Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bbd9052-ef10-4268-bc16-2514eed59726.roa
File: 9bbd9052-ef10-4268-bc16-2514eed59726.roa (raw, json)
Hash identifier: KAUrV8n2PZvZbSGzfUvo/u3jL+gsCWP1YLYJqlRuygs=
Subject key identifier: AC:CB:8C:CE:D6:95:D9:84:36:AF:E1:1A:2F:16:81:43:62:18:FA:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B09610AA0067EC11BEAF55F74A4F9F0D1BB8560
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bbd9052-ef10-4268-bc16-2514eed59726.roa
Signing time: Wed 15 Oct 2025 17:02:11 +0000
ROA not before: Wed 15 Oct 2025 17:02:11 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:09:61:0a:a0:06:7e:c1:1b:ea:f5:5f:74:a4:f9:f0:d1:bb:85:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:02:11 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=49c018cf282613067fe458d2a8c42fc95b0eac201d8902fd4855622c52786953, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:4b:be:71:2f:43:f0:c4:e0:14:f0:cb:00:
9e:d7:e3:72:f9:ec:22:3f:7f:d7:26:1c:36:60:b3:
7d:46:68:d8:2a:56:84:a5:ae:8c:f2:9a:64:b5:a3:
e4:d6:3e:53:69:c6:8b:13:eb:bd:6f:2e:ef:bf:51:
68:3a:42:64:1c:a2:e9:e3:e7:3c:9e:60:ea:54:d2:
4e:84:13:da:b2:49:08:1c:45:8e:c5:af:52:c9:36:
bd:31:b8:3b:07:d8:59:62:e4:1e:5f:6b:07:1b:46:
07:b1:f2:ec:54:f4:38:85:9f:c9:49:ff:71:2d:33:
24:d1:ac:de:a1:e3:e6:9d:29:a1:74:41:13:aa:11:
af:8d:5e:1d:26:0d:0e:3b:8e:20:00:a1:bc:ce:0b:
42:d3:86:9d:5d:41:d1:5e:93:f5:f6:08:c8:ef:20:
d5:1a:45:cc:54:dc:36:1a:2f:07:92:8e:be:b3:1a:
b9:6a:e5:ea:38:61:6f:c1:d3:7d:89:db:bb:21:76:
a7:05:b9:c7:ec:4c:3b:71:8e:6d:1d:25:f4:f8:85:
21:05:20:09:30:76:48:a3:a1:17:11:a9:b0:7f:e0:
5f:9a:8f:ce:16:83:6b:be:0e:91:56:ab:8f:89:17:
53:c6:66:3b:8d:37:87:06:ee:00:c8:38:96:41:fa:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CB:8C:CE:D6:95:D9:84:36:AF:E1:1A:2F:16:81:43:62:18:FA:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bbd9052-ef10-4268-bc16-2514eed59726.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.140.0/24
Signature Algorithm: sha256WithRSAEncryption
77:aa:da:42:ec:e1:96:8a:71:52:58:b7:92:b1:88:44:4e:49:
de:9c:68:59:31:db:f8:d9:d0:04:f9:c1:c6:9f:95:44:cf:7a:
9b:07:03:2e:7f:5a:10:e6:67:9a:85:6b:64:6a:18:35:63:91:
49:96:36:bb:76:60:31:73:da:49:ad:45:f6:e5:30:4e:29:0e:
60:c8:67:65:3d:73:e9:13:d0:b5:37:40:ae:f7:b2:4b:77:61:
46:50:e8:ac:7e:ec:1d:17:e1:fc:90:36:79:b4:a8:7b:1d:2b:
d7:b4:55:b9:ef:82:4c:87:86:25:aa:d5:39:bf:e4:aa:e5:09:
22:76:01:be:bd:5c:7c:af:ac:db:86:ea:d7:57:98:ad:d1:38:
bd:b7:6c:c6:a9:0c:cc:c7:76:d4:bf:30:65:da:5b:26:54:3c:
e7:d2:bd:06:a2:c6:04:7f:6f:f3:fe:78:9d:89:d2:5f:cf:79:
2b:44:a9:91:04:0c:99:3b:04:90:d7:4f:ae:a0:de:2c:60:c1:
de:c0:0c:8a:34:86:72:c8:9f:48:1c:e6:d4:72:01:bb:3a:1f:
54:88:11:b7:37:dc:02:16:73:ea:a7:c7:96:7f:78:81:d2:33:
c0:66:58:af:d9:69:2e:d6:20:11:24:d7:25:7b:ab:f4:85:5a:
2f:4b:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:49 2025 by rpki-client