Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9747be37-9afe-4cb8-8ce0-43a6945f5afc.roa
File: 9747be37-9afe-4cb8-8ce0-43a6945f5afc.roa (raw, json)
Hash identifier: 3z6ejFEZHbHfuLSSFsTUAGNmRUxiwsudFyO3jwPVhGE=
Subject key identifier: 85:D8:3C:39:E1:31:85:AB:FB:00:05:45:26:F5:99:9F:1C:2C:5A:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A210D7645E76A999E1F61D4E12F609D9DC950C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9747be37-9afe-4cb8-8ce0-43a6945f5afc.roa
Signing time: Wed 15 Oct 2025 17:01:18 +0000
ROA not before: Wed 15 Oct 2025 17:01:18 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:21:0d:76:45:e7:6a:99:9e:1f:61:d4:e1:2f:60:9d:9d:c9:50:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:01:18 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=e2ffeceeb5042ae02b622b7adbd880d7666e474cfb9097438532d54b7d251224, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:69:b1:95:46:71:13:66:3f:39:54:6b:bf:
41:4d:48:3d:aa:ba:00:e2:25:fd:b9:cc:c4:aa:fa:
32:0a:02:05:02:90:b9:15:28:eb:a1:f1:f1:61:67:
b4:44:dc:65:bb:36:2c:50:d9:81:e8:31:d1:c4:20:
d9:98:90:82:e1:e6:56:93:5b:39:03:0f:00:a8:6a:
f8:ba:49:cd:79:34:12:ad:14:42:64:7c:f4:b0:d9:
8e:d4:49:e6:68:91:a9:63:65:8d:46:d4:41:8d:2a:
ce:0a:33:4c:cc:8b:48:4e:2a:c3:87:2b:72:91:a2:
61:5e:91:65:5d:3a:2e:e8:de:ab:ab:3d:9c:0f:03:
1c:35:90:c3:b8:fc:cb:fa:09:aa:c3:58:97:ad:5f:
da:af:9c:74:44:76:a2:37:34:18:38:46:f4:75:a3:
3c:72:0b:e5:9e:69:3c:22:5f:ed:f4:4a:62:f5:4b:
c0:80:c8:2b:99:fd:98:56:06:37:80:74:36:28:b3:
7a:90:9e:81:27:cf:1b:c5:9f:f7:eb:b7:ce:87:50:
4e:44:93:97:17:db:4d:a5:dc:04:8c:da:16:e1:13:
b1:b9:96:63:c6:34:65:f4:62:05:a1:3b:03:dd:b7:
e0:bb:21:78:ae:b7:75:6f:c2:bb:cd:b7:32:08:65:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D8:3C:39:E1:31:85:AB:FB:00:05:45:26:F5:99:9F:1C:2C:5A:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9747be37-9afe-4cb8-8ce0-43a6945f5afc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:85:3a:39:89:c7:34:20:5a:bc:0a:53:bf:46:cf:26:b4:df:
dc:6c:29:c3:e0:cd:62:64:2a:f4:c7:48:94:58:9e:68:48:49:
9c:4e:0d:fd:5d:3b:21:3b:26:e4:fd:cb:bf:b0:a5:5d:8c:8f:
28:fc:f3:43:df:70:0c:b6:9f:54:04:2d:07:cf:71:0f:4f:a2:
c8:23:13:d9:d1:24:45:8a:0c:5f:7d:5f:27:f8:00:f9:19:a2:
a6:7f:30:d6:e8:23:23:1a:3f:5a:74:3e:39:27:d3:9e:de:99:
50:32:e1:a4:29:89:d1:2d:7b:47:a9:10:20:ef:59:8d:0b:3d:
22:b6:0d:96:62:a0:55:f8:d5:69:b2:34:c1:e3:bb:93:9e:3d:
19:ba:a1:bd:08:01:7d:5f:ad:89:5c:6f:6c:a0:8d:05:bd:a3:
90:8e:b2:52:1c:cd:da:7b:a9:84:2e:89:28:d3:98:eb:bb:aa:
ab:79:b4:31:23:08:09:d4:8e:e4:30:39:bd:84:e1:9c:c8:f4:
61:f5:1b:1f:8a:ef:01:2d:c2:05:ba:cb:74:50:00:a9:a8:10:
a9:7b:9e:06:d1:70:95:d4:a2:64:8f:9a:f1:e4:78:1c:cf:ad:
04:1c:fb:b0:8d:af:95:15:98:7b:63:f3:e8:17:de:e8:b3:de:
b3:b4:29:f4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWiENdkXnapmeH2HU4S9gnZ3JUMQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTcwMTE4WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMmZmZWNlZWI1MDQyYWUwMmI2MjJiN2FkYmQ4ODBkNzY2
NmU0NzRjZmI5MDk3NDM4NTMyZDU0YjdkMjUxMjI0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe2GmxlUZxE2Y/OVRrv0FNSD2qugDiJf25zMSq+jIKAgUC
kLkVKOuh8fFhZ7RE3GW7NixQ2YHoMdHEINmYkILh5laTWzkDDwCoavi6Sc15NBKt
FEJkfPSw2Y7USeZokaljZY1G1EGNKs4KM0zMi0hOKsOHK3KRomFekWVdOi7o3qur
PZwPAxw1kMO4/Mv6CarDWJetX9qvnHREdqI3NBg4RvR1ozxyC+WeaTwiX+30SmL1
S8CAyCuZ/ZhWBjeAdDYos3qQnoEnzxvFn/frt86HUE5Ek5cX202l3ASM2hbhE7G5
lmPGNGX0YgWhOwPdt+C7IXiut3VvwrvNtzIIZZydAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhdg8OeExhav7AAVFJvWZnxwsWiAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk3NDdiZTM3LTlhZmUtNGNiOC04Y2UwLTQzYTY5NDVmNWFmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVu4wDQYJKoZIhvcNAQELBQADggEBAMGFOjmJxzQgWrwKU79Gzya039xs
KcPgzWJkKvTHSJRYnmhISZxODf1dOyE7JuT9y7+wpV2Mjyj880PfcAy2n1QELQfP
cQ9PosgjE9nRJEWKDF99Xyf4APkZoqZ/MNboIyMaP1p0Pjkn057emVAy4aQpidEt
e0epECDvWY0LPSK2DZZioFX41WmyNMHju5OePRm6ob0IAX1frYlcb2ygjQW9o5CO
slIczdp7qYQuiSjTmOu7qqt5tDEjCAnUjuQwOb2E4ZzI9GH1Gx+K7wEtwgW6y3RQ
AKmoEKl7ngbRcJXUomSPmvHkeBzPrQQc+7CNr5UVmHtj8+gX3uiz3rO0KfQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:02 2025 by rpki-client