Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d553be-b6d3-43e6-ab18-ccce3005d5eb.roa
File: 83d553be-b6d3-43e6-ab18-ccce3005d5eb.roa (raw, json)
Hash identifier: 4FjK6YojJ9szs1cx5xzVCuSJHeHCsrQfq3trGDs5oUA=
Subject key identifier: 28:77:D6:19:4D:6F:AB:3D:25:4E:59:5C:D7:B2:C5:50:D0:A9:52:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EAD057B7DCE76AECECF4441F62561AA75E066FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d553be-b6d3-43e6-ab18-ccce3005d5eb.roa
Signing time: Tue 14 Oct 2025 21:42:46 +0000
ROA not before: Tue 14 Oct 2025 21:42:46 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ad:05:7b:7d:ce:76:ae:ce:cf:44:41:f6:25:61:aa:75:e0:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:42:46 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=723d2adf2a9fbdcac1a9b606b619f9e893bd06eae8c2f2d2d039835ad5e0475c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8c:16:56:b5:3e:85:6c:49:8e:2d:30:bc:28:
77:df:b3:aa:54:44:73:3a:d3:2b:e5:ee:54:1c:7a:
02:4a:e4:cd:00:b5:1b:1b:ac:70:2f:17:2c:2a:ea:
05:f2:17:9d:ad:7b:f8:5d:cd:ef:8d:e0:65:13:86:
56:59:bc:89:71:5c:8e:c1:98:8c:c6:c5:f0:c8:b3:
6d:8f:d1:72:04:dc:17:bd:b7:19:95:26:1c:4a:3e:
a6:20:58:3c:0a:d4:bb:d8:a4:1b:1a:0c:d5:28:ad:
d6:4f:91:d9:61:62:fb:c5:94:89:42:41:41:d3:34:
ac:78:56:31:ca:18:2d:db:ff:cf:7d:ed:af:48:9c:
c6:7e:1d:45:f3:89:df:71:f2:d8:e1:a4:c8:13:67:
ac:6f:af:53:e8:2c:17:58:20:28:bf:38:d2:4c:24:
15:9c:ee:6d:46:00:67:65:b5:ac:99:a3:f7:61:aa:
49:73:56:30:67:88:8e:84:77:6d:b8:a6:d2:d0:3a:
43:f7:59:39:89:6e:02:7b:19:9a:8f:03:c6:49:ef:
4b:ce:63:70:0c:fb:10:4e:5e:5d:91:ff:2f:bc:89:
24:1a:6f:16:96:d2:f8:5e:99:3e:cc:28:c1:c7:76:
8c:0a:71:9f:d1:d0:b5:5f:cb:fe:b4:04:de:4a:91:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:D6:19:4D:6F:AB:3D:25:4E:59:5C:D7:B2:C5:50:D0:A9:52:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83d553be-b6d3-43e6-ab18-ccce3005d5eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.216.0/22
Signature Algorithm: sha256WithRSAEncryption
01:af:8d:1e:42:a1:af:52:8f:df:49:71:b3:3d:25:3f:b9:aa:
7a:36:18:15:22:9d:22:54:89:82:a5:55:cb:47:6d:d2:70:77:
c8:2f:25:43:c6:e0:ba:08:08:d5:66:a5:48:76:14:62:af:db:
cc:d7:10:5e:51:88:a5:e4:79:cd:78:1b:f9:c7:d4:c8:22:f7:
f0:af:e7:d1:34:37:65:27:1e:cf:3b:a5:d5:df:85:bb:63:35:
e5:9c:22:16:8c:2a:b3:e1:79:0f:92:f3:50:2d:c8:51:4d:af:
e7:74:36:29:e4:3c:b9:64:e2:62:9a:6f:a5:46:50:28:51:28:
3d:dd:78:de:40:57:f1:74:aa:90:53:87:7f:0e:06:25:5c:a5:
28:4a:d0:27:26:62:c6:dd:c9:5e:d8:1f:a4:27:27:94:2a:ea:
4f:5f:a3:d2:48:53:47:56:dc:2c:0b:17:0e:73:44:c6:43:a0:
9d:e1:79:0b:f3:1d:75:47:b2:02:c3:0f:91:ca:2e:19:f8:ab:
03:d0:a4:23:d9:51:1e:2c:af:a1:31:e0:53:30:de:06:91:4b:
27:14:32:e6:ca:6b:89:aa:f6:5e:f5:3c:77:cb:8d:49:dc:0e:
fc:20:55:ef:b9:60:28:59:c3:30:02:15:34:f6:ef:9f:2f:4b:
c0:fc:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:29 2025 by rpki-client