Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66bf62d8-3d08-4edf-810b-3f74e30309f3.roa
File: 66bf62d8-3d08-4edf-810b-3f74e30309f3.roa (raw, json)
Hash identifier: nEjblrPnt5q4DL+MsfrJyHPA0LW/IboQsDTbVH7A3zs=
Subject key identifier: 4C:AA:0E:2F:48:B0:E8:61:B8:70:C3:F2:7D:3D:97:3B:E1:04:C7:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22D768B760FFE0D3CC6C061264C659CBC7B9E0AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66bf62d8-3d08-4edf-810b-3f74e30309f3.roa
Signing time: Tue 14 Oct 2025 20:22:59 +0000
ROA not before: Tue 14 Oct 2025 20:22:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d7:68:b7:60:ff:e0:d3:cc:6c:06:12:64:c6:59:cb:c7:b9:e0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:22:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=306a6ccf4bb8699039412261f2be445329fd8e7d9ce0fe314f67a6be8d10c493, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:b1:ae:3a:4f:15:76:58:9f:ad:4c:59:f6:
b2:df:27:69:b6:75:0c:7b:f3:10:36:9e:9d:70:42:
45:49:80:54:ee:e9:c7:fc:b9:f8:f3:0d:02:57:0c:
a4:2e:ff:25:7c:0a:81:42:6d:fc:03:c8:b9:99:11:
50:9e:45:43:a4:d7:8f:3e:70:e4:14:ce:5e:70:04:
d8:f0:6d:51:cc:b4:be:3c:62:89:a8:32:bc:75:da:
84:08:b4:fe:a3:0b:9c:70:13:2a:c1:ef:54:f2:8a:
97:b5:eb:23:0c:ca:66:d3:45:cd:a6:75:3f:bc:e7:
4e:5f:b1:e0:c3:de:a1:6e:2a:b7:6f:d2:b0:2d:a1:
2e:dd:b9:3f:6b:f1:6c:a0:d1:9f:d3:11:e3:3e:ea:
0a:71:5b:4f:47:02:4d:37:2d:b0:42:29:5f:88:91:
b4:2d:c0:c6:7a:8b:a8:af:df:cc:19:7d:51:ef:31:
18:50:6f:75:b9:6f:76:1e:bd:ea:3f:91:5d:5c:07:
79:e7:f0:22:2e:83:dc:60:e4:18:35:94:f1:9a:21:
92:db:f2:f4:62:76:52:c9:aa:93:e5:86:03:b2:ab:
6a:9b:fe:f5:a6:1a:c9:1e:c9:b4:67:3a:a6:ce:c1:
25:5c:68:8f:84:39:96:1b:2b:bf:53:b2:f8:d4:79:
65:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:0E:2F:48:B0:E8:61:B8:70:C3:F2:7D:3D:97:3B:E1:04:C7:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66bf62d8-3d08-4edf-810b-3f74e30309f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.30.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:01:cd:1c:85:61:05:33:05:ad:24:b9:de:6c:5d:08:4d:0d:
e3:35:8c:b9:b0:b6:90:9c:9b:21:da:bd:78:d6:38:6c:b7:8b:
27:6c:13:91:89:9f:51:fe:77:26:bb:f9:d5:ff:45:3d:76:ca:
da:29:f0:ec:84:17:b3:98:53:97:71:02:b6:62:4f:9c:71:96:
d1:63:d1:ca:ea:75:46:dc:2c:30:b0:d2:8b:cd:e8:c9:3f:21:
00:12:58:59:25:e4:28:03:8c:04:55:ff:57:25:f8:ca:a5:e2:
19:ac:9d:d5:a2:2b:62:f8:af:aa:a6:c1:a6:29:c6:e7:c8:e5:
1f:50:bc:34:0a:89:6a:f3:9c:dd:99:f9:ce:35:d4:dc:3d:57:
49:92:66:7a:d6:0b:b5:a3:c2:4e:6b:04:32:ed:f5:05:a2:64:
0c:6b:e2:1c:91:1c:e3:72:ac:98:82:b7:51:e0:8d:4d:f4:60:
c4:ec:36:9f:83:69:47:24:b4:cd:a1:91:06:99:bb:7f:2c:a3:
a4:fd:9f:47:b2:df:49:04:23:7e:6b:d5:32:66:b1:a6:71:f0:
65:50:a4:ba:85:93:90:f3:60:4d:dc:19:ee:d0:d5:5a:ce:ba:
07:b0:36:c1:19:ec:60:e9:95:b5:8a:6d:af:37:a3:4b:10:82:
6a:0e:73:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:21 2025 by rpki-client