Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f424add-c450-447d-a241-5ba3c33db7aa.roa
File: 8f424add-c450-447d-a241-5ba3c33db7aa.roa (raw, json)
Hash identifier: PFWvsBhQhvCYryXnJiTscrdkuGP19jAY5ALHyRDSNvM=
Subject key identifier: 0D:32:42:AC:3C:3B:A3:F0:28:91:49:8A:CA:C6:29:03:E2:21:03:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39BB529E927BCFA12C70E6A34AE0F64E3DBF28B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f424add-c450-447d-a241-5ba3c33db7aa.roa
Signing time: Wed 15 Oct 2025 17:52:05 +0000
ROA not before: Wed 15 Oct 2025 17:52:05 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:bb:52:9e:92:7b:cf:a1:2c:70:e6:a3:4a:e0:f6:4e:3d:bf:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:52:05 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=07c2a8ffafce1b25d7996f180bef876d99f20094bd92c1279b21c3885c8c1e53, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:9b:88:f2:dd:30:3a:99:2a:93:46:c6:c7:
3c:d8:2f:97:e6:a5:92:3c:39:5c:eb:84:16:72:a7:
98:94:92:ec:48:db:5f:a2:e3:ae:38:86:c5:2c:cf:
43:b5:a6:e8:2c:49:71:c3:8a:b1:29:08:77:79:fb:
c1:44:81:3e:6d:1a:70:6b:cf:8e:72:4d:d2:da:87:
3b:df:22:85:6d:58:ab:fa:94:ee:0d:09:02:a9:a5:
58:6d:58:21:ae:22:50:e9:29:21:62:f5:80:cf:22:
ae:6e:fb:9d:6d:7f:8d:ab:3d:f1:3c:88:0c:d9:14:
c3:ce:14:35:4f:9f:65:82:bb:e9:02:3c:bb:c8:56:
47:aa:2d:ce:d6:4c:a7:d4:ea:fd:7c:c1:6c:9c:40:
9d:fc:d6:22:21:9c:4b:f0:65:e0:bf:92:93:00:b1:
ea:eb:fb:bb:1f:d3:2f:5c:76:da:20:d5:fc:d4:78:
68:a2:78:8c:0f:83:ce:d7:b5:a3:99:a1:92:13:a8:
db:7a:f3:35:e5:55:2b:bc:68:c0:09:69:82:34:92:
e2:5d:1e:4d:70:a1:f3:43:b8:31:99:b8:c3:f7:c4:
fa:a3:08:8a:9d:57:6c:98:f0:5d:1f:4d:94:a3:cc:
3b:70:43:f4:26:51:7d:e9:00:a9:4d:b5:65:2e:ac:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:42:AC:3C:3B:A3:F0:28:91:49:8A:CA:C6:29:03:E2:21:03:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8f424add-c450-447d-a241-5ba3c33db7aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.50.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:44:6a:78:cf:4f:e7:f1:3a:e2:41:70:ff:c9:a8:06:3e:f7:
fd:98:69:67:36:82:8b:f5:24:d6:f6:d5:4b:cc:7b:49:5b:28:
c5:1a:08:aa:19:29:62:23:dc:92:50:23:14:f4:b2:d5:27:99:
75:0a:84:68:b6:41:47:a5:be:57:ed:c2:8b:3d:39:14:0c:e0:
1e:ac:03:f1:21:e5:e8:69:bf:05:ff:48:37:e2:4c:cd:8e:c3:
ac:20:05:94:c2:72:37:8a:ff:40:1b:ce:a6:be:aa:8f:93:55:
c6:10:4d:17:05:4b:c6:e2:4c:54:25:3e:65:23:d0:bc:15:87:
31:31:0e:84:5b:50:ef:d6:2f:ae:57:9d:ca:7a:2f:6d:0b:df:
f7:0d:4d:79:55:d6:58:57:46:95:3d:8c:e9:b0:80:2a:a0:3a:
51:c5:f8:08:80:d7:64:5e:22:e7:04:ea:95:e1:e3:25:ce:e2:
2e:3e:27:87:4f:6f:9c:7b:11:0f:b5:70:48:76:76:d2:15:f9:
ce:25:3d:8f:b5:fe:ff:83:5d:f5:3a:4f:ac:2f:6f:a0:59:90:
d9:29:f6:97:d9:28:87:f3:dc:61:26:f3:40:c4:11:c9:e6:1c:
c0:3e:6a:38:1c:4d:37:79:dd:42:1e:e0:bb:de:b2:ed:74:c0:
c5:12:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:09 2025 by rpki-client