Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b6ec7b5-7047-4a3f-94ac-9609a05271e5.roa
File: 5b6ec7b5-7047-4a3f-94ac-9609a05271e5.roa (raw, json)
Hash identifier: IuokgvSWZRmS9hv9RcEWOsUQMvXiF2GHXSGr3Xdt+yw=
Subject key identifier: 83:E1:DE:DD:55:44:F2:9A:21:55:16:67:5C:05:E3:B2:80:3C:80:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B4B7C3E2166B5B9E9DF917228F2A6CFC127E4DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b6ec7b5-7047-4a3f-94ac-9609a05271e5.roa
Signing time: Tue 14 Oct 2025 22:12:55 +0000
ROA not before: Tue 14 Oct 2025 22:12:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:4b:7c:3e:21:66:b5:b9:e9:df:91:72:28:f2:a6:cf:c1:27:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:12:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=93e1ece4101ded3eb4e1572ccfd0a7e43e1e124ba5ae6eb55fdaeaabbbe30c15, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:59:67:a4:f1:6c:ab:98:31:f3:ca:bd:69:
3f:05:90:b4:57:de:ae:a3:9a:6f:42:5e:0e:4a:59:
11:55:bc:be:7a:a4:2f:d8:ef:74:00:9c:f2:a0:06:
b6:37:5e:2b:4a:f6:2d:33:c2:fd:d8:44:44:d8:13:
09:24:ca:10:7e:42:bc:f1:83:37:48:b1:5c:49:f1:
7c:c6:79:8c:ad:02:de:43:91:b6:71:98:1b:09:75:
67:48:9f:2f:0b:41:f7:a1:87:72:61:8c:12:6d:4e:
cf:5e:5f:f7:bc:5d:44:8e:e2:08:2b:ae:3b:44:4e:
97:18:14:1c:1a:c7:b0:f3:eb:06:66:7d:64:aa:2f:
2c:f1:4b:86:34:54:2e:13:8b:5c:2d:37:fb:fc:10:
e4:90:6f:cb:b2:4b:04:53:e1:7b:1d:7f:a5:fc:76:
9e:89:dc:08:1e:6e:c3:a6:c6:93:d6:56:ed:6d:c7:
e6:9d:2c:8f:6a:54:30:20:3a:98:d1:3d:35:26:45:
71:31:f6:92:d2:24:7a:80:09:db:e6:c6:c7:0a:7d:
63:a6:51:c2:06:29:35:cb:49:7c:1a:b8:9f:3d:e5:
c8:95:55:a7:6e:35:38:7e:c9:d0:39:f4:5f:ba:aa:
12:65:a0:36:f4:38:d7:fd:7f:21:a3:a7:2a:b5:29:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:DE:DD:55:44:F2:9A:21:55:16:67:5C:05:E3:B2:80:3C:80:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b6ec7b5-7047-4a3f-94ac-9609a05271e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.224.0/22
Signature Algorithm: sha256WithRSAEncryption
02:b2:fc:50:f9:d3:a9:a5:56:a0:86:fd:c8:30:e7:0a:52:9d:
56:07:9c:69:58:b2:a5:6c:f4:4e:64:38:5e:49:fe:d0:21:ff:
2d:bb:d1:c8:5b:ed:94:7d:f6:f9:e7:1a:65:5c:c9:11:83:09:
f5:94:ad:54:f8:d5:af:d3:ee:f0:29:f6:e1:a6:88:cb:72:83:
b2:ad:92:bc:42:76:e1:88:d3:9b:34:42:e2:be:f8:e0:84:19:
2b:ea:06:63:3b:58:51:c6:53:2f:20:6c:6c:66:13:e7:9a:dd:
6c:96:3c:11:cf:57:b2:03:79:6a:ad:4c:79:15:09:31:c0:c8:
3f:90:4c:c4:50:93:3f:70:64:67:b7:9c:8b:db:a4:48:27:7e:
6d:e2:6b:71:3a:ce:55:c2:76:ca:1a:56:18:63:a6:a3:a4:a6:
a3:d5:a1:13:e3:4f:00:1a:45:9c:43:4c:e7:0d:ae:40:f8:9b:
53:db:1d:6b:ed:17:08:59:14:a8:d6:c7:8a:4a:3e:eb:58:7b:
a8:aa:88:b5:31:33:a9:e1:1b:8b:63:02:db:79:dc:ac:a5:9c:
65:52:cc:9c:f1:60:d7:1b:6b:fc:04:d3:b8:6b:5a:4a:24:89:
3f:cd:75:ec:e4:c9:1f:1e:14:a4:ff:1b:35:4f:bb:f8:37:c9:
d8:9d:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:43 2025 by rpki-client