:d0:65:51:28:ca:83:c2:ac:d2:b0:2e:79:
9e:3d:7c:70:c4:c5:2f:40:43:0c:2c:35:65:ad:5a:97:86:e4:
db:e4:26:27:5e:a8:34:11:0b:ea:53:d8:65:a6:4d:15:5d:19:
52:90:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:44 2025 by rpki-client