Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9aac76b6-c9f7-42c3-b289-18ebdd04bf66.roa
File: 9aac76b6-c9f7-42c3-b289-18ebdd04bf66.roa (raw, json)
Hash identifier: 8wRUuKzNTafre3YsjFTazs7wytVzABj7cp7DKoh4Fg0=
Subject key identifier: 0D:36:7B:D2:5F:8A:92:BB:7D:5E:FE:61:98:3D:C2:F8:F5:B1:57:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D77804CE819AF0BA880112AE2DF1A4A050D3863
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9aac76b6-c9f7-42c3-b289-18ebdd04bf66.roa
Signing time: Tue 14 Oct 2025 22:21:11 +0000
ROA not before: Tue 14 Oct 2025 22:21:11 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:77:80:4c:e8:19:af:0b:a8:80:11:2a:e2:df:1a:4a:05:0d:38:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:21:11 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=251cf91101cd0b1de2a226b4f43f0dcf7ebc36969c90c43574f0d5cf7d2daabd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:e9:6e:cd:19:19:5f:98:41:1d:ff:73:a6:
36:58:ef:a4:77:0d:aa:53:fe:b9:65:51:c1:ca:9c:
53:e2:de:3d:da:b5:8d:5d:ae:81:f7:10:31:20:4f:
8f:fd:c0:35:71:3b:e0:d5:c2:f8:b2:31:11:e0:e0:
bc:87:81:e2:1d:94:71:37:8a:b3:9f:5d:af:9e:4c:
ea:b1:2e:2f:b0:66:b6:78:52:34:9a:fc:46:10:e0:
1e:70:b3:a9:9b:16:cd:86:2b:b9:53:80:f9:fb:5e:
09:45:59:ee:85:42:1d:23:24:d3:a8:92:59:b4:92:
90:1c:1c:f0:93:eb:ca:1b:9a:76:78:bb:a8:1f:bf:
a7:32:34:e2:54:1d:60:e9:68:f0:a8:1a:b2:c5:f1:
ac:af:71:80:66:72:27:b1:6e:84:93:1f:5d:95:40:
bc:b8:aa:99:0c:b8:1f:a6:1e:85:70:e4:1f:c9:32:
b0:ba:12:21:d5:1b:61:35:06:84:5c:37:24:dc:bf:
d3:d2:54:d8:3e:73:e3:36:b0:e1:bc:28:b3:10:7e:
74:64:c8:dc:d7:17:96:30:3f:a0:75:e1:96:81:92:
4c:05:58:22:dd:79:f4:68:42:f2:27:90:e4:59:d1:
bf:97:d3:37:b7:21:89:72:40:d9:23:1a:1c:e7:14:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:7B:D2:5F:8A:92:BB:7D:5E:FE:61:98:3D:C2:F8:F5:B1:57:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9aac76b6-c9f7-42c3-b289-18ebdd04bf66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.105.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7f:36:b5:be:0f:3a:85:bc:df:68:03:4b:da:80:00:43:a9:
0e:ab:ab:9e:59:bd:ce:ba:e0:d1:e5:73:55:15:4e:5b:24:fa:
7b:66:b5:a9:c3:4c:48:25:f3:f8:8c:c8:f8:b4:58:af:ec:75:
fe:6c:72:03:2b:09:c4:b6:6b:1f:1d:a7:5d:f4:e3:9b:e9:52:
7f:ef:dc:22:d0:83:39:24:c1:0c:81:f9:ba:2a:4d:50:a9:37:
0a:03:77:a4:e4:e0:02:6f:22:e2:4e:19:01:4a:b4:ca:b3:b6:
7f:3d:ff:d9:06:cf:85:e5:12:08:dc:51:e4:e4:32:f6:5f:2a:
31:dc:33:33:a7:9b:bb:b3:1b:33:c9:2f:34:b6:58:19:b6:ba:
8b:3e:0e:79:c9:10:05:2b:49:ea:21:86:0d:cd:80:27:e6:fc:
97:91:2f:6b:ce:e5:5f:08:5a:10:c8:de:db:21:bb:06:14:14:
4e:ba:57:33:d9:a6:ae:96:f5:cf:86:fd:79:a7:4a:ef:ca:26:
15:22:e8:69:e1:fd:0d:aa:08:69:05:c6:ce:19:af:dd:a8:6d:
da:a5:93:3a:07:be:2e:2d:62:fb:18:eb:f3:c8:c6:93:48:18:
fb:61:5d:1b:78:1e:c0:ec:65:5b:33:b9:b9:51:d8:7d:f8:e4:
4f:19:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:06 2025 by rpki-client