Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/871d7a2c-e8d0-4994-a034-474cca1b9aca.roa
File: 871d7a2c-e8d0-4994-a034-474cca1b9aca.roa (raw, json)
Hash identifier: OuDW12R2BsFeblqfl5sCn8T5E1VyuW3cUO23PU6E884=
Subject key identifier: 82:A6:E3:24:DB:9B:68:50:63:35:78:61:FE:6C:08:28:59:76:DE:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4119C011ECB17DE9A6946450CF9B5D2B6D59EF29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/871d7a2c-e8d0-4994-a034-474cca1b9aca.roa
Signing time: Tue 14 Oct 2025 18:21:55 +0000
ROA not before: Tue 14 Oct 2025 18:21:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:19:c0:11:ec:b1:7d:e9:a6:94:64:50:cf:9b:5d:2b:6d:59:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:21:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=10eb7305f9b18003d9631b4e3810203c72a6fbcadc2bd6d8d41b89613fe390ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:63:5e:58:0c:5e:c0:b0:1c:2c:a8:41:57:
ad:6e:4d:e1:c1:75:5f:7d:9d:3f:cb:b4:d8:d7:1a:
9a:91:91:58:64:41:dd:e0:73:b7:a1:c6:51:4c:62:
63:c1:97:8d:b6:74:85:11:c8:83:5c:9a:58:7c:b9:
32:21:cf:9c:ef:ab:b7:12:b0:5b:a3:d4:26:12:f3:
d6:f8:77:8e:df:ba:fc:a7:69:95:95:20:86:ff:28:
00:2c:01:4e:17:d1:66:ca:31:8f:d1:34:3d:5a:7e:
78:3e:ee:4b:31:0d:0f:86:1b:81:37:3d:93:f8:50:
81:90:ea:64:e8:e1:72:b0:48:d3:76:9a:8c:dd:b7:
b3:86:f3:c3:84:31:73:47:af:49:46:9f:f8:4f:76:
ff:e3:f5:bc:10:15:25:ee:7b:cc:9b:4e:f6:9d:b7:
eb:de:03:15:36:38:9d:fa:99:e7:2a:8a:4e:e2:7f:
32:f7:64:4a:4e:9d:84:8f:11:57:06:2a:e5:ee:0a:
39:0a:95:38:7a:37:18:82:2a:36:10:62:f4:ba:3e:
a6:bb:2d:a8:b2:fa:53:f7:58:53:25:b5:71:cf:a4:
68:7a:6c:e4:65:81:25:81:9d:c2:84:81:eb:78:37:
96:97:7d:bc:ef:2f:e4:97:21:5c:da:35:3f:3e:d9:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A6:E3:24:DB:9B:68:50:63:35:78:61:FE:6C:08:28:59:76:DE:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/871d7a2c-e8d0-4994-a034-474cca1b9aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.51.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e0:91:2a:cf:18:60:e8:6e:62:64:a5:e7:86:36:76:11:ba:
29:47:a9:a9:d1:80:b8:47:96:74:7a:f7:11:7c:42:22:17:c7:
da:9b:a3:00:5a:5d:08:df:1a:a4:b1:a2:9b:a7:c5:d4:2e:d5:
d0:35:67:33:77:bc:06:01:d7:16:96:e8:09:21:23:7b:ec:94:
85:b5:9d:44:c8:9a:11:50:67:3d:6e:bc:dc:82:b3:d7:a3:e5:
84:eb:16:41:1e:ee:52:4e:53:01:22:ce:c5:82:e7:23:07:f7:
2b:9c:ea:ce:f7:88:1b:59:a7:e6:ca:80:e2:fa:78:ec:88:43:
ee:35:92:81:4a:29:ea:1a:b7:81:5f:7b:fd:4e:6f:02:72:6f:
1f:86:43:cc:56:c9:29:bb:9d:4e:9b:c7:cf:ec:13:cc:48:ef:
36:a8:f6:ca:f6:02:f3:97:02:d0:8b:41:e0:b2:6a:4b:cc:8f:
46:5b:7b:5d:e2:be:01:10:7f:0c:a1:4a:17:cd:a4:f2:ba:2a:
75:75:a8:c8:2a:e7:b4:96:e4:a5:45:3f:9f:2a:97:24:45:e5:
4b:76:7d:57:23:9e:01:35:f8:45:0c:5b:8c:9c:7e:c8:cb:40:
47:83:16:52:41:0b:57:98:7a:86:73:ad:d2:a1:05:63:6f:24:
a0:ee:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:21 2025 by rpki-client