Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11134c0-2a3f-40eb-a1c3-1a8dd7b34c11.roa
File: a11134c0-2a3f-40eb-a1c3-1a8dd7b34c11.roa (raw, json)
Hash identifier: qRvUxq432ZtpAohBPj8TV3wfG6CnawMXaSIWwljgGqc=
Subject key identifier: B7:07:FD:59:AC:CC:B6:34:D8:72:93:C8:ED:90:0F:45:6A:EE:C2:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3179E973A7C5099FFC8EDE0C6CC2616D2D62051B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11134c0-2a3f-40eb-a1c3-1a8dd7b34c11.roa
Signing time: Wed 15 Oct 2025 15:21:59 +0000
ROA not before: Wed 15 Oct 2025 15:21:59 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:79:e9:73:a7:c5:09:9f:fc:8e:de:0c:6c:c2:61:6d:2d:62:05:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:21:59 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=f119a4ecc9f8c6bf9e822f0bd2723e179995cee136be907ee7a5341fc8666059, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:52:24:72:18:34:00:87:6c:40:69:76:f2:df:
9a:3d:8f:d9:8e:24:61:8c:cf:49:84:dc:cd:cd:97:
f8:a2:7a:f3:f2:77:10:b0:59:e6:21:9d:50:0c:ed:
8c:16:de:92:da:94:76:6e:93:e0:2f:e7:58:d1:8e:
45:1a:68:69:80:86:f6:64:22:74:97:2b:29:53:d3:
0f:ef:d8:b1:d2:32:48:26:50:78:c8:c9:49:bb:37:
70:cf:26:81:ef:5e:69:fe:12:2c:5e:b1:f4:f6:a0:
19:98:ff:03:5e:23:28:44:4d:aa:d5:54:5d:15:d1:
a3:84:a1:77:b7:31:12:a1:82:c7:69:58:87:8f:ec:
40:b0:30:1c:d5:53:02:dd:4b:2b:73:aa:8b:46:87:
1f:96:cf:49:85:37:a7:b9:a0:3f:05:97:41:18:cc:
6a:56:20:af:43:98:f4:a0:90:87:3f:aa:c6:60:55:
9b:dd:7b:3c:0b:7f:fb:4a:cf:b6:7f:28:4e:21:a8:
6b:f0:89:9d:16:46:41:c1:56:3e:d3:07:db:89:ce:
89:a5:38:c5:40:17:6b:ae:bf:24:98:61:5d:f5:b6:
b2:35:a9:f8:84:a8:99:e3:9b:2f:b2:67:5c:90:87:
e1:13:e2:42:f6:48:0c:90:fc:f4:7e:c1:f8:69:95:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:07:FD:59:AC:CC:B6:34:D8:72:93:C8:ED:90:0F:45:6A:EE:C2:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a11134c0-2a3f-40eb-a1c3-1a8dd7b34c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.161.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e1:fe:8e:3f:73:c6:ee:1c:90:a7:f4:ba:cd:dc:26:d7:f1:
4d:de:b5:90:7b:75:23:5e:72:25:84:0e:e0:6d:fe:84:cb:1b:
3e:cb:f4:9e:bc:99:61:2a:02:07:68:8a:53:fe:7f:24:b6:1d:
2c:3b:fc:a2:0b:ec:cc:a2:15:83:a1:84:01:74:dd:49:62:08:
df:6d:73:17:e6:6d:80:c8:a1:2a:60:6a:42:ec:60:0b:1c:9d:
d0:06:d2:e1:82:03:9a:a8:03:9a:1a:43:d4:74:f7:e0:ca:1a:
18:9d:19:16:77:ab:6b:8f:81:62:13:f1:7e:70:20:be:e0:7b:
8c:b7:f8:28:8a:92:2e:ed:30:ee:ad:19:58:2d:69:73:ad:f6:
0f:63:19:e7:cc:4b:33:40:97:79:69:fb:78:58:8a:2a:a2:6c:
52:b0:cd:5b:02:06:95:f3:64:b2:86:81:0b:04:ca:45:dc:17:
12:35:d5:a4:d3:96:21:a4:06:9e:2d:55:1c:b3:d2:a1:eb:50:
99:6b:30:d0:7d:49:6e:86:a9:1d:44:08:12:29:65:c2:bf:bf:
29:ba:a1:64:49:77:36:67:6e:7c:8e:11:44:d8:2f:f4:c5:63:
d2:2b:7b:38:2e:c4:eb:1d:fd:7b:dd:62:e1:77:f5:8a:b1:3d:
66:2f:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:39 2025 by rpki-client