Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3de55af-c631-4f09-a607-3613e95bffc5.roa
File: a3de55af-c631-4f09-a607-3613e95bffc5.roa (raw, json)
Hash identifier: ltsZ82OGsl9M3IjEK+Xee5n0pmS7beK12mwPMjx2KJU=
Subject key identifier: 64:F1:F1:39:FB:5F:C9:7D:D3:E3:F9:69:F6:FA:A7:31:2B:5F:80:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E9F98C46D8DC670E5F97F6D58D99A14CDC81F65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3de55af-c631-4f09-a607-3613e95bffc5.roa
Signing time: Tue 14 Oct 2025 20:51:57 +0000
ROA not before: Tue 14 Oct 2025 20:51:57 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9f:98:c4:6d:8d:c6:70:e5:f9:7f:6d:58:d9:9a:14:cd:c8:1f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:51:57 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=72a1f516dbc264fe707350b225e3d1bbbb5250c3500953f4d2994de674fd50d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:8c:41:73:57:73:e1:9f:73:d9:71:5f:56:
56:38:31:7c:11:85:bf:75:da:8c:c9:9f:2c:8b:7a:
69:a2:d5:a8:5e:8c:31:31:61:06:fa:ac:b0:a3:35:
c1:4a:e3:a0:c3:e0:f3:07:a5:20:d6:84:83:10:a3:
81:75:49:85:b4:a2:e6:93:91:9b:fc:aa:18:62:45:
43:48:9c:b3:26:43:a4:71:04:ec:e4:41:7e:e5:f6:
89:d3:f6:da:25:d4:41:2d:e2:4c:25:5b:f0:11:a3:
b8:8d:b0:52:e6:e0:f6:e8:f6:2e:66:c8:bb:b9:65:
66:cd:8e:3a:ff:d6:d8:ab:cb:be:cd:42:11:89:6a:
79:0c:eb:4e:42:52:aa:13:08:d6:c2:31:21:16:93:
0b:f7:9d:7b:41:53:60:5a:22:a7:93:c4:28:6e:f8:
af:72:cf:0e:ba:6f:b6:eb:9d:b9:4b:58:6a:55:9f:
18:11:6c:91:3f:8a:b1:51:00:36:72:62:7d:98:50:
86:ac:4c:7d:1a:4d:70:5c:17:de:b3:c3:db:68:af:
a4:f1:b9:46:6c:b0:9a:18:8f:07:f0:d2:20:de:38:
9e:e6:39:b6:92:b9:6d:8e:5d:a7:3e:41:f4:ea:7d:
47:26:39:0a:d3:74:eb:46:8c:7e:ef:e4:08:f3:e7:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:F1:39:FB:5F:C9:7D:D3:E3:F9:69:F6:FA:A7:31:2B:5F:80:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3de55af-c631-4f09-a607-3613e95bffc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.128.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:65:cd:58:c6:af:fd:d2:f2:6e:dd:40:5b:29:6a:df:04:a6:
45:41:10:76:96:ee:45:a3:67:5d:71:4f:3d:31:b7:32:5d:93:
86:ab:1a:0c:c8:b6:46:24:82:5c:fc:14:69:f8:ac:c6:81:29:
d6:2e:2c:ba:c0:d5:a8:ed:15:f2:bf:9d:f2:ed:77:9d:1a:be:
45:18:1d:23:77:84:b8:df:a6:07:09:0d:c4:09:10:4d:4f:bc:
ac:d1:7c:5e:ba:9e:45:45:de:3c:a1:f7:ba:49:c8:a4:21:38:
c3:29:c6:97:a3:ab:94:aa:d9:16:7f:30:ad:50:90:a7:80:a9:
54:ca:e6:bb:31:4b:47:74:3e:c7:59:1a:63:d6:0f:c9:3c:66:
2a:65:bc:84:14:48:8a:06:a2:71:f7:96:d2:bb:28:59:e0:74:
5c:a0:a2:6e:5e:4e:76:e4:43:8c:cf:4f:f7:92:53:99:ca:2b:
53:c5:0e:96:88:8b:6b:c8:2b:f2:62:e7:eb:0c:9e:4d:ac:d6:
e5:ce:bd:96:1b:21:e5:57:f1:2e:cb:89:23:75:a4:95:f3:24:
d8:c3:0e:d6:2c:36:9d:40:b6:db:33:90:09:cd:87:a0:bc:a3:
94:b7:11:ef:00:a3:1f:80:09:9e:e3:28:96:97:09:11:f8:e8:
7a:bf:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:51 2025 by rpki-client