Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b720dd-f1b9-43d0-8360-fe6dc25b594c.roa
File: a8b720dd-f1b9-43d0-8360-fe6dc25b594c.roa (raw, json)
Hash identifier: WPt3m21JR8BwHyU8XB3L61ilFW3RNab0iGNFl5BFGXw=
Subject key identifier: CA:80:13:60:83:F5:46:C1:3B:1E:C8:A7:9F:E2:AB:BA:FD:B5:AA:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E492F42015C347A0E7031DBC338BC5C7363D7AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b720dd-f1b9-43d0-8360-fe6dc25b594c.roa
Signing time: Tue 14 Oct 2025 21:38:28 +0000
ROA not before: Tue 14 Oct 2025 21:38:28 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:49:2f:42:01:5c:34:7a:0e:70:31:db:c3:38:bc:5c:73:63:d7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:38:28 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e48a522894d1e8c3c3db964dca8515f5817cbb6e87e8780f2727b6e9c205548d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:a2:c4:10:43:b7:72:69:50:96:ee:1c:9d:
69:5f:e8:53:57:57:27:8d:f5:2c:e8:eb:3c:cf:18:
e5:22:81:a0:38:31:aa:ee:c9:4c:6c:aa:38:bd:12:
a9:6c:e9:3a:56:8b:de:ad:51:fb:63:31:92:fa:68:
c2:58:1c:85:ae:60:18:d7:ca:63:69:10:2b:9e:77:
5c:3c:d8:d2:bf:f8:ae:c4:b8:af:3d:b7:5b:2c:09:
98:e3:92:6d:86:2e:73:79:4f:ce:a9:b6:75:6d:a7:
79:fa:7b:9c:43:b7:c8:03:1c:9b:85:d0:52:56:e4:
18:bf:be:01:e9:66:81:72:9b:6f:5f:c7:a9:20:b2:
b8:a5:85:87:1b:bc:2f:74:b9:42:9a:26:6d:08:b3:
e2:59:5c:3b:1a:05:33:83:78:7f:28:10:07:f4:50:
7a:15:3e:71:f7:00:1e:86:66:91:7c:8b:49:f1:76:
72:3b:3f:57:c7:79:a7:de:ca:67:a1:7b:e6:d4:18:
34:10:c9:14:88:34:06:1a:5f:83:21:1f:60:a1:dc:
25:b2:b8:7b:44:9f:50:62:d3:2b:f4:0e:12:91:4c:
74:33:fe:08:7e:19:63:b2:31:b2:68:18:0c:1e:67:
55:db:88:88:68:e0:fd:aa:ed:44:3e:c0:59:e8:b4:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:80:13:60:83:F5:46:C1:3B:1E:C8:A7:9F:E2:AB:BA:FD:B5:AA:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8b720dd-f1b9-43d0-8360-fe6dc25b594c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:36:b8:45:4e:6e:7a:08:ac:d9:23:f7:56:15:24:b5:d6:b7:
5e:34:8a:21:8d:24:68:32:a0:36:3e:a2:55:f1:95:00:0f:9f:
df:02:9f:5e:f0:06:90:e0:46:9a:f1:6e:ff:34:42:42:d4:48:
68:cb:be:56:1e:44:3f:5a:1e:aa:78:64:fe:fa:6f:50:57:a6:
29:bb:d9:25:eb:66:97:64:bc:63:c7:3e:f7:64:0e:b1:36:95:
9b:46:5a:c3:b0:1a:96:21:47:0e:f4:f3:bb:5b:fc:99:6e:73:
3b:bf:4b:20:d9:49:27:19:9b:e6:c1:35:85:34:fa:c8:72:e3:
6c:06:b9:92:12:63:5e:aa:0c:99:02:e2:a9:a4:15:de:68:ca:
3b:a5:60:ad:ca:bd:b3:c1:c7:1a:ba:f9:bf:21:a6:8d:e1:e1:
19:4a:e4:70:76:96:96:e9:b1:22:04:24:2b:05:9e:73:05:61:
4c:ff:44:e7:98:24:db:d5:0a:97:1a:b4:14:53:95:16:d5:9e:
d3:64:53:63:60:97:7f:a1:6b:6b:a0:bd:a0:74:74:d4:d7:3a:
aa:e4:b1:18:f5:c2:37:8d:db:e0:e2:cb:d8:49:29:77:c2:6a:
38:60:eb:32:9a:16:32:a9:2c:ad:f0:5c:e2:c9:5f:f2:fc:fd:
54:6b:57:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:25 2025 by rpki-client