Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/877f546b-60fa-4428-97ee-e71037c68bff.roa
File: 877f546b-60fa-4428-97ee-e71037c68bff.roa (raw, json)
Hash identifier: X1baJIRX7CN2S+YsbRZ0dFnY5ls5E+Q/yOoZ1zuK5HU=
Subject key identifier: 63:FD:98:3A:99:BE:E9:7C:42:98:34:F2:F0:D3:03:1D:47:89:88:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E4B385C911308DA8E696A8833F132ED246AB465
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/877f546b-60fa-4428-97ee-e71037c68bff.roa
Signing time: Tue 14 Oct 2025 19:11:18 +0000
ROA not before: Tue 14 Oct 2025 19:11:18 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:4b:38:5c:91:13:08:da:8e:69:6a:88:33:f1:32:ed:24:6a:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:11:18 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=6b38a02fa5e26647bfb260c3c65af6fc67a4d3b5e0798b29fbe57261baeb069c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:b8:3e:3e:0c:bc:fb:1e:2d:17:2a:48:4c:
93:55:cb:72:22:79:f6:ea:34:ad:e3:e3:bc:29:96:
56:c2:51:c6:58:ea:d3:20:63:2a:45:b0:67:a5:18:
86:03:c2:29:67:3a:66:d5:00:2b:07:1c:94:2f:92:
b5:e1:78:d3:1b:d8:28:2c:21:2b:2d:d4:bb:6f:11:
d6:ce:af:b0:3a:fb:71:15:d8:78:53:54:d2:63:f1:
db:5e:1a:b9:33:99:6c:c3:23:2e:7b:6f:7f:56:6a:
4b:f6:12:2b:c9:80:36:ee:23:14:b2:79:63:2c:97:
04:ee:c5:81:be:c6:83:db:33:da:e5:be:13:2e:7f:
bb:61:48:c5:e3:ac:61:55:fa:d8:e2:22:63:7c:49:
10:d7:9e:68:50:ce:7f:6e:3e:b9:7b:f0:b9:35:15:
91:dd:48:05:b3:83:99:e7:32:70:2e:f6:2a:dc:bd:
fa:66:e0:c4:85:4e:ad:ca:5b:af:48:c3:f6:a9:d0:
f5:70:a0:3a:72:38:80:3c:04:2f:63:6b:08:11:7b:
95:40:ff:a0:1f:9b:c0:b4:6c:c5:09:8b:27:28:3e:
b4:04:a2:24:8b:3d:60:8d:5f:bc:47:0c:c0:fd:07:
c6:02:6c:2d:0e:83:63:92:c0:eb:27:68:24:f1:9a:
3e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:98:3A:99:BE:E9:7C:42:98:34:F2:F0:D3:03:1D:47:89:88:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/877f546b-60fa-4428-97ee-e71037c68bff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.50.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5e:57:4e:ab:cc:3d:ef:d2:b6:3c:d8:5d:61:23:b8:85:c2:
36:aa:7d:4d:cb:ba:e1:c7:6f:cf:cc:17:0c:95:23:82:9b:b4:
87:f5:74:6c:9f:a8:e2:fe:a9:f6:06:52:80:3a:b7:85:11:03:
dd:c6:20:00:15:e6:69:3d:01:03:38:e1:90:ea:c1:48:cf:61:
ea:c1:42:ac:b8:19:e0:2d:48:c0:a4:b5:6d:db:2b:43:fa:61:
37:d5:98:b9:ff:0f:9c:5d:25:9f:a5:a2:cb:ee:65:cd:c4:c9:
c6:fc:5c:8f:26:1c:b3:c4:a9:5f:55:2f:0f:55:6e:91:9d:22:
ca:49:d9:23:84:4b:cb:47:05:e6:95:84:bf:04:7e:76:60:b6:
a8:eb:39:e6:14:74:db:1b:35:b9:77:5c:03:87:6d:23:2f:17:
36:cd:ff:2d:7b:16:73:81:9d:84:cb:46:05:72:13:30:32:3e:
8c:f6:7a:a6:38:30:bf:e6:77:6d:96:a8:b3:28:aa:d5:fa:98:
ce:67:7f:dd:a6:74:db:01:6e:c1:89:dd:98:78:9b:c6:6d:b1:
cd:a4:f4:03:d9:07:ab:6e:0a:99:2c:c8:74:4f:73:cd:30:7d:
80:2e:d3:66:ad:54:08:67:13:fb:10:15:67:a2:aa:9b:99:64:
18:15:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:47 2025 by rpki-client