Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744a921d-def3-41ae-a48d-18bda4076205.roa
File: 744a921d-def3-41ae-a48d-18bda4076205.roa (raw, json)
Hash identifier: wDUaoAcUgMJ6zw8ecB6yKlVbDp/xfDFMj/yvqN5ccc4=
Subject key identifier: 82:9D:37:7C:70:FF:22:C9:EC:D0:67:07:FA:A9:19:07:CC:49:40:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4701F3B4EB117FE30AB26A03A2DEA5E3A48D7BF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744a921d-def3-41ae-a48d-18bda4076205.roa
Signing time: Tue 14 Oct 2025 21:51:14 +0000
ROA not before: Tue 14 Oct 2025 21:51:14 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:01:f3:b4:eb:11:7f:e3:0a:b2:6a:03:a2:de:a5:e3:a4:8d:7b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:51:14 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=702ad73975f48e932bd4f0c53ccce7aad57fca874070f548236554e85881411e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:7a:47:c1:ea:78:41:48:c0:9c:c1:89:29:
bc:d7:92:6d:63:2b:7f:4b:cb:23:51:ed:9e:f4:04:
30:33:f9:9b:4e:bf:df:1d:93:a5:92:f0:af:8b:1a:
5b:3f:e9:e7:36:77:60:78:10:c5:c3:2f:cd:ad:04:
00:9f:b9:17:51:e2:78:d8:58:98:12:92:e0:1e:4d:
25:d5:85:db:65:49:ba:da:82:82:d6:f8:8e:60:49:
69:e3:76:79:38:56:dc:0f:74:ee:bc:1f:00:04:f5:
62:7b:0b:b2:26:9c:5c:1c:25:39:9d:7b:28:f8:f1:
f6:8d:97:20:b3:33:7f:90:97:39:ff:90:79:61:f9:
cb:b8:23:9a:8a:cc:5c:57:56:19:3f:50:33:48:66:
12:18:d5:f4:e8:6a:bf:e1:5a:70:b3:20:1c:19:af:
03:16:fa:8d:29:67:8a:8b:e5:af:16:2e:3d:71:c1:
b7:ae:64:8b:c4:a3:ea:ce:9e:5e:f4:32:05:e7:fb:
38:bd:65:ec:31:d5:e9:13:53:b7:2d:f8:99:d5:3b:
5c:51:7c:2d:c8:a6:1b:3b:d5:a6:fb:96:a2:42:c2:
4a:d8:48:77:bd:e5:cb:eb:ee:94:0c:4f:a0:ce:6f:
c5:b9:06:e4:2e:b4:52:94:52:06:74:e9:f3:5a:f4:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9D:37:7C:70:FF:22:C9:EC:D0:67:07:FA:A9:19:07:CC:49:40:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/744a921d-def3-41ae-a48d-18bda4076205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:52:6a:51:7c:9c:56:f5:bc:0b:93:61:dd:c1:72:55:06:dd:
59:1b:49:9d:87:dd:87:2e:0d:d4:7e:8d:d4:4e:7d:a3:c9:4f:
cc:84:f5:1f:b6:1d:23:e4:5c:f9:ec:e5:9c:35:d9:bc:06:42:
37:b4:d4:de:80:e5:05:56:be:ba:57:25:5b:5d:38:38:b1:ff:
71:40:23:37:1a:4d:32:ae:4a:2b:f8:d1:4a:4d:b6:37:37:b4:
66:44:76:24:1c:32:ea:9d:06:90:71:6c:ee:e2:e5:49:88:87:
2f:29:af:68:cb:19:da:b7:0d:bc:93:f7:7a:91:e8:b6:51:d8:
cc:f0:42:21:a7:b9:5b:10:7b:75:4d:e0:ee:c4:eb:6a:3f:6c:
dc:d6:8d:90:3b:6f:e9:ae:f0:df:d8:d5:42:dc:44:22:b1:59:
76:82:8d:68:26:77:ef:ba:50:d7:b5:ae:e5:b0:2f:94:34:ec:
df:e1:ec:d2:17:b1:c6:99:16:03:1a:07:2e:56:e5:11:00:96:
70:a3:46:95:52:a1:6c:a8:e7:bc:0c:b6:06:e3:e9:21:c1:7b:
e7:22:be:ff:ab:91:64:0d:4c:a9:8e:10:37:ed:b3:9e:b9:f2:
6a:75:b4:14:4b:07:05:5e:6a:98:28:6d:26:64:0b:a6:eb:0a:
e7:d4:99:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:44 2025 by rpki-client