Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa
File: 67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa (raw, json)
Hash identifier: nLdYzsauItuHJSprG/oOsXLfiCEDCzt5LFe9QaiRcjY=
Subject key identifier: F0:DF:E0:84:92:8B:DF:27:30:6D:ED:78:61:B4:6F:07:5B:AD:55:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 222B59BF10D936F3F3D9BF3C7640C9501E236FA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa
Signing time: Wed 08 Oct 2025 00:42:17 +0000
ROA not before: Wed 08 Oct 2025 00:42:17 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2b:59:bf:10:d9:36:f3:f3:d9:bf:3c:76:40:c9:50:1e:23:6f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:42:17 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=ed333f5b942b27e8fe824763fee20581a0e5aeab1e9ac169b2987c8da319a03d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:e8:f2:46:7e:5a:a1:50:63:19:2a:aa:c6:
23:5c:79:83:86:46:3a:24:14:e1:e9:96:76:0c:1e:
03:46:ef:f8:7a:98:8f:4a:34:a7:cc:e3:46:8b:88:
44:1b:f4:76:4f:c5:2c:e8:e2:c8:4b:a4:c7:de:7c:
75:ed:c2:52:a9:f0:29:17:15:ef:9b:16:29:24:bb:
8f:36:36:75:6f:63:f0:ec:d2:a4:a1:7f:f9:f5:db:
c2:2e:26:5a:3f:ee:3f:71:90:54:b8:d4:fa:c4:1c:
2b:3e:ec:9b:35:6c:b0:54:25:8b:59:f6:b9:20:b6:
cd:7c:ec:04:82:b5:5f:09:97:4d:22:6b:49:12:30:
46:8e:95:d5:46:ab:1f:6b:38:33:7c:d6:df:a3:1c:
74:e2:54:89:a8:df:82:87:11:0b:ec:be:a9:80:50:
8c:0c:ab:f7:d0:12:d9:aa:4b:f3:4f:12:f1:da:a9:
89:13:15:52:9d:a8:6d:8f:94:d1:0f:85:bc:0b:ec:
b4:05:15:f8:19:44:cc:41:f2:21:ff:37:c0:7c:46:
37:da:dd:c2:99:d2:0a:fb:94:97:8c:c4:22:d1:f9:
f4:8b:08:e2:84:a6:60:b2:5c:f2:3f:08:0b:e8:13:
01:b0:31:78:f5:ff:fe:c7:f3:8e:fd:58:cf:ad:4e:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:E0:84:92:8B:DF:27:30:6D:ED:78:61:B4:6F:07:5B:AD:55:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e63d4f-5384-4d7d-a543-82f23b8f1dca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.185.0/24
Signature Algorithm: sha256WithRSAEncryption
06:36:f8:1a:1b:b4:6a:46:7c:1e:bc:15:25:7f:ea:46:69:6b:
9a:33:2d:e8:38:a1:76:a6:42:6d:cc:0d:be:85:19:55:3c:80:
a1:f4:0b:6f:0a:85:17:59:0a:f6:b3:c2:aa:af:76:a5:6d:46:
24:92:93:b2:fd:7d:f2:b1:79:bf:6a:71:53:46:da:1e:43:aa:
04:59:c0:f4:74:63:25:1e:c6:74:aa:3d:1e:ad:92:d9:21:d2:
a6:c8:08:38:c5:5e:05:15:8d:51:b0:13:9f:6d:63:e4:39:ba:
33:25:6c:eb:ad:0e:e7:de:f5:c3:07:9b:1d:52:11:28:a9:7c:
28:de:2a:0a:41:ed:9b:50:89:81:75:ae:07:95:67:06:41:d4:
91:3d:52:48:eb:e2:a2:9b:f0:c9:be:08:a0:ef:65:de:a9:fd:
d8:8b:9a:3e:73:fb:eb:34:32:33:dc:15:8d:ab:91:77:a5:e9:
a5:19:67:ae:27:3c:a4:7d:a5:2a:82:fd:cb:66:ed:8b:98:bb:
d8:0b:fe:9e:05:81:59:c5:16:00:ed:0a:94:90:07:43:e8:e7:
51:59:db:20:b4:ee:20:a4:43:ed:45:68:4a:7c:7c:89:1d:13:
96:bc:99:ce:f7:39:d1:a6:07:f1:21:c9:eb:ab:b6:1e:18:1f:
48:51:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:50 2025 by rpki-client