Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938e3af0-2ab2-48ed-8d04-62ae59f314d0.roa
File: 938e3af0-2ab2-48ed-8d04-62ae59f314d0.roa (raw, json)
Hash identifier: pmlE7ysjWF5pKINoRluEac0kRDbkPw3t3/Dj8J4fpxQ=
Subject key identifier: 88:8C:E5:8A:97:7D:91:C0:F6:01:88:0B:81:03:49:9D:1C:B8:CF:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EF6E37B50179EAE670981A50928D539497E099D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938e3af0-2ab2-48ed-8d04-62ae59f314d0.roa
Signing time: Tue 14 Oct 2025 21:21:16 +0000
ROA not before: Tue 14 Oct 2025 21:21:16 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:f6:e3:7b:50:17:9e:ae:67:09:81:a5:09:28:d5:39:49:7e:09:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:21:16 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=0a975161e012ef307662bff6a2dc7dc67e666fb9015389f658192d3a9537ea9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:6b:80:7f:f6:ba:95:70:d1:25:87:d5:dc:
07:55:28:7f:f7:f2:47:71:1f:d9:fd:f2:44:cf:ec:
0c:b3:92:57:d2:92:66:50:90:ef:74:a3:83:65:c2:
51:f6:a9:d6:06:22:8b:09:b1:b0:6f:51:0a:6d:44:
f3:55:95:74:3b:7c:e6:29:94:c5:e8:d7:0b:6f:be:
36:cf:c9:ed:87:b5:09:17:c7:95:40:35:ec:f1:19:
6b:17:0f:ff:8b:d0:fb:8e:2b:ae:9b:7b:4e:1f:6a:
a7:bc:4a:b6:8d:37:40:84:e6:3d:11:80:23:81:f1:
41:f8:16:09:85:3c:06:ab:21:7f:dd:1f:93:3f:9a:
fb:37:22:7a:1d:18:cb:da:a9:46:0a:86:1b:01:d0:
c0:5b:cf:2f:00:4f:93:29:9d:8f:2d:f1:92:55:ec:
db:25:1b:67:df:5c:58:fb:38:9e:e6:28:5b:f1:f0:
ea:4e:05:6b:bd:6f:cc:03:2b:e5:d4:5a:d3:19:fe:
df:93:f9:58:d8:09:5a:11:c0:5c:e3:0c:f7:80:a3:
ba:ad:67:07:9e:0e:4e:90:08:49:2a:c4:c1:cb:6c:
96:04:22:d8:aa:5f:26:01:2b:5c:78:13:e9:f4:f5:
9c:a3:96:97:60:4e:d7:7e:01:df:bb:b6:b5:94:1d:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8C:E5:8A:97:7D:91:C0:F6:01:88:0B:81:03:49:9D:1C:B8:CF:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/938e3af0-2ab2-48ed-8d04-62ae59f314d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.16.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d7:84:c5:6a:fd:fe:f2:52:73:1b:ad:41:1e:4c:76:bf:71:
3c:8e:a6:d9:a8:9e:91:2b:da:27:8b:3e:5f:3a:36:f6:ed:a6:
47:06:0e:7b:b7:d9:59:30:67:c8:8c:df:09:78:dd:39:b2:15:
ad:43:55:0f:8b:56:7f:91:4a:2c:7b:a5:08:f6:7e:21:8c:85:
fb:65:fc:0e:31:6f:72:2f:92:ef:9c:6b:13:2b:0a:0e:25:0b:
c1:1e:97:df:61:c5:01:df:99:d2:49:f3:89:80:76:6f:db:77:
4e:84:fe:91:12:b6:d0:e6:27:0f:57:b9:59:19:e9:1b:93:c0:
4b:1f:17:15:e7:d9:ce:4b:e6:8f:19:c3:69:f3:2b:9d:fa:b4:
25:e5:9d:2b:7b:4a:3b:4d:00:1c:33:c8:2d:30:ca:67:c6:8e:
52:b2:57:4e:6d:22:72:46:f2:c5:d6:e1:c0:08:ce:c5:9f:b4:
f6:28:d6:5c:82:ae:b4:1d:a0:6a:ab:e4:9f:17:93:6e:5e:e1:
91:04:75:c2:1a:29:31:ee:74:17:7a:56:eb:55:11:ec:10:31:
ef:09:d7:58:59:29:be:27:77:fa:47:98:fd:8e:b5:fe:4b:ab:
c8:c3:e7:0e:04:fd:29:28:f1:4c:83:7c:d6:74:f4:36:6d:d6:
c7:db:80:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:01 2025 by rpki-client