Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71a4fef9-2b3c-4428-8b80-d73b90541c6d.roa
File: 71a4fef9-2b3c-4428-8b80-d73b90541c6d.roa (raw, json)
Hash identifier: kjaFiOSQNkHwL2sMt7C2QObavJ7fJ+5V04XjStHshAs=
Subject key identifier: 0C:CF:51:7F:A4:58:D9:5A:B0:BD:3A:45:5C:1C:75:22:8F:9E:85:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DD46FDB4258C0E47D85581462F920C87F9A50C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71a4fef9-2b3c-4428-8b80-d73b90541c6d.roa
Signing time: Tue 14 Oct 2025 21:39:53 +0000
ROA not before: Tue 14 Oct 2025 21:39:53 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d4:6f:db:42:58:c0:e4:7d:85:58:14:62:f9:20:c8:7f:9a:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:39:53 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=56193d7c1e53a7c1efa581f7e4891037b6a1d1d7ec55f421a4f757af1c6f18f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:ba:d1:7b:17:45:59:1c:e7:4e:16:ec:8e:
a9:87:69:ca:ea:43:75:dd:2c:96:13:f4:5a:65:77:
cb:c9:5b:ce:52:5c:3c:70:bf:72:29:5c:67:7e:51:
83:39:a2:0f:d0:60:30:e5:46:ab:0f:34:03:9b:0b:
d9:9f:cf:12:6b:67:2c:74:15:f6:39:c7:ef:af:c2:
f1:ff:8d:d6:d3:6d:ad:92:66:54:9c:c3:ad:58:80:
2c:81:6d:53:d4:3a:62:bd:61:80:cf:da:ed:36:94:
cd:66:b3:d2:fa:29:47:af:53:47:9a:3f:c2:f7:5e:
74:75:46:09:93:55:dc:7b:90:d9:87:e3:5e:68:f6:
17:d4:f4:f6:ef:26:44:54:86:c8:13:72:88:65:34:
de:00:6f:9a:f3:54:02:98:f5:7f:4a:fb:a8:eb:9c:
1f:ac:63:36:5e:80:38:33:cd:7b:ec:84:7e:e4:cb:
e4:ec:00:f4:02:52:27:be:e6:fc:b6:4c:4e:bb:3a:
58:92:16:15:19:3c:43:38:8a:f1:51:d0:f3:67:2c:
1d:3d:ac:10:0f:07:22:08:1b:09:e9:30:07:39:e6:
5e:ac:8b:5d:21:c3:4e:92:2e:37:e3:61:c8:5b:b6:
e7:ad:28:7d:ca:cf:09:fc:29:d0:3a:c0:ca:19:c3:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CF:51:7F:A4:58:D9:5A:B0:BD:3A:45:5C:1C:75:22:8F:9E:85:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71a4fef9-2b3c-4428-8b80-d73b90541c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.110.0/23
Signature Algorithm: sha256WithRSAEncryption
90:0f:8d:a9:c0:f7:2e:b4:97:d0:1c:65:1c:8d:4b:bb:73:04:
eb:4f:2b:a6:ee:12:d0:3a:eb:a9:5b:46:34:fe:ae:06:66:3c:
f8:9b:8c:fc:0f:74:e8:71:3f:87:b5:41:91:d7:57:e5:dc:62:
b6:57:84:6b:54:bd:2b:dc:1d:9e:fe:5b:8b:fd:e2:6b:22:d9:
2d:83:15:0a:7e:25:ff:ae:a9:c0:12:0a:44:0d:7e:52:65:70:
6f:f5:09:d3:80:79:e6:74:24:3b:85:90:4b:77:2d:c0:73:74:
e9:b4:4b:85:a2:ae:a8:2d:89:c7:01:99:f9:a9:38:dd:35:04:
60:26:18:62:1f:34:fe:84:39:72:bb:d1:c6:10:27:65:e2:8d:
08:94:00:0a:a3:03:21:a8:f6:83:30:a2:0d:06:54:72:ef:ec:
cc:fc:01:1a:3a:54:98:61:cb:5f:4a:38:9b:db:e7:ab:af:ee:
07:35:2e:b9:08:3f:96:dd:00:9b:d0:a0:6d:47:8f:12:46:a4:
30:49:0b:38:4b:26:78:74:2e:1d:bf:f2:c7:4b:d0:b0:d0:d8:
79:17:80:19:e2:de:b6:7e:4e:cb:75:ba:85:dd:e1:bc:78:e3:
c5:f8:ee:12:4e:8a:66:13:91:95:3e:6a:f9:81:01:46:bd:2a:
71:97:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:19 2025 by rpki-client