Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9fa29c-e219-476d-86be-ad17d8d06f7f.roa
File: 6e9fa29c-e219-476d-86be-ad17d8d06f7f.roa (raw, json)
Hash identifier: ib3egu6tnSgvHZ4M6E8xHoWgAQ6FxJ0lCzrklqfAac4=
Subject key identifier: F9:C3:4F:A0:82:A5:FF:65:3C:0B:B0:0D:3E:30:81:8A:55:EC:C6:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 42CD019EADD3DD7B7909D121DB44738325BA61C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9fa29c-e219-476d-86be-ad17d8d06f7f.roa
Signing time: Tue 14 Oct 2025 21:02:11 +0000
ROA not before: Tue 14 Oct 2025 21:02:11 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:cd:01:9e:ad:d3:dd:7b:79:09:d1:21:db:44:73:83:25:ba:61:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:02:11 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fbe0c4ee16d0a26668a14c72929dacb66c2c156050338023edf986e0ee7881a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:c5:15:c8:b1:c5:ac:73:1f:d0:59:c2:bd:
a8:20:5b:34:a7:ff:81:5c:f1:56:a0:2d:2a:6c:2c:
4a:fa:d3:5e:86:c4:b8:69:b8:99:cc:3e:aa:4c:31:
e1:7d:10:2d:6a:56:c8:17:fe:a2:c0:35:de:0e:c3:
21:22:58:b9:1b:d5:82:ba:04:59:de:53:96:bd:57:
2b:3d:1a:f0:46:3a:f6:1c:50:b1:fa:70:ab:08:03:
5f:ec:3e:bf:e0:a0:0b:26:70:de:c0:9c:37:1d:08:
9e:74:a1:47:a0:0f:11:75:4c:f4:c5:a7:d5:ad:8b:
fc:ed:01:80:64:91:82:ab:90:42:13:19:87:1d:e1:
c9:09:29:d1:7f:78:28:17:b9:df:8f:7f:2e:e3:f8:
77:41:ad:3d:91:05:55:e5:7f:46:78:9a:9c:47:e2:
c2:15:5d:5f:fc:a7:2a:14:fc:4b:1c:b2:8a:27:d3:
38:0a:19:11:92:ac:67:cd:da:eb:58:0e:7e:57:cc:
e0:cb:12:a6:6c:64:c5:7f:a6:97:7e:41:fb:72:8b:
33:92:03:c1:7a:c5:66:77:1e:fa:31:b0:5a:c8:b6:
f0:08:b6:77:7a:b8:cb:1b:c7:2d:7d:7b:fd:6b:b7:
04:06:42:38:09:bd:9e:bd:83:b6:0e:24:6c:64:7f:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:4F:A0:82:A5:FF:65:3C:0B:B0:0D:3E:30:81:8A:55:EC:C6:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e9fa29c-e219-476d-86be-ad17d8d06f7f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.229.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:7f:b4:16:17:7e:01:fb:72:86:26:82:eb:35:bd:e5:43:88:
af:80:8e:20:a1:95:c7:6a:20:a0:99:1a:ae:23:06:70:80:40:
8e:b0:43:41:63:e4:d8:93:f3:bf:6e:3c:16:b5:30:48:17:2a:
4f:16:60:91:22:11:24:69:2b:fa:59:59:0a:87:4a:7a:eb:15:
57:ed:2d:a8:50:33:71:05:5e:ff:02:4d:c7:ee:af:d5:24:1a:
a9:31:8e:f2:c1:85:b8:c8:33:b9:84:50:3b:9c:cd:1d:1d:1b:
44:ba:32:89:91:ff:fd:ce:dd:0d:f3:01:b6:3e:11:12:28:2a:
fa:fe:24:b2:ce:32:32:f0:3a:0a:2a:d3:68:82:c7:b8:00:ae:
4a:31:03:00:8d:bc:cd:aa:d2:22:3c:9b:26:ca:04:95:b4:7f:
5b:91:cf:95:a8:c2:2f:5f:6e:80:22:2e:3f:e9:35:98:25:b6:
1d:16:b3:e4:51:71:67:b7:ae:60:81:38:9d:95:82:6f:b2:ed:
77:2d:6b:c9:49:e1:f0:f4:5a:13:6c:23:34:c7:6f:62:35:9f:
1c:e8:39:1a:95:97:1b:3c:85:85:3a:f5:05:37:e6:57:e5:7b:
02:8a:e8:28:27:53:6d:24:9d:7a:a9:0c:25:c2:4a:c0:a4:da:
ff:dd:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:19 2025 by rpki-client