Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/578274f0-d301-4e0a-aa62-f5df69cbd8bc.roa
File: 578274f0-d301-4e0a-aa62-f5df69cbd8bc.roa (raw, json)
Hash identifier: vWvDHcBYx1Hgmrow6VCt3xard/JikcMPs9YnDKOVEBY=
Subject key identifier: 07:D7:0F:DA:C3:07:11:BF:20:0A:C2:1F:D9:36:BF:04:A0:CE:7B:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31439291221E5FE30A1C949FE1C66DB6FFCFF56F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/578274f0-d301-4e0a-aa62-f5df69cbd8bc.roa
Signing time: Tue 14 Oct 2025 20:40:14 +0000
ROA not before: Tue 14 Oct 2025 20:40:14 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:43:92:91:22:1e:5f:e3:0a:1c:94:9f:e1:c6:6d:b6:ff:cf:f5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:40:14 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=af63d5bf58aea79f085aa4c31ca7346ac9358bc590c3cf14e487d87cd977aa48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:b8:15:5b:aa:91:15:43:a2:e5:2f:f6:83:
12:0d:c0:1c:0f:2b:59:d2:f3:cc:ae:d1:40:bf:73:
6e:73:f4:77:d8:ed:cf:fc:af:0c:ff:67:1f:15:57:
8c:f3:d3:4f:3b:b7:c6:01:e7:aa:db:1b:ac:62:d9:
c3:36:c3:d7:6f:9c:84:13:f7:e7:cb:78:43:ca:ef:
1a:98:4c:ab:e3:c6:a0:a2:fc:0e:69:b4:68:e8:a5:
21:2d:2c:6f:22:79:07:a3:ea:b8:83:19:bf:c5:fb:
3e:92:4b:80:31:2c:3b:84:17:b4:50:53:6a:7c:fb:
9f:78:3d:eb:ea:f9:dd:eb:3e:84:9f:3a:0b:c7:ac:
13:4f:dc:4e:86:c3:e6:d4:7a:c5:6d:2d:a1:28:47:
c2:2a:11:3a:4d:af:f9:17:d1:54:74:62:c4:96:d2:
30:87:be:38:e9:61:84:b6:20:26:9f:a5:1f:bb:8e:
4a:75:26:c4:a3:78:9d:d8:cf:37:cb:b5:82:6b:5e:
ec:d6:af:b7:1b:df:3c:35:69:f6:5a:3d:42:c6:c4:
d0:39:c0:6f:b4:a0:b7:22:40:78:1f:d0:c9:80:85:
72:a6:96:43:69:27:d2:b4:5b:35:05:1d:11:df:d0:
72:9a:f2:29:aa:b4:b4:a6:37:7e:81:f0:e7:b8:df:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:0F:DA:C3:07:11:BF:20:0A:C2:1F:D9:36:BF:04:A0:CE:7B:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/578274f0-d301-4e0a-aa62-f5df69cbd8bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:82:37:93:35:0f:8a:a9:f4:07:7d:bf:95:83:38:98:7c:40:
d2:22:c9:51:fe:00:c5:ff:3b:e6:98:9f:49:f9:e9:b7:54:89:
56:66:4a:54:5d:33:27:21:60:aa:3f:8c:dc:c1:83:81:a5:cd:
b3:d2:19:10:cc:b3:a6:e6:1f:e7:8b:38:2c:01:5f:34:4a:ef:
7a:b1:a0:85:f6:09:25:03:57:02:00:59:0c:a1:a9:52:f4:9f:
9e:3e:a6:fc:1b:f0:cb:38:6c:9d:e0:d2:6b:ec:42:06:37:52:
bb:99:d6:48:08:10:75:cf:c4:09:74:8c:c6:0b:6b:34:7a:e6:
24:46:b1:2d:8b:df:3f:08:5f:ba:9a:bb:66:ec:94:1e:dd:83:
e9:d9:8c:5b:f2:22:c4:c1:ec:8b:a1:09:3b:20:b3:8a:33:9c:
05:d9:ac:d8:3d:0c:ab:94:30:04:6d:3e:df:b1:cd:81:b4:65:
32:7e:75:e5:f9:38:52:93:2c:4e:e9:d1:f9:a4:0a:3b:2d:05:
90:1f:82:b4:b8:90:98:fc:d9:d6:dc:77:1c:e4:89:46:e8:bd:
7e:3b:5a:45:da:7d:8d:b6:9d:fe:3e:b9:b3:41:1a:d7:e8:39:
ec:fb:be:de:63:d8:35:f4:46:74:49:c6:05:56:12:4a:f9:69:
48:43:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:29 2025 by rpki-client