Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/628158b5-9b24-4aba-b852-e322a5ee3645.roa
File: 628158b5-9b24-4aba-b852-e322a5ee3645.roa (raw, json)
Hash identifier: veIFqOVR/OahVkW1JW40Xgk9NEdxDLhAmBFBea4tRt8=
Subject key identifier: C9:38:99:9B:42:84:A2:3B:3A:2D:0B:BA:A8:FD:D2:88:3D:A7:A1:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 25BC96F89F2F4FE239939294502DE0B5C2F6AA28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/628158b5-9b24-4aba-b852-e322a5ee3645.roa
Signing time: Wed 15 Oct 2025 18:12:01 +0000
ROA not before: Wed 15 Oct 2025 18:12:01 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bc:96:f8:9f:2f:4f:e2:39:93:92:94:50:2d:e0:b5:c2:f6:aa:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 18:12:01 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=c637085f9f87b68820b1e2f9318b3a5ef9e9449f53eacaefb6efc9fa9266738f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:21:a7:4b:cd:46:24:2c:60:cc:d9:f3:ec:
e5:6c:0a:8d:3e:5a:59:74:fc:27:1b:09:f3:2e:7a:
7f:70:6b:18:52:70:63:2e:c7:c0:c1:1d:14:60:8b:
b8:a6:f6:b6:ba:ba:b0:aa:59:8d:9d:73:af:d6:0f:
f3:86:86:ce:57:ea:78:ee:e2:b4:34:f6:8c:0f:cb:
f2:b9:30:f1:80:b1:c1:bd:cf:82:8c:1c:8d:9e:55:
27:0d:8d:90:04:9e:0b:e5:03:f6:76:33:6c:bb:96:
ef:03:89:3d:b3:44:68:95:43:34:ba:a6:8d:54:c6:
aa:f2:78:30:c4:57:db:bf:05:18:8b:4d:a8:42:6d:
43:cc:3c:07:2a:ee:46:dd:1d:7e:ea:44:f1:a7:97:
30:25:4b:eb:e9:9e:c6:cd:da:12:be:37:72:1b:2f:
d5:80:c4:57:fb:23:5f:5c:e5:c6:1c:d8:d8:cc:ab:
61:f1:47:3f:78:46:46:6e:f2:f3:d8:dc:4d:7d:7e:
a4:a9:0f:97:a4:a1:69:c4:c4:84:bf:d2:50:91:7e:
7a:a2:bb:24:52:3e:73:1b:f6:1c:39:53:ae:01:92:
2b:0a:61:e5:6f:b6:01:fa:3e:5a:b4:1c:20:60:f2:
e4:fe:a5:1d:79:44:10:78:ef:12:8f:c9:7c:8c:e7:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:38:99:9B:42:84:A2:3B:3A:2D:0B:BA:A8:FD:D2:88:3D:A7:A1:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/628158b5-9b24-4aba-b852-e322a5ee3645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.8.0/21
Signature Algorithm: sha256WithRSAEncryption
69:da:6d:27:fb:ae:71:bc:06:c6:d5:22:c8:03:fc:34:c7:98:
0b:80:60:4c:d0:df:5f:0b:20:da:37:a9:4c:6e:88:9e:33:81:
13:81:71:2f:ec:ac:76:1b:ec:cd:ad:b2:67:ec:3e:a3:e1:29:
87:f0:a8:4a:a9:8d:bc:2e:00:6a:f9:84:79:eb:98:65:5e:4c:
80:63:b5:6b:15:da:39:bc:da:0f:8e:64:70:3f:b5:ee:a0:70:
e2:6a:55:a2:26:08:06:09:04:6e:1e:1f:3e:65:41:d5:20:17:
b1:b4:3e:41:76:70:7b:67:1e:d1:c1:1a:b4:7e:94:85:7d:8c:
cb:6c:41:17:2e:0d:d2:29:cb:f7:1c:a7:ec:ed:8b:9b:65:c8:
be:e8:ac:46:c2:06:8e:4d:50:6a:b6:13:2c:bb:43:f2:a2:e6:
3e:fb:09:b9:fb:f4:43:2a:71:dd:e1:38:93:68:64:2a:ec:d8:
0f:8f:bf:37:15:0d:8a:f0:b1:7d:c2:6d:46:d6:04:ae:51:f5:
62:e6:3d:f5:64:f8:db:bb:20:2d:03:18:df:a1:7e:22:b7:a0:
8e:e9:c1:44:b5:00:e9:2c:72:31:e6:20:e5:0e:1c:72:be:71:
71:3a:d9:2e:bb:c2:c6:e0:3d:88:b6:ae:ea:a5:27:9a:6e:7b:
09:31:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:11 2025 by rpki-client