Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8870fad5-74d3-4aa9-8ded-a015ccc1201d.roa
File: 8870fad5-74d3-4aa9-8ded-a015ccc1201d.roa (raw, json)
Hash identifier: YfBLmxQ3im/qwZzdtjvLXfLapEililBg4d0LAeUwc+w=
Subject key identifier: 40:8E:8B:31:B8:2B:D2:95:1E:D0:33:66:A6:A0:95:04:EB:A5:91:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72DC202CF382A9B829E9762FAA284C126C6E40FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8870fad5-74d3-4aa9-8ded-a015ccc1201d.roa
Signing time: Tue 14 Oct 2025 20:22:56 +0000
ROA not before: Tue 14 Oct 2025 20:22:56 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:dc:20:2c:f3:82:a9:b8:29:e9:76:2f:aa:28:4c:12:6c:6e:40:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:22:56 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=454fa339fd69ca4cfd193d90cd752bffb431f28f46fd6840e4fa98eb837f658c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:78:37:3f:83:04:cf:5e:fb:dd:4d:8b:41:11:
6c:20:89:b4:8f:99:e4:51:98:a1:56:30:6b:51:31:
fd:18:13:9a:98:f5:0d:94:1d:c2:62:36:2e:ad:ee:
1c:0c:d0:04:a2:01:a2:4c:a8:3a:1c:18:5a:f6:52:
d0:51:2c:39:d8:97:d9:03:1d:2a:12:b9:f3:a7:10:
33:a6:a0:50:81:ea:d6:c1:6c:70:e5:d6:24:de:49:
3b:f0:78:64:a7:2c:6f:06:d9:4b:bd:3f:e9:3b:ee:
b0:40:c4:2c:57:d2:00:06:57:1f:b1:e6:0c:b5:67:
44:22:db:d0:d0:9c:28:f4:51:2b:3e:f2:1c:48:f7:
39:ef:be:c6:39:04:fb:db:56:49:f0:05:05:4f:3a:
e8:ae:d0:f0:17:c3:ef:7a:3d:68:38:93:be:11:8a:
a5:59:03:52:ce:0a:c8:9e:54:10:ba:a0:48:9f:37:
fb:54:87:2f:0e:64:98:38:40:db:fa:bd:16:18:00:
9d:76:0c:47:6d:a6:3f:18:3b:9a:da:70:e8:80:27:
24:7f:8f:c4:48:dd:f7:d0:b8:35:51:6f:af:51:d7:
e2:ad:10:15:25:f1:e5:3d:3d:9e:b6:a7:9e:b0:c5:
a0:cb:55:71:c8:80:de:37:20:48:63:0a:71:5d:d2:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8E:8B:31:B8:2B:D2:95:1E:D0:33:66:A6:A0:95:04:EB:A5:91:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8870fad5-74d3-4aa9-8ded-a015ccc1201d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.31.0/24
Signature Algorithm: sha256WithRSAEncryption
72:02:94:37:14:be:26:19:f9:86:74:2d:7e:99:13:36:8e:03:
eb:4e:6b:04:f0:c5:88:e2:a0:34:9e:e8:bf:cc:1a:bb:e1:a0:
1e:75:eb:5e:11:40:83:79:8a:56:40:01:f9:4e:e0:40:ee:b2:
fa:a3:04:d3:27:10:ec:52:76:d3:66:b5:db:b8:4b:1f:be:4f:
bf:42:ce:b4:f6:24:85:51:73:d0:e6:36:e6:ea:3b:77:32:57:
42:b2:34:eb:de:99:28:6e:0f:5a:89:94:2e:1c:b4:ed:a2:4f:
7d:3a:86:22:7c:47:88:8c:7d:fe:4e:c5:cf:bd:07:8d:8c:f4:
fd:56:15:48:fe:19:42:d7:ce:07:11:d9:ed:f1:d1:c7:4c:a2:
64:f5:61:29:7c:27:87:cc:9d:89:8c:8e:01:63:48:03:28:60:
94:2b:07:47:c4:9a:0e:ae:68:13:57:92:a3:2a:2c:a0:5d:07:
e2:35:c4:dc:9a:45:ad:dc:db:7d:5c:32:17:52:53:c1:26:2d:
40:c2:69:29:ff:7c:df:a9:a7:d1:cc:d1:d6:81:0e:04:25:3a:
6c:4b:0f:1f:a4:34:df:43:71:82:42:62:ff:1d:dd:a8:b8:08:
b6:6d:bb:5b:15:58:3f:84:f1:a4:eb:6d:a6:5f:d6:b3:f8:27:
d8:ca:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:01 2025 by rpki-client