Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29f0ff9-cb2c-478e-9b55-fccdfc5dd6fc.roa
File: a29f0ff9-cb2c-478e-9b55-fccdfc5dd6fc.roa (raw, json)
Hash identifier: FHA6SZkEgs+E3eSFuGRMmRRyNZHw9PKRcM3/aQXuu3Y=
Subject key identifier: F4:D5:66:53:19:FC:CA:8E:84:28:05:51:BE:80:34:85:2E:62:F3:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44EE1EF75CFB5611FF3416BA24FB8939C219C30A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29f0ff9-cb2c-478e-9b55-fccdfc5dd6fc.roa
Signing time: Tue 14 Oct 2025 21:02:55 +0000
ROA not before: Tue 14 Oct 2025 21:02:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:ee:1e:f7:5c:fb:56:11:ff:34:16:ba:24:fb:89:39:c2:19:c3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:02:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b08a0cf45ce68d53b54386e518b965d538b9102356d24195e610c400c8383119, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:54:57:33:ec:e2:b9:8e:e3:d9:bd:e4:59:
b4:59:5e:13:1b:81:48:8e:2c:87:8a:48:7d:0b:09:
79:28:2c:a4:05:89:5e:2c:e1:2b:f2:3a:dd:bc:8b:
d8:af:26:59:7f:e6:05:6a:3e:8b:83:ec:2a:ca:9d:
88:7c:2c:3b:8c:c0:86:d8:a6:42:6e:a8:2b:94:e0:
e7:4b:2d:86:93:5b:e2:cc:fe:c3:54:d1:34:f2:b8:
10:5d:2b:f0:e0:89:b8:c4:00:b4:9f:8b:fe:f2:8d:
78:11:9b:30:b0:db:4d:d7:c7:d3:f3:d7:74:06:e8:
e4:1f:24:6d:6e:f4:3c:a8:82:27:cd:c0:3f:54:54:
08:e6:cd:50:cf:a7:bb:8a:6a:07:e9:0d:d1:57:07:
9e:da:f4:39:c1:85:5a:8c:9c:66:87:86:07:72:d9:
fe:b7:df:4a:d3:f8:2a:38:df:a0:7c:3f:d3:94:67:
ba:81:53:8a:ca:20:e1:05:e3:9d:ed:93:8c:d6:76:
eb:dd:9e:28:02:d6:c5:dd:e9:6f:6d:1b:b6:1e:b8:
16:63:8a:da:97:27:c6:f3:8f:a0:a6:d8:e3:69:87:
88:da:84:40:57:3d:f3:aa:3f:e5:57:93:3e:80:15:
4f:05:f6:0a:55:f0:b8:79:32:92:8f:fa:fe:a9:af:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:66:53:19:FC:CA:8E:84:28:05:51:BE:80:34:85:2E:62:F3:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29f0ff9-cb2c-478e-9b55-fccdfc5dd6fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:20:51:87:32:82:e2:5f:4e:5e:6b:61:e7:2f:6c:1a:cd:3f:
93:0f:34:80:01:6e:74:3f:a5:ad:92:e9:c9:96:27:8e:ce:e3:
2e:aa:0f:10:40:17:ce:9c:19:6f:ae:58:db:e6:31:c4:9b:76:
60:1b:b2:6d:30:ed:1b:d4:a4:4c:9e:2c:b7:21:f8:e6:76:fd:
9c:66:5a:2f:b6:19:9f:c8:df:bf:8a:1e:b1:f3:3a:24:b8:d8:
71:1b:15:a7:27:44:7c:3c:61:96:06:5f:34:86:63:5c:d1:b0:
74:00:f2:5a:3e:54:c2:a6:b8:c1:c4:34:d3:3c:12:5f:d1:aa:
0b:17:af:3b:8e:e7:d9:e3:0c:c2:bd:d4:9c:16:58:58:f1:4d:
d3:9f:89:1b:9b:aa:63:08:85:a1:26:01:0d:15:3f:00:40:d7:
cf:6e:fa:9e:6d:0a:4f:27:eb:e9:69:0a:d5:61:b1:48:be:63:
1c:78:67:d0:ce:41:e7:2b:5a:52:f3:8b:a3:41:55:fd:f7:57:
56:e0:2f:36:96:5a:64:c1:87:22:6f:48:9f:15:7b:11:17:77:
1d:68:f9:5a:d5:69:ef:37:49:2d:18:5a:15:52:8e:65:30:82:
51:f1:7b:13:b1:3c:17:e5:46:c5:6e:7a:ea:18:47:e1:8a:fa:
f6:a9:b1:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURO4e91z7VhH/NBa6JPuJOcIZwwowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjEwMjU1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMDhhMGNmNDVjZTY4ZDUzYjU0Mzg2ZTUxOGI5NjVkNTM4
YjkxMDIzNTZkMjQxOTVlNjEwYzQwMGM4MzgzMTE5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrolRXM+ziuY7j2b3kWbRZXhMbgUiOLIeKSH0LCXkoLKQF
iV4s4SvyOt28i9ivJll/5gVqPouD7CrKnYh8LDuMwIbYpkJuqCuU4OdLLYaTW+LM
/sNU0TTyuBBdK/DgibjEALSfi/7yjXgRmzCw203Xx9Pz13QG6OQfJG1u9DyogifN
wD9UVAjmzVDPp7uKagfpDdFXB57a9DnBhVqMnGaHhgdy2f6330rT+Co436B8P9OU
Z7qBU4rKIOEF453tk4zWduvdnigC1sXd6W9tG7YeuBZjitqXJ8bzj6Cm2ONph4ja
hEBXPfOqP+VXkz6AFU8F9gpV8Lh5MpKP+v6pr9YVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9NVmUxn8yo6EKAVRvoA0hS5i85kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyOWYwZmY5LWNiMmMtNDc4ZS05YjU1LWZjY2RmYzVkZDZmYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVCUwDQYJKoZIhvcNAQELBQADggEBAKAgUYcyguJfTl5rYecvbBrNP5MP
NIABbnQ/pa2S6cmWJ47O4y6qDxBAF86cGW+uWNvmMcSbdmAbsm0w7RvUpEyeLLch
+OZ2/ZxmWi+2GZ/I37+KHrHzOiS42HEbFacnRHw8YZYGXzSGY1zRsHQA8lo+VMKm
uMHENNM8El/RqgsXrzuO59njDMK91JwWWFjxTdOfiRubqmMIhaEmAQ0VPwBA189u
+p5tCk8n6+lpCtVhsUi+Yxx4Z9DOQecrWlLzi6NBVf33V1bgLzaWWmTBhyJvSJ8V
exEXdx1o+VrVae83SS0YWhVSjmUwglHxexOxPBflRsVueuoYR+GK+vapsak=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:16 2025 by rpki-client