Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
File: 485de5b9-0523-48f0-9708-9ab9fb5668bd.roa (raw, json)
Hash identifier: oCDwV0PW07DgUIHq9MFx69TkLXOmUse9t1+i5sKFj7w=
Subject key identifier: BB:F0:35:AB:CE:61:BB:2D:12:52:D6:AE:B7:50:9B:31:A4:24:1E:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32F99424F1A4EAEC20E40996896F72EA23BEE592
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
Signing time: Fri 03 Oct 2025 00:52:09 +0000
ROA not before: Fri 03 Oct 2025 00:52:09 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f9:94:24:f1:a4:ea:ec:20:e4:09:96:89:6f:72:ea:23:be:e5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:52:09 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=312c4c432931b885e1d98616b82ae51b853c56a5397394ae218d139886e39781, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:6b:17:1a:c1:b0:18:eb:0b:12:af:95:e4:
bc:84:43:9c:42:45:73:f5:a3:c4:ea:a8:03:18:e8:
d7:e6:5a:59:75:7e:36:0d:47:d8:9a:0d:6d:14:2e:
30:28:c5:bd:ce:1f:af:53:f3:b2:08:8b:d9:a1:b7:
b3:1c:75:8b:54:e7:7a:af:30:a5:58:ed:8e:37:be:
30:5f:25:be:85:27:97:46:c4:4d:ec:b3:24:e4:f2:
fa:0d:14:f7:76:8e:46:ed:82:d6:bb:d0:6e:fc:78:
b0:03:38:bf:c3:c4:13:94:65:a5:18:88:3d:5c:6a:
69:6f:da:83:83:19:c8:4d:3d:d9:0c:02:27:ee:2f:
57:21:4a:87:13:83:3a:65:00:6b:6d:81:89:79:1e:
f6:2b:b8:9f:b3:bf:83:e0:cd:a8:10:30:9e:37:44:
cc:7c:e7:b6:62:0a:78:c5:c1:70:db:39:46:02:6c:
75:0a:9d:af:cb:4a:39:19:d6:3a:91:8e:30:29:1f:
88:67:f5:94:31:34:87:9f:8a:35:ea:cc:f7:2b:ae:
62:3e:2c:68:1e:7c:d8:d3:57:06:5c:da:66:1f:0a:
ee:a1:2d:07:6f:23:5d:1e:27:a7:c1:94:9f:47:bb:
b6:b7:d7:7d:c8:11:e4:d7:57:49:41:85:91:4f:26:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:35:AB:CE:61:BB:2D:12:52:D6:AE:B7:50:9B:31:A4:24:1E:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/485de5b9-0523-48f0-9708-9ab9fb5668bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:79:6d:22:b9:5d:d8:55:79:d0:69:1b:b4:44:e9:af:d0:29:
9d:fd:89:8b:d2:60:57:d0:fd:f3:33:12:74:6e:63:8d:65:ec:
cf:b0:7e:df:6f:46:6c:62:c4:ca:b4:71:77:b8:d8:62:2c:57:
03:1a:0d:67:08:f2:e3:7e:48:74:aa:70:55:6d:9b:ff:f4:1b:
fc:02:98:ce:de:cd:aa:21:82:d1:de:c4:e9:07:57:af:1f:e4:
d2:b2:ff:44:84:8e:5c:1d:6a:66:1f:b9:5e:1e:6b:d3:c7:38:
f9:b1:2a:15:94:55:fb:3c:0a:a9:db:d1:9d:bf:ca:28:93:97:
08:c6:e5:00:0f:ef:03:1c:e8:77:8a:f5:df:85:44:db:a0:01:
53:b3:c4:9e:bd:e6:6a:71:5f:13:df:70:d5:66:b2:23:ea:38:
89:3a:eb:52:d4:8b:68:b8:70:a4:54:53:d7:cb:4d:e2:c1:5a:
af:88:1c:3e:ab:df:bc:0f:28:70:82:f3:b9:af:96:4e:5c:e6:
50:b7:f8:ef:d9:30:d0:c4:54:3b:a4:90:71:42:69:db:52:9d:
e0:7a:83:71:f3:51:39:65:03:21:84:4c:10:9b:3b:9b:c6:f5:
93:68:1d:dd:81:40:d6:cb:c4:ba:d3:27:f8:bd:34:13:37:01:
b1:88:82:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:51:00 2025 by rpki-client