Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b78d2a3-011e-492f-8446-e52d592147ff.roa
File: 7b78d2a3-011e-492f-8446-e52d592147ff.roa (raw, json)
Hash identifier: FimgPiVgZbqGtD+vINPhRNBkI62sjv08BGF3oZh3RSo=
Subject key identifier: 8A:9A:AD:CA:96:36:BC:6D:85:3D:16:45:71:36:70:26:36:F3:62:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2861278F1DC3C61F42A883D5AD83BE1A9E6DF1BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b78d2a3-011e-492f-8446-e52d592147ff.roa
Signing time: Wed 15 Oct 2025 18:11:58 +0000
ROA not before: Wed 15 Oct 2025 18:11:58 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:61:27:8f:1d:c3:c6:1f:42:a8:83:d5:ad:83:be:1a:9e:6d:f1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 18:11:58 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=2ea3df73ea866049d8a1a81b1d022a68e966027cd9d53a9a1f31133024209eac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:7a:86:74:19:31:b9:a7:df:0a:0e:7a:39:
80:f3:2e:c4:45:d2:41:ee:c4:aa:55:79:36:a7:d7:
0d:f4:0e:a2:38:c1:2a:57:5d:e0:e6:82:50:1b:0a:
38:f8:99:4d:1a:b9:88:9c:89:6b:32:a5:6f:15:8a:
a8:f8:c5:a5:0e:80:74:4b:c4:c0:dc:c1:50:65:68:
6a:bf:82:2d:9f:ff:4a:17:25:8f:69:e3:48:84:ba:
d9:09:ef:c1:4c:f2:45:85:81:d3:5a:87:c4:8d:f2:
94:dd:8a:b1:f6:79:b4:41:ef:99:c7:00:11:f6:da:
e3:3e:a0:aa:2a:fc:d4:1f:c4:d8:c3:95:4d:5e:c5:
be:d9:d8:65:fa:d8:6f:da:ec:2f:f3:25:93:6b:f3:
52:89:3d:43:9c:12:f1:be:84:9e:3a:5d:7f:53:ec:
04:3e:2b:b2:64:5f:59:c3:1c:e4:56:de:ae:34:1b:
40:18:08:64:41:36:ed:91:ad:a7:39:74:0b:6a:e2:
9a:32:08:79:a9:66:63:a1:f2:ed:06:f1:66:d1:98:
c3:e8:e6:aa:6d:36:19:db:07:66:3b:a5:22:d4:3d:
ff:1e:1e:ac:25:37:d2:15:99:db:3c:4c:35:9e:c3:
8b:8e:14:6e:0b:fb:d0:87:d1:8e:b1:dd:ad:d3:95:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9A:AD:CA:96:36:BC:6D:85:3D:16:45:71:36:70:26:36:F3:62:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b78d2a3-011e-492f-8446-e52d592147ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a0:63:e8:8b:1f:68:56:3a:88:4f:aa:e7:d2:a2:18:c7:99:
d3:ee:21:b0:de:16:db:f5:bb:f5:21:83:f1:24:8f:3c:0f:e0:
e6:2e:d9:2c:b6:76:44:ef:58:2c:db:69:bf:64:9f:c2:a8:76:
97:bf:f6:a9:3b:ac:c5:7e:f8:d5:ca:b8:83:68:0e:4a:b4:89:
05:4e:97:6d:1e:0a:35:72:8e:b2:8d:a6:21:79:aa:3f:50:c3:
dc:07:9a:af:50:a5:64:ca:4a:07:a6:2c:b8:4e:e6:a4:25:1d:
c1:42:d9:5e:c9:62:fc:21:98:a5:9e:0e:25:48:8e:41:64:91:
e0:d9:0e:3f:80:bc:54:c8:56:db:18:11:e2:78:24:e7:22:25:
76:bd:02:8e:bc:23:9f:71:79:bb:96:c4:2e:82:42:bd:91:e1:
9b:95:af:43:26:ae:55:62:25:60:30:71:67:02:82:0c:23:75:
e0:fd:16:c8:98:65:fd:cb:08:1e:9f:81:84:7c:04:a7:14:9b:
30:3a:6f:cd:c8:2b:94:b6:b1:4c:98:da:47:f5:95:9f:b2:b1:
fd:85:fe:3c:47:65:b3:1a:6b:ee:f4:ee:83:1b:14:ab:77:72:
7f:80:79:87:30:5d:3e:92:5f:a4:7c:85:94:4b:a4:6d:8b:f0:
b7:81:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:26 2025 by rpki-client