Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
File: 51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa (raw, json)
Hash identifier: PK6/x24RioNIxJPlGvM5oHg/oW0zwwRuKh6GfXy59I4=
Subject key identifier: 53:CE:FA:8D:1B:44:00:43:02:61:B9:D7:BF:A1:8A:E8:26:DB:E5:FC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B7001744D95B5DDF9B242F9F321FC9DFEAC22D0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
Signing time: Wed 01 Oct 2025 00:51:16 +0000
ROA not before: Wed 01 Oct 2025 00:51:16 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:70:01:74:4d:95:b5:dd:f9:b2:42:f9:f3:21:fc:9d:fe:ac:22:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:51:16 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=bae868b9ff6aeb03f5883d6202eacf766a215bd8c3d0caf47dce30c38791b909, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:4f:da:57:0f:9e:3f:b6:28:a3:72:fe:03:
e2:cf:38:d8:1e:af:21:d8:93:34:45:f6:8a:99:fa:
33:b2:2b:20:e1:7f:a5:a0:1e:9d:4e:9e:2d:36:ef:
3e:f7:72:42:36:73:1d:29:53:ef:61:5c:5e:31:d3:
c4:4f:18:76:a1:f4:c2:20:7b:13:91:ac:12:ea:3c:
4f:e0:12:2e:8a:a3:2f:aa:f1:66:78:d0:5d:2f:98:
03:f3:97:e5:e0:ff:51:68:4e:b8:f6:3d:c8:33:d7:
a6:a0:2f:62:6b:6b:e3:ee:eb:6a:3b:02:1e:78:72:
c9:d7:83:3d:e6:5e:80:2f:3f:ca:39:27:c4:36:2e:
91:6b:45:67:e5:27:38:62:00:98:33:91:b5:9b:45:
e7:80:4e:01:0c:cd:0d:d8:d4:57:e7:5c:7a:da:78:
76:c1:6d:e7:95:2e:f1:19:34:fc:d8:be:be:3f:8b:
50:66:76:fc:38:3b:92:d3:29:10:4f:a6:67:88:ee:
1b:92:5e:37:12:d0:f0:22:32:ce:12:33:3e:52:b6:
65:21:f9:e1:82:78:15:b8:48:09:ee:ab:81:a9:5e:
ba:dd:63:84:c0:8c:97:28:ab:97:ea:80:2d:4d:41:
e8:1d:c5:82:fb:37:74:23:ad:b4:70:b1:06:b5:21:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CE:FA:8D:1B:44:00:43:02:61:B9:D7:BF:A1:8A:E8:26:DB:E5:FC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51da4dbc-78d8-46ad-8bd3-69eddb3a96eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.248.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e7:de:b4:dc:26:3e:7c:e1:db:10:19:30:2a:d0:04:ef:4e:
23:78:1b:67:d3:67:b6:9b:f3:1e:d1:42:03:75:fd:0d:ff:79:
20:ff:c3:ad:ed:30:aa:b7:49:8d:75:3a:54:6f:2b:98:cf:74:
92:7b:64:85:1c:ad:e0:ed:48:3c:9b:60:7b:bd:57:ac:39:1e:
b2:46:b4:a6:f5:e9:ea:48:b9:bb:9c:94:d6:b0:86:c7:23:f6:
67:d3:12:62:c5:54:09:7b:5e:f0:3d:8f:5f:09:97:14:14:a1:
02:c4:bc:4f:fc:56:04:7d:22:c8:be:b9:c6:63:5c:12:8c:2d:
42:09:53:a0:35:41:96:c5:3d:d4:2d:dc:be:fe:09:82:9c:ce:
39:86:a7:d6:74:90:7c:97:08:bf:56:79:ae:2b:19:59:be:d1:
24:38:3a:a2:0c:51:0e:f6:a2:09:5a:81:a9:88:60:c3:fe:25:
b0:11:37:bd:e2:51:a4:4b:05:78:4a:58:66:d3:4e:45:4f:c0:
58:2e:c0:77:ee:05:eb:ec:ed:b7:a1:f5:27:a4:87:0f:75:4e:
3a:91:92:06:55:0e:f5:06:2c:33:98:16:20:0a:c7:68:3a:24:
64:4c:8d:cc:e5:5c:f0:61:0c:83:9a:e9:2d:b4:8d:1f:3d:bd:
ee:61:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:41 2025 by rpki-client