Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917e09cf-bca5-4efd-811d-34811afd2767.roa
File: 917e09cf-bca5-4efd-811d-34811afd2767.roa (raw, json)
Hash identifier: lJfZwvRhXhT1r1mN96vj7/sebBzcFDmNC+BhpszuHdQ=
Subject key identifier: 5B:07:04:B3:18:C6:59:D8:BB:2F:59:BD:C8:55:9A:B5:5C:97:CE:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43CCBB6AB37CE518C9AA336FA041A03877A9980C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917e09cf-bca5-4efd-811d-34811afd2767.roa
Signing time: Tue 14 Oct 2025 20:02:05 +0000
ROA not before: Tue 14 Oct 2025 20:02:05 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:cc:bb:6a:b3:7c:e5:18:c9:aa:33:6f:a0:41:a0:38:77:a9:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:02:05 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e920269dd2cf9350d8fb52fa9618597accf8e12849a8c1268b084e6a7aa42b36, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:74:08:a8:f3:4f:80:e1:74:0b:45:bf:3c:
3e:c5:47:a2:21:d4:23:35:73:e1:b6:b4:46:69:6b:
39:72:db:f9:32:75:b9:22:79:f3:ff:71:c6:27:c5:
73:82:7f:a8:9b:f9:7a:fe:0f:d0:da:84:81:bb:7f:
5b:b6:e9:8e:cb:68:bc:cd:f0:ad:36:68:f1:cb:ff:
13:b1:1c:95:c4:90:c4:4c:6f:6c:41:ab:11:1b:e1:
87:4f:ef:b8:f8:e4:7b:ac:e4:13:f1:46:77:d7:02:
75:38:92:a2:99:61:fd:99:1a:ff:54:0e:64:09:78:
2c:c9:5b:93:2b:e3:78:86:66:20:86:ea:50:e5:e3:
28:5b:57:51:3d:6d:6c:c0:87:a3:f1:c2:e6:75:b5:
c0:ca:7b:5c:29:e0:6b:6a:d4:eb:6e:9d:ef:6a:da:
b1:25:b1:87:5d:77:56:12:b7:a4:40:6e:63:c4:ae:
f8:4a:d9:e1:04:40:17:77:5e:a9:f1:7c:c0:99:ff:
b9:56:d0:c5:2d:e2:6d:8d:3a:3f:4f:b2:0a:05:1c:
d3:7f:fe:ad:f5:aa:2e:8c:29:4e:78:d8:be:9f:ad:
40:51:09:64:38:82:40:ed:ca:c0:4b:a9:4d:36:2a:
ba:ab:53:61:d7:93:47:79:80:af:60:55:05:72:91:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:04:B3:18:C6:59:D8:BB:2F:59:BD:C8:55:9A:B5:5C:97:CE:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/917e09cf-bca5-4efd-811d-34811afd2767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.6.0/24
Signature Algorithm: sha256WithRSAEncryption
06:be:b3:d5:b8:1c:6b:71:b3:c6:7b:2f:94:05:63:ca:8a:01:
25:96:1e:e6:1d:04:ac:56:00:07:5b:6c:16:bc:42:01:8e:96:
83:bc:b2:05:7f:5d:b9:76:8d:a3:b7:fb:ad:d0:48:5b:ba:2f:
13:c5:42:84:64:e1:18:8d:c6:7b:52:49:88:19:56:b5:d1:9f:
67:62:c8:dd:35:f9:77:94:c9:66:32:ce:75:28:1a:37:a7:ad:
95:fa:89:3f:04:08:4f:89:fe:26:52:60:ae:fd:03:e1:78:16:
84:b4:e7:00:3e:89:8e:d7:9c:5c:fa:2a:9d:52:4a:2e:de:cd:
0b:da:6b:ec:98:67:06:9e:d9:95:65:53:74:1e:99:44:b5:f0:
a7:f0:d4:dc:5d:93:17:09:8f:07:6a:2b:5d:1e:0d:e9:d7:cc:
de:bf:79:be:7d:2c:87:aa:e1:f1:db:db:2d:38:48:88:05:3f:
f8:7e:97:c1:b5:d1:2c:a5:25:f7:b3:9f:65:c6:3f:75:de:25:
c4:d6:5c:68:78:a7:1b:f9:5e:77:47:68:60:2f:69:a7:e0:26:
15:76:c0:82:f3:20:4e:09:07:b0:61:20:91:2b:90:5e:49:3b:
4a:ce:23:ee:e7:60:50:e6:df:75:1c:77:e7:ec:83:11:9c:e8:
7f:a9:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:18 2025 by rpki-client