Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a44b738-14f9-4dfb-aa48-d7bd67acd168.roa
File: 3a44b738-14f9-4dfb-aa48-d7bd67acd168.roa (raw, json)
Hash identifier: X7bSxSfl73Jl7V9/N+TO4GZ7ORaoDsLLkEcjqcRM+0E=
Subject key identifier: FC:9E:47:5C:89:95:FA:AE:6B:89:AD:96:48:75:9B:16:F9:9B:7B:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53E6B4DD56AF98EB25E2FC18D7884B108779016A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a44b738-14f9-4dfb-aa48-d7bd67acd168.roa
Signing time: Tue 14 Oct 2025 20:42:45 +0000
ROA not before: Tue 14 Oct 2025 20:42:45 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:e6:b4:dd:56:af:98:eb:25:e2:fc:18:d7:88:4b:10:87:79:01:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:42:45 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=618547b6b195c14d4f5378a26fc7d4d80d3fdfba52fdbd23a1d536815feaad5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:72:f4:1f:7e:81:ab:0b:3d:e3:5c:8d:62:
d2:1f:70:ff:af:9e:db:99:80:90:70:07:e1:73:9c:
48:c2:23:37:7e:e7:c0:13:d2:45:1e:5d:33:89:d5:
1b:ef:49:eb:a0:db:9e:84:4f:54:42:22:a9:8b:00:
de:5a:36:42:68:08:40:2c:5e:13:18:47:66:a6:78:
9c:18:34:a5:4b:a1:7b:e3:51:dc:77:b0:de:e4:61:
75:14:20:73:9a:70:47:df:c2:23:ce:c3:a7:a5:df:
be:28:68:85:29:cb:3b:dc:6b:70:0c:db:df:d1:ae:
6e:85:19:70:23:d1:65:85:75:74:4a:a0:58:28:96:
d6:bc:17:fa:c3:8a:2f:be:32:44:6f:fb:4d:4c:99:
12:3c:5b:d9:87:58:77:19:08:9f:ee:53:0d:ff:6b:
cd:5d:3f:1a:1e:75:ec:2f:28:ee:f1:30:3b:ab:0e:
b8:04:ad:f8:9b:df:0b:67:1a:56:5d:63:d7:58:2b:
c9:de:ca:3c:62:1d:6e:bc:02:cb:07:4c:b5:8e:3f:
cd:51:29:ce:5f:da:2b:9d:34:9a:5f:d1:02:62:15:
c1:c1:26:63:ab:2b:37:78:9e:97:0e:de:17:22:0c:
54:c9:a9:67:c5:5c:3b:df:3f:fa:01:c3:da:5c:8b:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9E:47:5C:89:95:FA:AE:6B:89:AD:96:48:75:9B:16:F9:9B:7B:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a44b738-14f9-4dfb-aa48-d7bd67acd168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:51:3f:f2:78:6e:8a:a5:9d:95:f8:70:dc:df:98:5e:1e:3c:
39:16:b9:0f:91:3a:22:cf:47:22:d0:c1:ad:f2:15:be:dd:54:
96:39:2a:4f:64:3f:14:9a:48:37:cd:8e:85:a7:be:7b:03:77:
ee:c9:a2:d1:82:4a:cd:57:dc:d2:1d:50:12:60:cc:dc:5e:db:
6d:bd:05:32:a7:9a:e9:dd:2d:0c:37:7d:44:f4:32:eb:ad:09:
1b:91:f2:6e:66:53:98:07:66:5d:c2:1d:62:9f:33:32:b0:58:
f8:b3:d7:ab:21:1c:66:80:67:d7:90:ec:91:8e:4b:89:c2:58:
0b:c8:e5:ff:fc:42:75:1c:5f:af:4c:2b:70:88:e0:43:32:09:
6b:9a:25:07:83:71:21:b4:9b:bd:f6:52:d6:b4:2c:a8:30:3f:
40:42:c5:e5:25:9a:e4:21:52:d5:2a:e6:b2:85:6b:f7:ed:80:
76:e4:da:47:88:42:de:95:0b:24:c9:b7:75:6f:15:f6:92:15:
a2:c6:98:6e:70:68:72:59:8a:d1:de:fd:52:06:cd:72:e7:61:
6a:84:77:a0:15:cb:e5:3d:39:be:2c:bc:3e:f1:26:9f:b3:a7:
82:63:2a:02:d1:af:82:8d:c3:f2:40:e0:02:ff:d6:79:42:ac:
9b:88:d5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:04 2025 by rpki-client