Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3870ad-8ad2-440a-bd14-179ccb27bab9.roa
File: 4d3870ad-8ad2-440a-bd14-179ccb27bab9.roa (raw, json)
Hash identifier: 6aMUX5YGgU1rTCX34UuEDvVqTyOlR1Q2npD3fXkk6v8=
Subject key identifier: F5:1A:50:8A:69:D4:33:61:86:32:CD:48:3D:05:4E:00:4A:A2:F5:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F568BC4A394A9D0FD4A477FCA4D598E16EE9832
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3870ad-8ad2-440a-bd14-179ccb27bab9.roa
Signing time: Wed 15 Oct 2025 17:39:59 +0000
ROA not before: Wed 15 Oct 2025 17:39:59 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:56:8b:c4:a3:94:a9:d0:fd:4a:47:7f:ca:4d:59:8e:16:ee:98:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:39:59 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=6955337fbe5481c87b503735af39043d29dbe0dfcf376d15d35df7a129b6fa5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:a0:b2:54:f0:9f:77:90:a2:ca:30:63:bc:
73:86:c5:fd:1d:a2:ed:65:a2:44:b6:77:b6:c9:2c:
87:4a:d2:36:91:76:1a:69:2f:1b:3b:8d:0a:da:26:
19:41:c2:a3:88:19:32:24:2e:63:d4:c2:d6:72:ef:
0a:8a:69:45:33:b5:52:ea:12:a2:56:cc:44:40:7f:
03:00:e0:85:03:1a:b7:66:72:d2:18:ef:5f:54:70:
ef:15:ff:a6:54:f5:92:b0:11:d4:e5:61:f0:ad:bb:
6c:f1:10:38:d4:35:87:1e:e7:a6:8c:c0:d6:2f:77:
93:e3:bb:21:2e:36:7c:35:6f:1c:a1:5d:11:34:34:
04:e3:cd:23:88:f1:c7:d3:14:7a:02:32:c4:33:9f:
65:02:02:8e:9b:3a:41:33:58:19:08:3e:b0:ee:b0:
7d:1d:19:92:db:11:78:a1:68:b7:87:15:e3:76:d2:
2f:13:9b:ac:ab:ae:82:fd:08:01:cc:f3:e5:af:e8:
b1:15:d6:f5:dc:60:99:5c:82:9b:90:02:75:ce:8a:
f1:65:6f:37:62:b9:2e:05:eb:0b:5d:0b:50:43:e3:
dd:32:50:53:3e:d8:bd:3f:71:90:f7:22:14:2a:43:
40:dd:b5:d5:d3:66:81:c7:02:26:f5:bb:a2:66:0f:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:50:8A:69:D4:33:61:86:32:CD:48:3D:05:4E:00:4A:A2:F5:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d3870ad-8ad2-440a-bd14-179ccb27bab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:50:e6:11:bc:f0:23:e2:27:52:cd:39:a2:42:17:1f:88:f3:
cf:9b:02:e0:99:02:33:41:2d:ce:29:13:9f:4a:c5:11:9f:09:
eb:db:32:85:09:0a:76:73:2e:7f:e7:40:6b:d0:79:19:48:6b:
02:27:ce:37:ac:91:a6:da:d8:24:ea:68:33:df:82:2a:b7:71:
4e:6a:97:65:d5:2a:01:f4:5b:8f:d5:fe:c3:93:c1:34:42:c4:
df:e9:69:37:44:25:61:5a:a6:71:82:dd:93:c3:23:e0:56:ea:
f2:e1:f0:dd:d0:46:d2:a6:88:39:dd:e0:42:94:db:33:ac:f2:
f5:27:f4:be:85:58:35:4b:1e:1a:ef:d2:e3:36:b6:76:d8:26:
1a:96:74:f2:81:ba:f3:69:e0:5d:f3:67:95:99:41:2d:93:cf:
e1:3d:e7:d0:a7:de:90:59:13:e0:bd:e3:a8:7c:94:b8:4a:ac:
c6:5b:43:38:d0:5a:65:01:a7:43:df:f6:ca:0b:ac:42:54:75:
ab:4d:67:d3:e0:1c:b0:24:63:85:9e:ed:1b:be:ca:71:66:50:
cd:ef:04:ac:50:f8:eb:32:39:60:d5:0d:32:1d:b3:97:2a:87:
3c:0d:b2:46:1f:e7:8e:e3:85:f7:91:57:86:f8:b2:f6:9e:e2:
e4:3f:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:41 2025 by rpki-client