Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91c7a0a9-8277-4c8c-bd00-a9876758e0c9.roa
File: 91c7a0a9-8277-4c8c-bd00-a9876758e0c9.roa (raw, json)
Hash identifier: e6G+RjNFy/ofeiH7qoWCgAm9E1KZ5G88fAmXKgIw0Bg=
Subject key identifier: 37:5B:92:AA:28:A5:1A:92:AC:AE:DD:4E:F2:C3:2D:F9:B9:D1:05:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 181214E6E5DA9E9F3B5BE0F028D6457DF0535EA3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91c7a0a9-8277-4c8c-bd00-a9876758e0c9.roa
Signing time: Wed 15 Oct 2025 16:52:44 +0000
ROA not before: Wed 15 Oct 2025 16:52:44 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:12:14:e6:e5:da:9e:9f:3b:5b:e0:f0:28:d6:45:7d:f0:53:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:52:44 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=0dd35e3ee07bf31c38341507e0ce209e5aadc45377e25c4947d28e69acad1e17, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fc:07:3c:a9:18:e7:1f:b4:14:59:5e:18:6b:
cf:86:f9:65:bc:c5:ff:c6:af:c2:e5:db:2d:d3:4b:
b0:1c:96:3a:3e:e1:02:0e:49:20:6b:db:f5:b6:71:
d6:e8:ee:9e:a8:59:53:d5:ec:c1:3c:76:27:72:f8:
d6:c3:7f:41:eb:a9:28:7c:de:ee:10:d9:3b:d5:e8:
0e:81:42:15:7b:23:91:55:42:b2:12:c8:0b:4b:15:
59:93:44:48:65:5b:3e:e4:31:75:15:43:61:0b:97:
ed:1b:d7:1f:1a:bb:49:dd:cf:fa:90:41:da:2b:8d:
81:ad:b2:9f:bb:fa:b4:24:3b:f7:01:e5:b4:5e:b2:
a2:b4:b3:69:c2:87:f3:d9:53:7f:5e:e9:48:69:64:
57:2d:c4:5a:8b:62:95:2f:f8:01:8b:f4:d1:41:81:
14:fb:21:9d:e7:06:22:f8:c3:ec:c2:5d:7f:e6:e8:
a5:ae:85:eb:ad:06:30:42:5e:23:f7:a1:9a:f0:e2:
e1:74:34:b8:49:42:54:8f:b1:bd:21:c2:1b:5c:ac:
3a:7f:9a:be:59:e8:d5:41:68:3c:98:61:51:05:42:
71:68:5b:4e:5a:91:74:9c:da:0e:59:20:66:02:f4:
e8:91:86:36:2f:9d:66:6e:17:5b:2d:38:2c:44:98:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:92:AA:28:A5:1A:92:AC:AE:DD:4E:F2:C3:2D:F9:B9:D1:05:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91c7a0a9-8277-4c8c-bd00-a9876758e0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:de:7e:88:35:21:61:94:ad:16:a5:50:d1:a1:94:20:10:60:
8e:1d:3c:aa:0d:bb:a3:c9:64:47:f0:3c:ff:bf:60:0e:5d:0c:
cd:0e:5d:09:90:81:a0:33:3d:3a:f9:97:b1:27:33:5c:ff:29:
c5:7b:dd:92:a2:7d:23:57:21:4f:2d:29:20:e3:ba:0c:ba:e2:
94:e9:02:fe:2d:6c:4c:9e:a3:22:5f:49:64:3c:ed:63:95:92:
00:69:4c:62:2e:9e:5b:d1:10:82:73:4e:07:cd:87:6d:6b:06:
55:b5:f5:26:ce:5b:12:e4:2c:42:e2:34:7a:ee:eb:09:8a:ba:
2f:e7:6a:3c:44:23:a9:99:ab:1c:49:0c:ff:00:12:90:9a:5b:
56:6f:c9:fb:62:5a:b9:32:90:ee:24:01:ae:fb:1f:d4:f7:8a:
ad:8e:6c:19:01:cd:a6:23:59:4c:5e:05:7b:71:6e:ad:a5:29:
40:55:68:2a:5e:66:2c:54:47:d7:69:98:5f:3b:c1:85:9c:47:
f4:29:80:15:b8:a1:9b:10:bb:26:74:16:02:e2:53:3d:36:d9:
3f:5e:e3:f8:31:c3:73:c8:2c:de:d7:2d:01:fe:d0:33:2e:a8:
a5:89:c5:5b:80:13:d4:f6:bd:b9:7b:96:75:ce:fb:98:a6:be:
0d:bf:a9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:17 2025 by rpki-client