Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/598cb82f-81a2-4108-a47b-bcd13736d746.roa
File: 598cb82f-81a2-4108-a47b-bcd13736d746.roa (raw, json)
Hash identifier: D3vU9uKoshQcgZrvY4cD0os7NLkBd8OWWMinN6Mc6aU=
Subject key identifier: 26:DA:BE:5C:0E:34:E7:D9:5E:4B:D8:BD:A2:6E:6A:CA:57:6C:D7:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A81EDE9B8B6818E1382C2D0C4033A9B6B7D1358
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/598cb82f-81a2-4108-a47b-bcd13736d746.roa
Signing time: Tue 14 Oct 2025 18:22:41 +0000
ROA not before: Tue 14 Oct 2025 18:22:41 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:81:ed:e9:b8:b6:81:8e:13:82:c2:d0:c4:03:3a:9b:6b:7d:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:22:41 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4ff63a9c0a5e8df2e58354ff3aa4ba1a64484993a2d75365241515e10c98afc6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:7d:08:3a:16:2f:39:75:fb:e1:87:c7:2c:
48:f0:eb:ed:84:10:19:5c:b6:47:2c:3e:31:1b:81:
b6:11:3b:cf:0e:30:f9:0c:3c:e7:c6:db:92:c4:f6:
42:e0:50:8a:b1:f1:f4:a4:ae:30:ee:15:a7:6b:81:
0f:f6:15:c3:f7:4d:f1:31:9e:78:06:84:7e:3b:2f:
7b:b2:64:42:fd:69:78:da:b2:a6:74:19:1d:8a:07:
67:7c:8b:8e:5f:62:e8:f7:3f:8c:0a:08:95:da:f6:
a6:8c:a7:a2:42:3b:1e:b2:5f:55:3d:b6:68:0a:b5:
f5:3d:65:05:a8:9a:5a:bb:0a:c1:83:85:2a:72:39:
80:19:46:b1:dd:aa:6d:65:4c:45:5b:13:a7:e9:06:
63:5f:3d:c1:ff:45:0c:bf:b7:17:4f:78:dc:57:bd:
eb:d7:8b:38:e8:ba:97:e4:cd:9d:82:17:f7:8f:3e:
eb:d0:bd:16:7a:c0:38:d0:7a:a3:cd:3d:92:c0:f0:
8b:9b:e0:b2:5b:83:a0:a6:38:97:95:5b:c6:ae:4e:
8c:a9:31:b6:45:85:8c:f0:53:69:56:1a:c5:97:f6:
bd:c2:8b:bc:5c:ac:84:61:8c:ad:a4:c4:64:d6:42:
8d:1e:9a:48:c9:71:16:b0:b1:5c:26:a9:ec:cf:69:
be:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DA:BE:5C:0E:34:E7:D9:5E:4B:D8:BD:A2:6E:6A:CA:57:6C:D7:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/598cb82f-81a2-4108-a47b-bcd13736d746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.11.0/24
Signature Algorithm: sha256WithRSAEncryption
51:fc:8f:bc:e2:a5:a5:e8:6f:58:05:49:ab:b2:76:4f:14:ce:
5b:26:76:30:0f:de:c2:94:fd:97:30:c3:85:2b:13:41:3b:4b:
59:eb:2a:6f:d8:4a:87:39:c6:c0:50:7e:20:a8:d7:28:4d:52:
42:14:dd:c4:9a:b3:26:b1:46:4f:76:5b:42:27:df:9a:2f:61:
7e:5b:8d:f2:02:75:18:04:d9:cd:ac:97:d6:cb:4f:bb:1b:f4:
13:f1:08:64:9f:03:d8:98:62:7c:7d:c2:54:1f:7a:80:1c:2a:
99:8d:48:c8:83:11:a0:36:59:af:35:e9:8f:41:2f:0c:b2:f9:
20:96:a7:19:3d:28:dc:6b:7b:ac:6c:c1:57:22:d0:61:70:a3:
ad:c5:1a:5a:9c:3f:b3:57:3b:87:1d:4a:e6:c8:67:9b:67:51:
ec:65:bb:91:53:40:2e:e9:a2:07:86:70:47:30:d2:0b:0d:53:
6e:f0:3e:3d:ff:49:76:02:be:b6:1c:28:87:03:93:e0:30:7d:
f3:7d:1e:d3:65:66:25:06:58:af:f3:c4:29:3b:29:29:86:25:
50:b9:eb:e8:75:0e:f2:fa:6e:44:9f:58:70:8c:ca:2b:02:c9:
e4:31:77:93:c6:2b:9e:4c:a4:92:bb:b0:1d:93:58:7d:1c:ce:
09:c3:24:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:00 2025 by rpki-client