Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a892eacf-1d9c-44b7-90a4-590765ea306b.roa
File: a892eacf-1d9c-44b7-90a4-590765ea306b.roa (raw, json)
Hash identifier: 2wlX5/10bZqdXq61mqJq0+68RyO24niCvPHgU7/q0lQ=
Subject key identifier: 50:A1:1E:91:D9:20:BC:A0:2F:21:22:BC:BB:2C:4E:95:FB:DB:B2:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75665BE063BFF9A6CFC98450AEBFC777FD339C70
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a892eacf-1d9c-44b7-90a4-590765ea306b.roa
Signing time: Tue 14 Oct 2025 21:22:49 +0000
ROA not before: Tue 14 Oct 2025 21:22:49 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:66:5b:e0:63:bf:f9:a6:cf:c9:84:50:ae:bf:c7:77:fd:33:9c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:22:49 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e702c89f0d8af0b5653ab2da78095769f351828c6ba0952b95ff2689cbd437d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:1d:a9:c7:b7:b9:fd:a1:d7:3a:40:70:60:
5d:4d:e7:e4:a2:43:9b:dd:b9:6b:5a:fc:0e:b3:c6:
d3:03:1f:3f:e8:f8:26:f4:8d:81:48:e6:9d:dc:7f:
1c:40:c1:23:6b:ad:b0:97:a0:13:7e:1f:5c:b0:ad:
99:28:ac:66:94:62:94:bd:e4:c8:2a:12:e5:77:01:
4b:d0:f2:08:32:7d:14:64:9b:86:5d:22:26:95:5b:
c2:21:79:2e:ef:ed:45:db:5c:9c:bf:5e:50:bb:47:
0b:83:68:28:19:67:dc:8b:ca:3c:d3:6f:c7:e7:38:
37:c6:9e:a6:74:0c:2d:a2:a8:bc:8f:61:f7:f2:df:
9e:7b:a9:dd:ac:39:1a:8f:d2:1a:79:58:db:09:a6:
a5:9c:9b:78:dc:19:5a:90:56:67:36:50:d0:64:40:
0e:7a:d6:8f:85:d7:1c:bd:f8:59:53:5d:91:e7:3e:
f8:66:3d:70:3c:2a:5c:75:c9:60:40:60:b0:7b:f9:
35:8f:63:28:c4:00:21:31:b4:49:c8:3a:ce:db:a1:
ee:c8:31:5e:9f:04:4e:f0:b7:c9:a1:3e:3e:44:d7:
4d:17:f8:76:05:03:ba:5c:1c:ee:04:f9:22:bf:4f:
79:26:c0:9a:0c:bc:af:09:a8:da:0a:59:6f:24:4a:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:1E:91:D9:20:BC:A0:2F:21:22:BC:BB:2C:4E:95:FB:DB:B2:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a892eacf-1d9c-44b7-90a4-590765ea306b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:9a:5f:dd:0f:9b:01:a2:c8:f4:13:14:f7:8c:e9:1d:e9:77:
31:51:2d:1c:6b:51:16:b0:76:86:15:b4:b1:11:cf:da:0a:2f:
8d:e3:d4:c1:7b:9f:80:e2:32:bc:52:79:b0:8e:37:c3:12:f8:
50:b3:5e:e8:30:91:cb:d2:f3:62:c2:6a:fe:18:f1:97:34:09:
b1:36:23:e4:2b:8f:cb:f6:84:5f:72:f4:17:a0:25:36:21:61:
1b:ed:f3:e9:81:71:0f:c5:c2:62:15:8a:39:4d:78:17:e7:98:
d4:b3:5d:71:a5:a7:9a:af:23:1e:70:d1:49:58:1c:9c:88:d4:
55:51:7e:b3:1c:69:5d:e2:e8:95:85:ed:9f:7b:ca:90:fc:f4:
c4:b0:00:78:d5:2b:22:47:e8:aa:b6:b3:49:23:95:2e:31:db:
39:97:96:ef:90:c8:e2:44:5b:0f:b2:52:cc:2c:06:ba:62:89:
04:72:e8:91:06:94:10:eb:88:52:27:a7:bb:44:1c:7d:a9:a6:
ed:94:ab:c0:9f:78:a4:b1:f6:4d:ea:21:4b:3b:b7:df:d1:8b:
0c:9b:5e:7e:02:c8:95:39:03:f8:57:0a:3e:00:b1:fc:f8:a8:
f3:dd:bc:ef:e6:28:94:18:6d:ac:de:73:81:24:c4:0d:25:cc:
14:07:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:50 2025 by rpki-client