Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aea4476-d486-41c9-b278-8fad3b5be990.roa
File: 6aea4476-d486-41c9-b278-8fad3b5be990.roa (raw, json)
Hash identifier: /1izLUrt9gO7tqo/hYyfhv+K+SGYDmKQAe7SBrTNA4U=
Subject key identifier: 4F:E1:F2:F2:2A:D4:B4:BD:7B:56:DA:70:BE:49:07:77:55:07:DC:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6677C84443C6C3936F2F6FB19A2360E7A5FBE1CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aea4476-d486-41c9-b278-8fad3b5be990.roa
Signing time: Tue 14 Oct 2025 21:12:31 +0000
ROA not before: Tue 14 Oct 2025 21:12:31 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:77:c8:44:43:c6:c3:93:6f:2f:6f:b1:9a:23:60:e7:a5:fb:e1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:12:31 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=ed14d454404472e126ada53e699786d87a48131ed4a1f324887057cb5e8b20a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:63:d0:e6:9d:5e:4b:ad:64:28:b7:31:aa:
c2:5d:b8:78:2d:46:3a:86:9c:f4:6b:b2:e2:6b:56:
3f:ee:bc:d0:d4:f7:58:d2:80:54:62:ee:52:e6:c3:
37:b4:0c:a7:14:89:16:55:f9:54:25:a7:dd:b4:b8:
a0:d2:6f:15:e7:0f:be:7c:80:c3:bf:84:45:5b:46:
9d:92:4c:c9:f8:03:bc:53:f7:b2:9a:93:c0:15:75:
8d:95:1e:21:1d:5b:83:61:fe:c3:36:3b:10:a3:cf:
cf:de:c3:ac:49:22:a8:23:9e:c1:55:d8:c4:c7:96:
a4:22:d6:aa:f8:53:bc:92:4d:6b:0d:10:ec:19:05:
be:46:97:c9:dd:4c:3c:aa:86:82:7c:19:ac:77:c1:
10:86:b7:74:b7:ee:35:fd:d2:d4:d5:ac:5c:6b:5b:
55:c5:91:03:d3:fd:c4:6f:4e:6c:6b:eb:af:0e:08:
f7:af:32:7d:06:89:8a:5e:85:29:fa:22:f5:a9:b0:
cc:bf:19:ba:27:8f:85:d4:58:fd:68:03:4f:59:14:
96:0c:46:0d:2d:1a:6f:2e:3c:f0:6b:c8:ef:03:d5:
ea:bd:ed:b0:b8:31:a6:67:37:c7:61:d7:da:9d:96:
7a:79:b0:83:25:40:51:c8:a9:fd:ed:5a:5a:d8:8f:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:F2:F2:2A:D4:B4:BD:7B:56:DA:70:BE:49:07:77:55:07:DC:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6aea4476-d486-41c9-b278-8fad3b5be990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f9:93:34:cd:42:9c:c3:17:7b:29:b8:96:db:b4:70:4a:ee:
a0:13:57:d5:f5:b0:ad:89:d1:38:8d:0d:93:89:60:3c:ad:3f:
80:ed:86:0d:a5:55:3b:02:cb:f8:62:d8:53:df:aa:b9:ef:c4:
b4:82:a1:e3:bf:5c:df:c6:af:aa:98:a8:da:06:7b:5e:f5:66:
3c:e3:d0:da:62:0b:ea:63:28:40:88:f1:f3:01:33:80:bc:c3:
cd:b9:2d:e3:a8:f6:91:5f:5d:9a:6b:25:0d:61:da:8b:5a:64:
15:87:63:5a:c0:e5:8c:a3:c9:0f:5b:76:7b:9b:de:0d:fb:a8:
54:93:8a:07:97:58:cb:2e:35:f2:e5:bb:f2:ba:50:c3:d8:b1:
9e:f1:9c:7d:95:07:a4:04:3e:43:73:7d:37:83:44:96:6d:e0:
7e:dc:84:8c:80:c2:33:09:fc:db:19:5d:e1:20:8e:10:d4:9a:
6c:39:52:df:05:e9:55:c2:f4:c9:f0:52:71:be:7e:3e:58:b3:
a4:39:e5:3d:94:b5:be:27:b6:60:12:83:44:74:db:a7:68:e2:
ce:9f:27:fe:80:41:bb:c6:bc:1b:96:b8:42:ce:cc:c6:5e:bb:
2e:7a:7e:d3:06:e9:85:9e:94:76:73:49:95:80:9e:40:7f:6c:
07:d0:f4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:14 2025 by rpki-client