Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9558642a-8636-4e01-ad14-eaa692d2ae3c.roa
File: 9558642a-8636-4e01-ad14-eaa692d2ae3c.roa (raw, json)
Hash identifier: RDCZXpLNSTdj/ib+Ks7m7K1rrZnTlJNirXXt7hsrpj8=
Subject key identifier: F8:BA:91:BC:31:90:D0:99:CB:9E:6C:7E:24:19:F2:AA:DC:FC:DB:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07772D66D001502651A75244F02A90DA8CA9F587
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9558642a-8636-4e01-ad14-eaa692d2ae3c.roa
Signing time: Tue 14 Oct 2025 18:52:34 +0000
ROA not before: Tue 14 Oct 2025 18:52:34 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:77:2d:66:d0:01:50:26:51:a7:52:44:f0:2a:90:da:8c:a9:f5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:52:34 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=68324f94465841de38f6c4b90db457d68a6710f14d8ab512927fbdad92ae584a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:6e:f8:93:86:00:54:3c:0d:e7:2f:74:cd:
b7:5c:e2:92:88:4a:d6:35:d2:e6:74:f0:94:8a:d6:
42:69:3d:06:4f:f4:f1:28:29:e8:0c:5b:a9:f3:e7:
cc:09:e1:d8:e3:3d:a5:4c:79:02:39:a0:ce:7f:57:
62:ad:9e:72:a3:82:a0:9b:77:f7:d1:1c:cb:5e:87:
1b:ec:82:f3:ef:1d:21:ca:2c:1b:ed:e7:b8:60:4e:
f5:6a:ca:60:84:f3:c1:48:bf:de:ca:59:04:2e:7b:
a6:f5:94:ed:3c:6a:ac:ef:5a:cc:18:c3:e5:b1:2a:
4a:3e:73:d8:f7:88:04:fd:60:82:d7:96:b3:31:77:
43:57:0c:e8:02:5c:16:d7:11:4c:a7:8b:e2:2b:5b:
fa:84:da:8f:88:53:12:f5:f7:73:45:15:d0:31:32:
c5:03:6b:f7:5f:f1:3e:da:91:bd:cb:07:51:61:38:
5f:e9:ef:d7:c0:4e:c1:3e:72:39:f0:7c:99:49:26:
bf:a7:c6:eb:0d:f6:59:9b:1e:90:fd:4c:b9:79:45:
bc:3f:a0:59:f2:13:2d:4c:ea:98:64:a1:8a:a8:26:
47:2d:5a:13:dd:fb:72:83:89:a3:db:b4:9f:5d:32:
c5:ec:18:af:08:da:2e:d9:e7:d9:c5:91:e7:1d:27:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BA:91:BC:31:90:D0:99:CB:9E:6C:7E:24:19:F2:AA:DC:FC:DB:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9558642a-8636-4e01-ad14-eaa692d2ae3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.47.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:85:f4:89:de:33:ac:af:7b:47:8f:c8:6c:c7:61:4e:21:d9:
80:81:28:d5:ad:5a:7b:f4:4e:15:1a:fc:41:64:89:e5:f7:75:
50:ac:57:43:9d:1f:ca:3a:84:d0:40:4b:4f:3b:47:37:94:2b:
64:de:46:da:bb:5d:aa:a5:6c:be:5e:3f:c8:e0:6b:9f:b7:d1:
1e:e8:ef:8c:92:35:b8:34:6d:36:46:b3:4c:fa:a5:39:e7:be:
9c:27:f3:f0:34:41:3c:10:13:cd:ec:56:85:1b:72:5d:3d:1f:
00:c9:64:31:f0:a9:ea:cf:f6:1a:4b:e0:9f:fc:01:a9:d7:f6:
42:a2:b5:23:24:3d:f4:8a:4e:e6:a7:26:97:07:2f:f0:6d:79:
2c:46:3d:c2:0e:c5:20:9c:23:11:cf:9a:3c:f3:c3:5a:fd:92:
38:9d:8b:be:6f:c3:1e:fd:5f:61:4f:09:88:d9:b1:a6:ca:ce:
90:14:c2:3d:09:70:40:5e:72:71:16:37:03:be:cf:06:64:c3:
81:c4:96:a6:53:37:bc:d5:8b:05:a2:29:27:9b:bc:da:f4:9a:
0e:f2:0d:10:98:fe:ef:88:6b:c9:b9:79:da:ca:d6:4e:19:b3:
da:b3:0c:67:3d:a9:ed:cc:e5:5d:4b:17:9e:31:6a:93:48:03:
53:ee:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:44 2025 by rpki-client