Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9032075a-3f1e-4c4c-8594-afb3b56a5a16.roa
File: 9032075a-3f1e-4c4c-8594-afb3b56a5a16.roa (raw, json)
Hash identifier: KXmlSbd3wgYcclYjMulkn5ZbBhfXiPf1qP0Kjxwq72k=
Subject key identifier: 24:7F:63:6C:BD:A0:C0:A3:9B:2F:62:C3:A2:01:C6:AB:A9:72:32:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B0ACEB4F51E2C876791638A3A47271D554A911D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9032075a-3f1e-4c4c-8594-afb3b56a5a16.roa
Signing time: Tue 14 Oct 2025 23:12:58 +0000
ROA not before: Tue 14 Oct 2025 23:12:58 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0a:ce:b4:f5:1e:2c:87:67:91:63:8a:3a:47:27:1d:55:4a:91:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:12:58 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=501f6e42e0b041638c5bbbebecae66465a84ce3066ff8f53c0b317a3ea95f308, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:f0:ac:a4:ba:08:58:f7:0d:76:1d:e9:65:
52:40:5f:be:c5:73:f2:1d:bd:95:fd:d5:39:0d:23:
0c:ae:eb:e4:52:71:76:7d:91:db:08:47:e8:0f:12:
c6:a3:29:8a:fa:eb:9a:e6:d2:e5:05:04:23:ba:83:
fe:ce:b6:63:0d:08:89:c3:e2:04:15:77:34:f7:c2:
41:ec:b4:da:ac:10:f1:98:69:fc:9b:6f:86:ce:b2:
0c:95:d4:1d:53:67:9f:84:d8:e1:38:c5:97:01:fb:
9a:34:7e:2b:b1:a2:f3:fc:85:9a:d9:90:2a:45:c1:
73:5e:df:06:25:ff:26:d3:84:32:17:bf:08:62:0d:
0f:45:bc:2f:ac:e4:b3:52:92:05:bd:09:52:90:30:
17:3b:a1:3f:20:e4:61:72:1e:01:65:8b:6f:1f:9d:
7c:23:f9:29:d7:f3:96:d3:d5:84:73:66:cc:11:dd:
d1:59:1a:f9:5e:49:c4:5e:50:03:ea:dd:4a:84:8c:
c4:72:35:d9:d9:ee:10:99:e1:2b:6b:e8:87:21:2d:
0e:b7:ae:1f:df:66:33:1e:46:b0:20:09:96:4e:a1:
eb:29:c2:0e:c2:5c:4e:41:9c:f3:43:a6:e8:1a:f8:
5f:f2:b1:8e:92:da:3e:71:2d:29:59:a8:e1:15:df:
34:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7F:63:6C:BD:A0:C0:A3:9B:2F:62:C3:A2:01:C6:AB:A9:72:32:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9032075a-3f1e-4c4c-8594-afb3b56a5a16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c1:61:09:06:25:d3:d3:8a:b6:98:b5:f0:7c:2d:e8:83:ea:
b3:fb:04:d9:64:5f:90:dd:a3:23:ae:5d:05:75:e4:70:1d:54:
02:98:1a:b1:fe:d1:55:0a:81:20:b3:e7:5e:09:c5:32:81:3c:
03:f8:d5:30:08:2e:f1:fc:b2:0d:a3:fb:70:17:38:8f:3e:1e:
a3:34:84:75:03:52:ba:a6:6c:ab:c2:36:64:ed:f1:1f:1d:60:
4d:de:16:72:79:4d:40:e9:41:94:3e:17:50:a8:26:b7:13:2a:
72:81:75:0a:c3:19:dc:d3:90:8a:8e:02:fa:28:07:d1:3d:2a:
7d:55:45:9d:df:ec:93:fc:45:02:b9:fe:ce:c5:75:de:92:75:
c6:2d:bc:39:8c:0a:aa:2b:86:7a:b0:50:b0:f5:4a:75:76:b9:
6a:30:ad:d6:6b:86:87:52:47:56:31:82:61:20:07:fd:a5:2a:
60:a7:fb:c6:00:67:b5:bb:d3:36:47:6c:11:c9:82:b9:36:2c:
df:04:c0:bc:20:95:01:37:cd:42:f7:39:4b:3c:62:01:3f:c2:
b2:25:21:10:8f:b0:fe:24:12:98:f2:b2:67:d0:46:e8:ce:b7:
dc:f7:89:1e:71:e8:40:ba:a1:b1:b6:9b:a7:6a:b0:46:e3:4f:
ac:92:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:00 2025 by rpki-client