Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730296ba-47a6-475e-8a13-bc345da2cf72.roa
File: 730296ba-47a6-475e-8a13-bc345da2cf72.roa (raw, json)
Hash identifier: 7JGU3qBGQYu2JxeFweXnraCqXI9uo8UXZyhrr23N63o=
Subject key identifier: 29:F1:02:93:84:3F:00:E1:9E:7E:D4:C7:1A:9F:29:0D:36:54:C8:5C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75C79FECF4F2ABEB0B0344FD1532B794E36E52C5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730296ba-47a6-475e-8a13-bc345da2cf72.roa
Signing time: Tue 14 Oct 2025 18:41:37 +0000
ROA not before: Tue 14 Oct 2025 18:41:37 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:c7:9f:ec:f4:f2:ab:eb:0b:03:44:fd:15:32:b7:94:e3:6e:52:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:41:37 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=2d40b333182f5f505cf8d7d96bbae5b3f5e74674fdb524b29ba3aed89aaba533, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:fa:18:54:11:1a:5d:a6:d4:96:e9:eb:99:
de:b5:98:86:d4:9a:14:4a:7b:25:1d:70:ce:10:9f:
e5:ad:fd:02:ec:52:1a:b2:d3:90:94:dc:a6:58:11:
11:73:d4:30:38:f8:8b:42:bf:59:d1:d6:34:f9:5f:
2f:92:98:67:39:6f:f8:f9:85:3a:07:07:50:a9:35:
21:98:4b:6f:ab:d1:79:96:3f:9a:b7:60:bc:a2:ef:
95:dd:04:6d:ff:b5:b0:bf:de:e1:7b:fb:99:e3:f8:
73:db:bd:17:b7:fc:b5:7a:bc:98:7b:87:82:26:09:
26:c6:22:cd:5f:6c:5b:48:fa:80:be:8b:54:0c:2f:
30:82:ff:1b:a5:65:e0:6a:5a:9a:8c:95:b3:0f:15:
49:62:2d:26:d8:07:0e:23:00:4a:61:a9:6a:23:5c:
1b:9f:f4:fa:91:f0:18:62:eb:59:c2:b5:29:91:9c:
19:2d:a3:96:3e:54:34:7b:0d:cb:11:50:70:0d:4b:
30:4a:16:c0:4b:8f:ac:a5:90:03:e6:50:51:84:1b:
b2:34:66:cf:12:6c:4f:30:0f:4d:30:e1:24:bb:e5:
28:7b:f6:1d:b2:48:56:9d:8a:64:13:ad:bc:90:78:
3e:92:f1:69:02:c5:f5:28:0a:9b:87:9b:4a:54:ac:
88:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:02:93:84:3F:00:E1:9E:7E:D4:C7:1A:9F:29:0D:36:54:C8:5C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/730296ba-47a6-475e-8a13-bc345da2cf72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.123.0/24
Signature Algorithm: sha256WithRSAEncryption
af:eb:57:d6:4d:a5:0a:2b:18:a9:98:76:f5:0d:61:68:e5:17:
87:d6:1e:e3:10:14:ba:fa:04:e2:17:b3:50:4a:4a:24:9c:e3:
60:a4:8a:1d:be:5f:06:0e:f7:27:ad:b9:ad:37:45:96:8c:b5:
d0:8f:46:72:53:77:ff:cd:fb:40:a1:3e:2c:d2:dc:d5:b5:ca:
b2:ea:8d:63:16:17:d1:19:d4:8c:b2:12:11:b4:9c:62:39:2f:
f3:b4:38:3f:08:e3:93:16:5f:94:76:26:28:05:e1:dc:c8:45:
a3:d2:b4:db:1b:1e:d0:52:35:03:d4:c7:e9:9c:53:a9:60:11:
c2:26:e6:91:25:f5:ed:80:f9:cb:ea:fd:06:55:62:48:67:7d:
0c:64:09:04:7a:7c:3d:d7:a7:28:53:a7:30:3f:b1:d8:d0:09:
26:43:f1:b0:6e:b1:8d:40:a6:5e:09:ec:83:91:ad:36:75:5a:
67:b8:f3:62:79:59:25:92:fe:46:8e:4d:89:83:fe:c4:75:a4:
ec:b0:9a:5b:ca:cb:77:47:b2:5a:36:46:9a:6f:25:73:af:4a:
9b:85:38:b0:75:c8:c6:63:8b:49:58:e7:e2:85:82:69:ec:e5:
b4:36:dd:5e:79:e4:3d:f9:9a:d7:2a:a4:51:58:5a:90:01:d6:
d6:5e:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:12 2025 by rpki-client