Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe43877-f5f2-4fa4-9371-6f11ecf8bf0e.roa
File: 8fe43877-f5f2-4fa4-9371-6f11ecf8bf0e.roa (raw, json)
Hash identifier: 9vCrBePCkWdbsCy3G7+VkUaH8LAYTax1FdpCVwqpbPs=
Subject key identifier: 91:96:4C:4D:75:F7:AC:77:5E:87:42:10:4B:21:78:FF:2B:6D:70:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 666E875090E2CB61BAC255B611AB00FE0589DBD1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe43877-f5f2-4fa4-9371-6f11ecf8bf0e.roa
Signing time: Tue 14 Oct 2025 23:42:40 +0000
ROA not before: Tue 14 Oct 2025 23:42:40 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:6e:87:50:90:e2:cb:61:ba:c2:55:b6:11:ab:00:fe:05:89:db:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:42:40 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=501382684f23a647f2ff3ed751ffe0292aac7194ef59d35ebaa9aa0db498a9fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:b5:7a:e0:bb:fb:56:cc:c0:5c:14:29:ea:
65:6c:13:c0:8b:a7:53:24:37:94:be:32:61:7f:e6:
07:95:aa:48:da:72:ea:c0:02:81:43:ac:27:99:84:
e1:f4:2e:e6:8f:5f:9c:6f:86:23:5b:18:45:70:68:
14:7f:b6:bd:0f:91:51:97:1c:0a:7e:cf:6a:9d:9d:
98:a8:21:1a:a4:f8:86:0c:a7:5c:81:be:d9:79:12:
cf:a2:ab:3d:91:b9:cf:8c:c4:fa:b9:24:12:3a:63:
39:b2:8d:e7:d8:f2:0e:4a:fd:3b:cd:a0:db:b1:6b:
73:0c:5d:1b:4f:5a:99:13:98:c9:a0:56:99:f3:06:
70:6c:8d:2b:6a:95:c3:d4:e3:4c:b9:42:bc:d8:c6:
47:51:5e:51:f8:cd:82:07:54:8d:d2:04:e7:fb:97:
95:96:6c:c6:29:5f:16:f4:4e:fc:96:c5:08:13:05:
85:57:ef:37:57:1e:cd:10:6c:6b:5b:ba:55:20:79:
25:0b:76:0f:28:67:07:12:55:67:9c:20:53:1d:78:
8b:9e:fb:a3:90:c6:db:e1:23:4f:1c:db:c0:61:ea:
a8:33:05:33:68:3a:1c:5b:c0:60:40:df:9e:38:88:
b9:37:c5:17:3a:d2:25:6a:47:d6:b8:57:e5:06:35:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:4C:4D:75:F7:AC:77:5E:87:42:10:4B:21:78:FF:2B:6D:70:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8fe43877-f5f2-4fa4-9371-6f11ecf8bf0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:48:b5:e8:f6:38:e3:c2:14:46:fc:81:63:95:8c:21:21:7d:
11:6e:69:83:6b:d7:4b:53:fd:fb:76:69:72:59:fa:b9:d5:f6:
04:d3:15:c0:c0:8b:04:a9:48:15:50:6e:b4:99:33:c4:10:88:
37:49:b1:2b:87:02:a2:70:6b:76:05:19:90:4e:eb:b3:7b:ca:
db:94:5c:f6:8f:f7:0b:61:f8:15:95:96:c4:7b:4c:55:fa:40:
7a:5d:38:e7:8b:7b:0d:d2:2c:24:47:a4:aa:ab:fb:08:df:43:
ab:ba:17:42:4f:b0:55:51:ab:26:29:cc:97:8b:a4:4c:03:ee:
11:0a:85:0d:a8:51:2a:04:f6:e8:79:0a:eb:7a:fa:cc:37:44:
44:f4:fa:70:d0:7e:2c:7b:6c:e1:11:28:2b:50:e5:c7:4f:45:
ef:6b:bd:f4:6b:f7:ac:c9:d6:da:84:be:38:72:73:8f:e4:c0:
71:71:27:c5:2d:69:ed:06:05:cc:df:a3:1c:a6:bd:e5:ed:2b:
47:17:70:9d:3c:2b:58:f5:13:1f:40:1d:94:29:c8:01:e6:73:
fd:38:2a:44:ac:8b:81:4d:66:94:72:6e:04:0f:5d:dd:cd:e0:
ea:90:44:3f:3e:8f:2b:37:02:c8:06:7f:70:72:c0:06:d5:68:
c5:f9:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:17 2025 by rpki-client