Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
File: 6c4df158-4435-4ebb-ac08-61aded4b3360.roa (raw, json)
Hash identifier: r76PmvtDwf5IoFJuOtQ1qPGNfQNO42bry7G1GxDusTo=
Subject key identifier: 01:11:A7:43:76:20:0E:1B:9C:FE:EE:DF:4E:1F:20:98:2A:F5:A7:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FB83BC6EEAF1742E9C2296F2FFE5AF01B4A6032
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
Signing time: Sat 27 Sep 2025 00:42:35 +0000
ROA not before: Sat 27 Sep 2025 00:42:35 +0000
ROA not after: Sat 01 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b8:3b:c6:ee:af:17:42:e9:c2:29:6f:2f:fe:5a:f0:1b:4a:60:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 27 00:42:35 2025 GMT
Not After : Nov 1 23:59:59 2025 GMT
Subject: serialNumber=fca4695337df2ffc4724cc3bb0f407551668d3323edb138ee871a95266ce1a38, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:71:b7:e5:bb:28:46:81:16:db:15:59:2c:
43:0d:b2:a6:2a:71:1e:32:bd:5c:93:2f:8f:2e:dc:
8e:43:2f:f6:30:24:41:ee:ad:81:b6:05:04:4d:dd:
c0:d1:17:a3:11:23:71:fe:15:93:dd:a8:69:1f:ab:
47:a8:4e:04:78:39:b8:ef:c3:90:5c:c3:af:7a:6e:
15:3c:43:40:b8:0c:24:4c:04:56:29:c4:e5:9a:85:
93:96:2b:c9:db:e0:f1:af:a3:c0:03:2c:69:06:68:
66:39:ee:e4:22:f0:cd:d9:a5:41:87:86:26:f0:d7:
a1:3f:bb:c4:e1:90:b6:01:9a:0e:b6:4d:31:84:20:
37:5e:75:b9:98:f8:c3:d6:f3:10:0f:ca:b3:66:2e:
8e:56:58:c6:ae:d4:f9:dd:bb:87:5f:68:63:ea:ca:
68:4d:b3:20:d0:18:cf:c6:e3:fa:ff:03:22:ff:87:
1f:bc:11:34:13:6f:c1:9f:81:e2:15:d0:5d:79:dc:
33:03:eb:f8:6a:13:a6:b5:ec:e9:27:a3:9f:8f:27:
b6:79:c5:70:24:1a:ae:00:5a:81:27:1d:5b:38:81:
76:07:14:95:06:3b:d0:b8:ae:0a:c5:2a:60:e1:8b:
90:c2:58:9b:25:bf:b2:89:5b:8e:17:f2:27:71:2f:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:A7:43:76:20:0E:1B:9C:FE:EE:DF:4E:1F:20:98:2A:F5:A7:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4df158-4435-4ebb-ac08-61aded4b3360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.147.0/24
Signature Algorithm: sha256WithRSAEncryption
19:36:8e:04:60:cd:7d:d1:a0:fd:6e:71:fa:c1:8f:94:bd:2e:
6d:17:cf:c3:8a:4e:a5:33:a9:4c:41:3a:ce:15:cd:5b:fa:63:
65:0c:fa:62:04:9a:b5:0d:34:05:0a:d0:6e:72:4d:17:f6:ec:
71:1e:2f:db:78:2f:fa:25:11:df:b1:9d:f5:21:54:9d:84:fc:
c6:e8:fd:be:90:26:fd:22:5e:90:c4:6e:ce:53:81:db:e9:ba:
61:4b:74:cf:cb:49:13:73:09:21:34:43:1d:18:72:2a:c7:23:
ad:34:46:60:49:05:1d:04:40:71:cc:32:93:b3:5d:6a:dc:fd:
af:9b:e5:b5:85:ef:ad:11:36:cd:00:89:9e:48:6a:90:56:44:
f2:82:c7:09:07:e9:3f:f7:21:73:2e:22:ae:c3:e9:23:19:be:
b2:42:ea:6d:eb:5d:01:42:85:65:26:5c:c3:ee:b3:88:53:86:
4b:e5:c4:f2:38:ba:cf:6c:f1:06:35:4c:1c:05:f7:4a:f2:89:
d8:a3:9a:97:1a:b1:a7:9a:7a:cd:86:96:b6:c2:2b:82:ad:39:
17:e3:0f:d6:4e:cc:e4:84:25:e2:da:32:33:45:bd:7b:a7:40:
d1:e1:ec:2f:97:c8:94:12:2c:94:a2:8f:5d:b5:3e:12:82:88:
cb:25:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:03 2025 by rpki-client