Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41586428-352a-4682-8023-797ef6b70e77.roa
File: 41586428-352a-4682-8023-797ef6b70e77.roa (raw, json)
Hash identifier: Xnw17O2wDqJpAKEWB47m318O+arP1ITz2JMN5AYc6eM=
Subject key identifier: D0:29:62:34:65:20:7C:C4:54:D7:04:2A:C4:7D:58:9F:F3:7D:FD:A5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F31ADB2D54D66A66E6265898F6BB219102D8DAA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41586428-352a-4682-8023-797ef6b70e77.roa
Signing time: Tue 14 Oct 2025 21:12:39 +0000
ROA not before: Tue 14 Oct 2025 21:12:39 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:31:ad:b2:d5:4d:66:a6:6e:62:65:89:8f:6b:b2:19:10:2d:8d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:12:39 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=da0097fcd04b55df1c937c46734efeda75b970aed68d2ff256217581ab6e16c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:14:e5:57:df:59:f6:a6:a3:6f:a1:0a:86:
02:51:df:54:7d:09:9d:93:36:8a:6a:ab:2c:aa:c2:
57:d7:71:db:ca:d3:10:e7:96:a5:3b:4c:50:1f:99:
f2:fe:e7:8f:9b:29:cc:91:a4:20:ba:55:bb:e7:c5:
80:a7:4b:6f:02:af:05:d2:3b:79:10:b2:f9:03:97:
58:b0:8c:22:e0:63:46:6c:5e:f1:fa:52:be:1d:22:
a6:7b:b8:d3:d1:9d:56:34:8e:b9:c1:1a:a5:2f:03:
8b:65:59:01:6c:44:9e:03:40:04:88:0b:fc:7f:79:
f2:30:cd:f8:5d:55:d3:cb:5e:21:16:65:0f:82:3b:
92:5d:67:60:f2:4c:47:c3:cf:04:b9:33:a2:5c:7c:
b9:76:96:37:6a:0d:62:ea:c4:2f:6f:5b:52:4a:61:
e9:7f:71:57:35:3d:9f:47:f6:a7:a0:6b:be:45:67:
85:10:ea:ed:f4:2f:7f:15:22:ff:60:53:42:1b:c0:
cf:54:56:de:93:cd:8b:f5:88:41:29:d2:f2:52:1f:
63:35:fc:b9:c2:27:c9:1a:3e:54:d4:e5:56:ed:c7:
88:7e:a3:20:af:64:69:cd:da:fc:b0:89:d6:cc:a4:
05:c7:45:cc:60:37:60:2a:ab:82:d9:12:92:fa:8f:
6a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:62:34:65:20:7C:C4:54:D7:04:2A:C4:7D:58:9F:F3:7D:FD:A5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41586428-352a-4682-8023-797ef6b70e77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.128.0/23
Signature Algorithm: sha256WithRSAEncryption
60:96:db:7d:19:ef:7e:7b:45:81:3b:fd:ca:17:10:ed:6c:2d:
e1:0d:f5:32:49:02:87:e6:e0:f5:83:e8:6e:eb:26:48:23:4a:
f8:75:01:e1:01:98:f7:f3:4a:bb:56:1c:3b:0a:ef:98:c1:7f:
dd:1f:87:ed:87:00:a3:bd:0a:04:00:64:67:fd:4d:33:4c:0e:
76:5f:24:ec:20:85:a6:4a:3c:5d:84:39:1c:0d:b1:42:f1:7f:
de:e9:53:ff:d3:f9:bb:ad:cc:53:c1:9e:83:66:53:48:ee:c1:
2a:02:f0:85:9f:7e:e9:bd:29:7f:13:b5:16:57:6e:7d:9b:96:
52:0f:59:8b:fc:90:f5:8e:e8:39:fc:55:ac:0d:9b:53:b2:a1:
0d:ac:4a:a8:72:b3:ad:12:39:58:79:9b:03:15:47:a6:fc:3c:
c8:b1:6a:e0:17:5a:9f:52:dd:d9:a4:61:c2:27:d7:d8:d5:ea:
45:47:b8:f0:87:08:07:04:07:a3:ea:19:4e:54:38:34:2b:e5:
ac:47:e0:18:c9:43:a1:68:76:ac:0f:c7:b1:fa:22:c2:65:f9:
41:14:f1:33:51:c8:31:06:ad:f6:95:a7:3d:d3:5b:d6:89:6c:
c1:5e:d5:27:c9:ba:72:61:88:5d:21:7d:ed:dd:7b:d9:ab:1d:
83:f0:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:21 2025 by rpki-client