Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae743b4-01e3-4f26-9310-0593622a97f1.roa
File: 4ae743b4-01e3-4f26-9310-0593622a97f1.roa (raw, json)
Hash identifier: IQh/qtzNYG+dhBPCtiZnBJFVoedDC8Id1eF5hwnvd/A=
Subject key identifier: F1:34:51:81:F8:76:CE:5B:BD:42:A3:6B:C1:1A:22:AF:85:E5:9F:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B874E1523C8CF142B312CEF2AF8E0997311485A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae743b4-01e3-4f26-9310-0593622a97f1.roa
Signing time: Tue 14 Oct 2025 23:21:13 +0000
ROA not before: Tue 14 Oct 2025 23:21:13 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:87:4e:15:23:c8:cf:14:2b:31:2c:ef:2a:f8:e0:99:73:11:48:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:21:13 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=8f2369ed862a8c9f702704051ecdae11f94080c41a6b178d78ef9e31b1a83970, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:a0:18:c3:ea:3c:57:d0:c4:67:07:59:44:
87:f8:c6:40:13:32:bf:5f:cb:63:c0:23:fd:45:7a:
c4:fc:b6:f0:41:83:52:11:21:b9:10:22:2e:ce:d5:
2e:77:e6:42:5c:da:20:6a:05:4e:30:39:32:3e:46:
dd:13:f8:b5:f5:ee:84:3f:9b:18:b7:1f:44:12:1b:
18:ad:70:43:a5:b0:2f:74:c5:0c:3d:bc:cc:81:1a:
58:25:18:23:a2:65:93:5a:7c:4e:7b:f0:f5:85:7c:
dc:21:16:3c:6a:c5:91:80:ec:c6:46:98:af:e2:5c:
51:24:08:a9:d8:bb:90:57:8a:72:c6:24:f7:ff:4a:
14:a6:86:67:11:3b:2e:01:55:0d:21:8f:6d:a6:9b:
bc:34:87:9d:6e:d8:61:29:8e:d3:37:6f:73:53:1f:
12:91:e8:eb:61:6d:a7:e8:32:46:6a:af:44:42:83:
11:12:78:46:a5:ee:af:63:75:ad:54:b7:2f:d7:66:
4a:8a:ec:23:f8:b4:7a:66:c3:b8:88:32:5f:e1:3f:
ab:0d:25:87:10:bc:53:0a:f0:ac:82:57:fe:da:59:
18:36:35:62:58:59:86:11:10:8c:2e:3a:99:01:50:
e3:3b:66:30:1b:a3:88:34:9a:e0:f0:9e:cb:d6:fc:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:51:81:F8:76:CE:5B:BD:42:A3:6B:C1:1A:22:AF:85:E5:9F:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ae743b4-01e3-4f26-9310-0593622a97f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.200.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3b:c1:88:46:1f:86:97:1d:ff:86:4e:5c:08:e7:82:1e:a9:
3f:de:21:83:58:e3:85:d4:b6:19:a9:b2:bd:f2:fc:59:f0:df:
f8:9f:27:20:11:5e:e8:83:83:d7:d6:b3:05:68:ef:9a:8d:34:
88:31:24:cc:15:44:2d:b4:b2:d4:9c:fb:33:c3:b1:aa:9f:72:
2e:96:5a:b7:d0:a0:d7:af:a0:65:8b:46:f5:6f:fa:09:47:19:
68:86:99:e5:99:a5:20:d4:f5:c2:00:0d:84:f4:2b:79:b1:d7:
95:97:6d:b1:4c:80:d9:46:db:1b:d4:40:92:3d:c2:44:57:87:
ac:57:d1:9a:53:23:e4:3b:dc:5c:27:ba:a1:a5:48:56:f9:59:
e8:09:16:0b:62:7f:8c:be:ba:71:7f:59:dc:a8:a3:3b:59:c7:
4b:26:ec:87:97:04:7b:f2:18:94:a6:d9:47:91:84:3c:61:59:
36:64:64:71:6c:6f:3e:30:2d:c5:7c:b7:a5:18:f1:03:c7:c6:
dd:46:9a:ca:25:e3:c2:0b:43:38:08:d0:2b:c4:08:b7:b2:31:
73:0e:b1:61:d3:66:cb:7b:6f:c7:7b:1c:8c:b2:ab:6c:02:c7:
d0:ac:3b:5f:dd:d9:d6:e4:bd:3d:33:3c:c7:22:d9:3d:72:da:
b4:83:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:40 2025 by rpki-client