Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4244d44-81d5-4891-99cb-f02b6c8e91a4.roa
File: b4244d44-81d5-4891-99cb-f02b6c8e91a4.roa (raw, json)
Hash identifier: xIeAex1nPlPD4Qf09oL7SAVtz/6/PTktjWBwxrZeaGg=
Subject key identifier: 8A:8A:E0:6E:3F:A3:1A:F6:29:8B:55:95:FB:57:7A:CE:1B:16:0E:EC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 590CA981DECC8639CC9908D4DCFF3301261A0E1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4244d44-81d5-4891-99cb-f02b6c8e91a4.roa
Signing time: Tue 14 Oct 2025 23:52:44 +0000
ROA not before: Tue 14 Oct 2025 23:52:44 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0c:a9:81:de:cc:86:39:cc:99:08:d4:dc:ff:33:01:26:1a:0e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:52:44 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4bd5b31c81646ffa69ffcbbf36906cb118d6c9f26f528811acfffe60c103d469, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:83:74:20:eb:91:1b:9f:0e:4a:0a:35:57:
48:a9:38:32:3a:e3:ea:45:23:92:a0:d1:1a:6d:75:
1b:38:1f:dc:04:48:dc:23:7b:37:2b:ee:57:e3:4f:
b6:86:5d:72:de:df:54:5d:b6:5e:75:1c:a6:8d:38:
36:2c:00:32:2f:c9:54:9c:3e:02:2f:87:44:64:38:
05:6b:33:57:1b:a8:84:6d:60:59:aa:1a:09:8b:e4:
15:06:c6:44:6c:e6:8d:44:38:c5:7e:91:45:ad:5c:
d2:b5:13:cc:89:a1:1f:86:37:8b:d4:4d:c8:95:f0:
de:4b:3f:e3:83:b9:c6:a9:76:8c:7e:03:45:63:e9:
01:93:31:f7:c5:d7:f5:ca:5d:dd:ed:c6:cd:79:33:
67:a6:ff:f0:e3:d1:e7:44:d7:a5:01:f5:41:80:38:
c7:f5:a9:ee:5c:86:67:62:0e:bb:29:33:76:af:8c:
f2:b8:06:23:6d:ca:8c:61:fa:68:44:fd:70:3f:50:
cb:d0:49:c8:e7:a0:4a:f1:49:7d:27:7e:71:97:77:
4b:85:7e:21:9e:93:e6:bb:ed:a1:85:25:6c:4e:b9:
61:a2:c6:ad:39:54:b7:99:14:69:cf:b1:97:4c:7d:
9b:0e:6a:2a:47:f2:ce:e2:62:2a:f2:83:d6:39:5e:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8A:E0:6E:3F:A3:1A:F6:29:8B:55:95:FB:57:7A:CE:1B:16:0E:EC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4244d44-81d5-4891-99cb-f02b6c8e91a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.119.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:49:e7:9a:1f:be:32:22:b8:9f:e8:e5:c9:af:54:50:3a:5d:
48:53:a9:6d:c5:77:ad:fc:a6:c2:6c:7d:2a:36:59:13:cb:bf:
e2:46:67:78:0d:91:71:b4:fa:c4:8b:8b:78:b0:52:27:b1:99:
f8:7a:3c:2b:80:0c:ac:66:c0:a0:9e:c8:8d:fe:75:6e:8c:6e:
53:d7:dc:d4:4f:12:cb:f1:b7:d1:38:f8:66:d6:3c:9e:39:e6:
b8:cb:8b:6a:e8:8a:f4:ff:dc:f3:57:0a:d2:f6:62:53:46:5e:
96:30:9d:5c:3a:1a:1a:f9:cc:16:0c:d7:41:83:10:a3:65:1a:
07:c3:2e:af:2b:ef:80:e0:90:b4:45:cd:21:ae:b1:7c:7f:ba:
24:07:2f:e7:b4:3c:f7:d6:c6:7f:79:22:4e:f3:d8:60:f1:bb:
27:34:79:c3:8d:b5:ea:d1:3c:91:0d:23:b5:87:8b:0c:30:6f:
53:ee:a0:c0:16:62:bf:9c:95:9d:98:14:6c:71:2a:ba:bb:ed:
2d:ee:aa:3f:03:dd:a2:db:82:d5:d1:82:63:d1:49:e1:4e:1f:
69:73:f7:88:de:86:7b:e0:6d:d1:4b:f5:76:4e:56:ca:3a:cf:
47:59:85:57:5a:6c:ef:bf:ff:17:46:e9:c6:32:90:0a:56:b5:
ed:e3:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:39 2025 by rpki-client