Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3ce70c-9fd7-4625-8533-d7c87b6b5f34.roa
File: 7f3ce70c-9fd7-4625-8533-d7c87b6b5f34.roa (raw, json)
Hash identifier: hhs3F4K7J92Me0uMN5dy9e5UzmEZtdLGFsYGjMiuUUs=
Subject key identifier: C1:B0:91:2F:D4:14:39:21:BB:1B:C0:A5:99:86:89:9D:52:A4:F9:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 153BB18F70A883D7A6D437F902A76283C2AF6664
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3ce70c-9fd7-4625-8533-d7c87b6b5f34.roa
Signing time: Wed 15 Oct 2025 16:52:04 +0000
ROA not before: Wed 15 Oct 2025 16:52:04 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:3b:b1:8f:70:a8:83:d7:a6:d4:37:f9:02:a7:62:83:c2:af:66:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:52:04 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=07b296cd94f451b041031c1c50d88beb0f5844361871aca6002670890bbd074c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:aa:e3:df:b1:b0:1c:20:a5:58:ee:cd:fc:
0b:db:49:48:39:1a:07:60:35:91:32:ca:ad:8e:dc:
92:69:0f:47:aa:8d:03:f1:9d:e7:b0:0e:04:c8:fa:
d6:8d:52:ff:e1:47:88:dc:aa:a3:06:81:ba:43:20:
80:8d:79:cc:90:a7:c8:76:e8:30:3a:7a:80:64:05:
6b:42:f7:36:57:fc:28:2d:1e:ed:e7:9c:65:3b:50:
00:e9:07:22:97:a5:aa:05:d5:dc:20:1c:a8:ed:12:
6f:9d:db:b6:74:35:86:f5:03:fe:27:aa:ce:62:21:
80:59:a8:77:b5:02:0a:40:35:5c:ec:54:81:29:35:
96:34:ee:c9:84:f1:cd:71:70:11:47:0c:11:0a:15:
2d:79:31:e4:9f:a2:97:63:80:c0:f1:5c:69:63:4a:
17:91:2c:80:98:59:11:ed:c9:34:77:a2:3c:32:5c:
79:91:34:38:6d:30:87:90:47:d4:6a:4d:20:67:bc:
d2:c6:2c:8a:73:89:e0:52:98:97:09:14:1b:59:b2:
69:ad:4d:03:1e:03:c7:6c:91:b6:8b:79:56:8a:8d:
03:1b:7f:fe:f8:89:8b:43:56:3a:16:75:7d:07:76:
07:29:b1:f3:27:d5:27:dd:46:a0:e9:ad:fe:8c:31:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B0:91:2F:D4:14:39:21:BB:1B:C0:A5:99:86:89:9D:52:A4:F9:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3ce70c-9fd7-4625-8533-d7c87b6b5f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.213.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f9:82:b0:4b:80:04:d9:aa:75:2e:eb:39:4f:5b:7c:bc:89:
bc:62:1d:4b:15:71:48:b3:e4:10:96:2a:aa:89:6f:59:5e:91:
06:b8:04:35:ee:b9:45:a3:0e:3f:52:c7:e0:4c:98:35:f4:be:
9f:d0:0d:3f:74:a6:02:39:96:22:8f:6a:6e:08:e3:31:78:cd:
8c:42:b9:52:51:ab:a7:b1:08:97:95:ea:08:66:9f:27:c4:a0:
cd:3e:5d:10:68:7a:5f:50:3a:69:09:5d:c8:08:95:f6:cb:f4:
98:2c:09:18:a0:13:7b:07:41:2b:35:b6:23:d0:e5:fb:ce:a3:
43:0e:b1:90:6a:b2:41:11:12:c2:38:b8:f6:c0:30:82:ef:7f:
f9:c2:55:37:0a:08:a5:29:17:af:f7:3c:3d:cd:3f:4a:52:26:
bc:80:e9:8f:d1:2c:fb:ed:b2:fd:51:d2:06:5e:13:d7:99:53:
f3:68:f8:3b:aa:cf:64:63:d6:9f:a1:0d:e9:13:fa:43:6f:c9:
3e:55:9e:a3:a6:4c:e6:e4:0d:d0:14:31:b6:28:71:eb:c2:d4:
4f:6c:50:4a:59:77:37:e0:47:0a:ca:48:ed:48:e8:e0:aa:4c:
3f:40:a0:f9:86:d2:ad:47:53:62:9c:da:63:71:7f:45:d7:14:
8c:db:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:29:52 2025 by rpki-client