Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4e309fa-cc06-4826-a015-f75ebfe37278.roa
File: a4e309fa-cc06-4826-a015-f75ebfe37278.roa (raw, json)
Hash identifier: L0Wl4RLw1iIjV9jC3v3HUfsvQC8RQxrLpA8Fv7m8NDI=
Subject key identifier: FD:4F:54:4A:A1:58:7D:58:8A:C5:C6:08:71:45:FE:86:AD:83:E4:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21AF0D4CEE3D8B1B091E281604730AF884BA90CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4e309fa-cc06-4826-a015-f75ebfe37278.roa
Signing time: Tue 14 Oct 2025 20:42:40 +0000
ROA not before: Tue 14 Oct 2025 20:42:40 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:0d:4c:ee:3d:8b:1b:09:1e:28:16:04:73:0a:f8:84:ba:90:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:42:40 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bd10e5753f550c2a40c59524c14e5ed971b0c324d8b7b912d0e657bc2023ab15, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:c2:59:df:0f:fa:ad:d8:15:35:fa:38:ed:
47:c8:a2:c0:54:21:81:e3:48:48:50:81:62:6e:e2:
39:51:7c:b5:06:bb:af:af:88:aa:d5:c4:80:73:fb:
22:d9:ed:4c:00:86:1d:cc:d2:16:b3:ea:3f:dd:21:
f6:5d:04:18:cd:8d:34:fd:cc:01:1e:0f:dd:d4:8d:
a2:0b:28:ba:7b:bc:36:11:22:38:b7:6a:e3:b7:02:
a1:e2:06:ec:d6:04:ba:c8:ff:16:22:ae:ff:1f:28:
7b:7b:ef:f2:56:07:4a:27:7c:da:0a:e6:4c:7b:a9:
86:1a:f0:f2:ba:0f:33:02:e5:43:a7:a5:bd:77:8b:
c6:95:f2:bf:c9:19:2a:81:57:82:d3:75:0b:1d:ca:
06:8c:79:3e:7b:68:70:17:3d:7b:64:ac:53:3c:73:
1e:a9:09:d4:5c:cb:3a:8d:a8:86:8b:07:55:e0:0d:
95:f2:76:2b:7c:e6:67:6d:3c:59:65:93:06:90:a5:
ae:3a:9f:cf:e2:f2:97:5e:4e:b1:58:97:db:d6:b0:
bc:60:d0:6b:00:64:e6:8b:d1:c6:ec:a9:e6:c3:89:
e2:d7:00:55:78:8d:df:5d:50:ef:16:f2:30:53:dc:
3c:a5:19:34:cf:97:62:e2:ea:0d:c6:36:18:c8:ce:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:54:4A:A1:58:7D:58:8A:C5:C6:08:71:45:FE:86:AD:83:E4:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a4e309fa-cc06-4826-a015-f75ebfe37278.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5a:6a:7f:0f:7a:a1:85:e7:f6:0d:2f:48:e8:6a:29:ae:58:
1d:28:44:5b:52:52:97:1c:75:ec:95:87:df:51:0a:c4:f1:24:
92:27:d2:28:2e:3e:5b:8b:2e:e3:a8:4b:7e:05:e6:8c:f6:f1:
2d:15:e3:7e:aa:04:05:f0:ed:9f:15:d8:12:25:39:f4:19:84:
dc:cb:e3:33:f9:95:c3:56:5d:fc:4b:aa:5d:ec:a5:88:2f:11:
e1:e5:02:05:93:39:3e:97:69:60:e7:1b:7a:0e:c3:84:39:0e:
e3:e6:f0:75:4f:05:65:a0:3e:a6:80:02:0c:3f:29:d4:f2:55:
07:91:ae:ee:c2:1d:37:9a:1e:c7:71:51:8d:b4:e9:79:f1:51:
c2:48:eb:a5:ca:71:21:53:b6:36:f5:99:8e:63:1f:99:2d:2b:
7b:e6:26:73:25:ef:c0:b0:fe:9f:45:cf:44:d8:e8:d9:b6:47:
b1:06:83:4b:de:1e:e5:ef:34:0c:36:55:24:c5:f4:5f:4f:62:
9c:d2:ac:0f:46:75:49:bd:a6:ee:26:cf:6f:c1:eb:66:91:90:
6b:a7:1b:79:61:6f:6f:36:78:7c:b6:37:d7:cd:5c:42:78:02:
74:37:4d:d8:ae:f6:34:86:53:c9:de:7c:f1:1e:b0:21:55:35:
69:5a:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:04 2025 by rpki-client