Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
File: 82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa (raw, json)
Hash identifier: n3D7GnnZVXLasjV9fuxT7SIx6mtfurk+R6YskFbLmEE=
Subject key identifier: 5B:3A:B7:F9:CF:65:94:FE:FA:7A:99:17:86:16:C6:89:F6:65:83:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36D1D3CD37F319D239E51C389D76238029BB322F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
Signing time: Wed 08 Oct 2025 00:39:03 +0000
ROA not before: Wed 08 Oct 2025 00:39:03 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.150.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d1:d3:cd:37:f3:19:d2:39:e5:1c:38:9d:76:23:80:29:bb:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:39:03 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=c7c1e8f4c9f7e7b95dcb73fd2d2d4389b472a7883ef01fd71fb7d78fcef4067d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:69:58:02:04:1b:a8:72:e0:ef:cc:74:2b:
8d:80:b6:3b:cb:9f:78:d6:bc:82:71:a0:e9:c8:cb:
fd:aa:b2:32:61:88:ec:d7:f6:2b:6f:f5:15:0d:1b:
86:ca:fc:2d:f2:5c:94:d6:a9:9a:8c:af:18:99:89:
54:ce:a9:71:e7:3f:30:5a:87:a2:02:5c:c2:10:32:
c5:f9:56:07:26:c7:0b:2c:f7:4d:c6:dc:0c:3d:cc:
8e:0c:67:85:0d:20:1c:4c:d9:86:0a:44:29:85:b6:
65:1b:38:37:a9:03:30:14:aa:99:3d:f1:07:8d:40:
2b:98:b2:ed:a5:94:1d:53:95:7b:2c:2e:70:7d:14:
4c:0d:ec:cf:09:d6:2f:7a:73:78:57:d0:3f:ed:95:
fc:cf:c8:da:92:8a:25:4b:c0:9f:0c:64:db:89:19:
71:50:2e:b2:fa:63:b0:6c:08:f7:02:f1:63:75:36:
21:53:b0:f6:b2:a6:b6:18:3f:bb:b8:9f:ea:28:ce:
ea:eb:21:aa:62:f5:65:22:1d:32:10:92:cc:d7:a7:
b7:16:c1:a2:4d:a5:94:8d:b9:a2:f0:d9:31:4c:0b:
70:2b:a7:13:28:61:a6:01:a8:76:17:55:11:cc:90:
05:f1:92:47:ee:ee:ef:92:ec:ab:76:cb:9f:89:18:
c1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:B7:F9:CF:65:94:FE:FA:7A:99:17:86:16:C6:89:F6:65:83:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82472b31-7e77-4ac9-b2af-3bfa80b720a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
65:65:17:12:fc:a9:59:52:43:5e:6c:00:74:7c:17:47:7f:f0:
93:45:78:77:d1:21:73:6d:75:fb:b6:f4:7d:7a:17:ec:9a:fb:
12:be:81:21:36:ca:09:52:2e:2f:aa:6d:e3:7a:a6:6a:e8:de:
0b:e7:db:de:e5:16:95:75:1e:47:a1:d5:0a:01:87:14:17:6d:
ac:cb:33:51:07:2c:13:dd:72:fc:d8:36:52:02:ab:6b:9a:18:
7a:d6:39:40:8b:bf:b7:aa:a6:16:55:2b:eb:2b:f2:b5:17:98:
6a:54:e0:7f:e8:d2:cc:41:b7:c0:9a:8b:1e:b2:2d:78:ba:40:
8a:69:eb:9a:ed:45:bc:39:f6:59:71:6d:d6:85:61:3a:d0:62:
2f:f9:82:ac:83:ae:a1:38:f9:9d:76:22:f9:5a:88:94:2b:9c:
db:37:fe:b9:41:ab:a1:32:4b:2a:66:53:4a:d7:f5:e0:33:9c:
8d:0d:fd:eb:48:e7:ac:10:ae:20:dd:e3:e4:37:41:61:7d:13:
c8:c4:db:f4:f8:16:ad:43:85:c1:19:63:2a:ad:8a:42:82:e4:
8f:a2:e2:36:ed:2e:16:74:93:3a:ae:3d:e6:6c:2f:8b:4a:d8:
bc:c6:c8:15:53:bb:d7:b8:38:06:7f:4b:fc:af:3d:d7:ed:71:
a1:03:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:55:55 2025 by rpki-client