Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75426ddc-82a3-43f9-bf78-31eab0ccefdb.roa
File: 75426ddc-82a3-43f9-bf78-31eab0ccefdb.roa (raw, json)
Hash identifier: UKaEFN9P61VfF3eIck9HMkAbJqmppTLeW9jRUszpj8g=
Subject key identifier: F7:57:D4:B6:B2:F9:42:11:06:12:47:2E:7D:1E:84:21:E6:CD:F5:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0403C882D4C06BDE634C0F2E55A03C1EDF3C02BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75426ddc-82a3-43f9-bf78-31eab0ccefdb.roa
Signing time: Wed 15 Oct 2025 16:39:39 +0000
ROA not before: Wed 15 Oct 2025 16:39:39 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:03:c8:82:d4:c0:6b:de:63:4c:0f:2e:55:a0:3c:1e:df:3c:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:39:39 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=c28773ab4592b3bbd20e862bf9847ef998999c59f21a4f6ebddde569bac2f6ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:12:54:92:21:80:ae:01:96:4a:9b:60:53:
98:29:ac:5e:f3:88:57:a4:a1:ef:dd:9f:5e:6e:fe:
ce:53:d6:8b:5b:a3:05:2f:c5:32:28:59:1f:85:b2:
f9:da:68:ba:81:b8:94:f0:7b:23:b0:e9:f6:7e:bf:
70:fb:ef:23:8a:b8:40:b7:6e:01:a4:4b:a1:0e:35:
d0:7b:0d:e7:a8:d4:30:fc:9b:8c:57:d8:b4:1b:d2:
16:ad:15:33:fb:14:3b:28:b1:a3:3c:34:49:e4:09:
ca:dc:cf:87:21:27:72:49:db:8a:e6:cf:c6:7e:c4:
ce:37:93:03:13:f7:78:30:55:c9:bc:c8:56:50:ce:
c4:9b:45:d4:42:5a:99:11:b7:f3:71:53:b6:bd:65:
26:35:1c:d8:5f:80:68:7c:b7:f7:52:6f:f2:38:cf:
a4:1a:c5:98:d0:fb:0b:59:7e:08:24:73:25:9b:8a:
7a:7f:f3:3b:fe:b0:ce:4e:83:96:f6:60:c2:76:c8:
e7:fc:95:83:3f:c6:c6:40:2e:29:d9:0c:3d:cf:5f:
fa:86:be:e8:e3:6d:7e:00:d2:5d:2d:b5:e3:d6:dc:
19:9a:b2:7e:fe:bc:4d:f6:39:ca:d4:d4:67:9d:70:
82:cb:bc:0b:2c:54:be:d1:19:4c:ef:cd:32:62:0c:
7a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:D4:B6:B2:F9:42:11:06:12:47:2E:7D:1E:84:21:E6:CD:F5:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75426ddc-82a3-43f9-bf78-31eab0ccefdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.235.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:ef:79:b2:5a:52:a9:b0:2d:20:e1:26:67:37:e0:1d:af:
e1:ff:1e:c7:a4:da:36:20:b8:5d:00:3a:6e:cc:b9:69:85:e9:
0f:39:79:3c:3a:54:8f:74:a8:cc:0b:49:97:d3:17:af:65:a6:
92:5d:4f:fe:ed:98:79:5d:36:71:13:31:db:b8:0a:60:5b:9f:
2e:60:e9:ea:6d:98:a2:bb:c4:e1:c8:a3:ef:b7:d5:0d:c4:ea:
19:83:0d:91:fb:8a:bc:71:5f:55:10:d4:2b:49:e7:14:47:c6:
48:c5:0c:58:fd:bb:82:23:82:eb:5f:6b:aa:3a:ef:dd:57:0a:
a3:bb:31:ba:75:13:2c:9e:be:65:21:b9:b1:95:28:c4:20:d1:
c4:bf:cc:9c:6e:88:8d:42:5c:ee:3f:04:01:84:14:8b:74:05:
e4:0f:31:54:90:1f:f0:67:4f:db:e3:55:27:d3:d7:43:c7:3c:
6a:e9:29:1d:79:7e:37:7c:5d:13:e9:7e:09:34:51:e2:93:7e:
6b:6a:98:04:3d:bc:1d:e5:a3:a9:4f:78:db:98:96:9d:b3:b2:
08:45:51:6c:e8:d7:2a:c7:e2:94:21:9c:24:75:0e:99:fa:9a:
e2:50:67:eb:bb:54:ad:cc:84:05:e8:67:30:bf:a3:e5:4c:f6:
ee:f3:31:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:22 2025 by rpki-client