Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586db77c-789e-4f51-a7b4-24dccceb9491.roa
File: 586db77c-789e-4f51-a7b4-24dccceb9491.roa (raw, json)
Hash identifier: DPDEa2TF7U9KXwX+VJ8bvfg98c/7guxfjIrhB+2aBbA=
Subject key identifier: 05:79:C9:01:83:B3:21:8C:35:44:82:F4:E0:ED:DF:41:74:5F:37:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C25DEEE84214D5B7836FBB42AD858F541491CB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586db77c-789e-4f51-a7b4-24dccceb9491.roa
Signing time: Tue 14 Oct 2025 23:12:11 +0000
ROA not before: Tue 14 Oct 2025 23:12:11 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:25:de:ee:84:21:4d:5b:78:36:fb:b4:2a:d8:58:f5:41:49:1c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:12:11 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=7ae4fb5b3308f7729b5c04af15993bc9d230adbec03e826e78f432f6bd5f756a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2d:4d:da:91:d4:d8:9d:e1:b3:65:80:e7:e9:
73:77:fc:98:52:4e:2d:c7:6c:ef:e1:4f:af:98:8b:
5e:4f:81:f2:bf:fc:24:d1:bd:77:1f:86:ac:c3:9a:
f8:da:21:20:ec:fe:a7:ad:c6:e9:e2:f2:97:25:6c:
03:e8:37:33:31:9f:ca:68:cd:d4:10:b2:9f:24:ca:
a4:be:51:94:e9:30:56:5f:bc:57:09:a1:c3:23:65:
c3:f0:1b:a5:6b:7b:ae:c8:99:ec:5c:c6:6a:ae:57:
0e:06:99:d9:56:62:7a:98:27:d7:86:9c:6d:57:08:
2a:0e:00:e9:aa:eb:2f:7d:1f:9c:0d:15:c6:60:9e:
e8:88:1b:3a:a3:2a:50:e2:31:ef:c5:1b:3a:f3:f4:
eb:c5:aa:e8:86:aa:c8:b4:d9:1b:d3:c7:ff:24:ff:
4a:1f:cb:dd:25:bb:e3:c7:a8:ec:40:6a:d4:30:9b:
19:c8:14:b5:96:bb:ca:7e:4f:34:5d:0e:2a:78:6c:
88:19:fa:18:60:2f:1d:7b:50:20:68:25:bc:dc:b3:
a9:e8:a9:80:66:eb:8e:18:db:f7:28:c7:19:ff:23:
54:78:71:d2:e4:99:e9:91:b6:d2:c1:5c:61:04:90:
c9:f8:5f:4a:8c:18:f1:16:f2:62:27:b8:d2:9b:c0:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:79:C9:01:83:B3:21:8C:35:44:82:F4:E0:ED:DF:41:74:5F:37:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/586db77c-789e-4f51-a7b4-24dccceb9491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:ff:1f:80:88:44:08:83:41:df:e7:a9:69:c3:70:28:23:a5:
35:3e:ef:c3:3e:77:b7:45:da:bb:f9:3d:9d:94:e8:08:f5:5f:
21:64:4e:8c:ac:68:c5:b5:e1:f9:64:d8:4e:6b:e2:03:de:7b:
86:a7:11:06:71:89:d6:16:14:cb:ee:b1:54:a0:0d:af:9f:d2:
8b:ac:5a:ca:b4:80:d3:44:24:a9:94:d0:3f:b4:75:09:4e:b5:
49:66:8e:86:eb:02:28:e3:7d:3e:44:05:2a:b2:2d:c4:a5:98:
33:c7:62:a6:02:25:78:3a:02:4f:29:bb:d7:bf:0e:8b:1f:09:
90:3d:19:4f:b6:03:85:bf:0f:17:6f:b5:da:25:ef:89:cf:60:
01:3d:e1:43:44:06:08:eb:ab:9c:08:fe:60:bf:8f:5f:dd:8a:
8f:67:4d:ca:03:f1:ea:e9:83:32:c5:c8:16:f0:38:46:1b:fd:
2d:11:91:97:7f:0b:85:68:42:84:5b:48:77:fb:20:21:12:a7:
fd:92:b3:dc:09:20:41:71:b1:5c:56:84:63:e7:6c:45:e5:d9:
35:a6:0a:54:af:50:7b:cb:ea:16:37:8e:fb:7b:3f:af:f4:9e:
a7:b9:45:66:e2:eb:e1:d1:ef:5a:cf:50:af:f3:a0:d0:e3:1c:
aa:cb:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:55 2025 by rpki-client