Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b55782f6-bfd9-47f7-bffe-f957ee467faf.roa
File: b55782f6-bfd9-47f7-bffe-f957ee467faf.roa (raw, json)
Hash identifier: Yiq4yKiAL1IU9zFV3VudkTjrFpK6Fz3MN27vUjv8A1o=
Subject key identifier: DF:C5:48:F8:62:1A:21:43:9D:A9:BE:3A:64:BC:6C:FE:90:AB:F7:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E05AE356D836AD754D326ABC3A11ECA6A1CBE32
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b55782f6-bfd9-47f7-bffe-f957ee467faf.roa
Signing time: Wed 15 Oct 2025 15:12:07 +0000
ROA not before: Wed 15 Oct 2025 15:12:07 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:05:ae:35:6d:83:6a:d7:54:d3:26:ab:c3:a1:1e:ca:6a:1c:be:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:12:07 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=9193ed9e813ccab3c7ffd236c6f3ff26ec4a6f9e244b4f1fb02d494cc5627769, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:83:5d:e1:49:65:87:a7:bc:60:7e:de:a5:
a9:cc:c7:73:ec:30:3d:9f:20:98:2a:20:6e:10:24:
fb:37:a6:5b:65:04:b8:8e:4a:f2:0f:17:55:ae:86:
64:53:70:18:18:45:5b:55:65:bd:68:83:b4:ae:02:
bb:f8:ae:68:af:22:b2:3e:42:88:53:1f:3d:01:f7:
42:be:70:8d:71:72:3d:b3:ff:71:8c:55:26:c3:a5:
5f:48:df:94:ae:8a:ca:45:d4:1d:7d:9f:b1:66:82:
c0:0e:5e:26:8b:86:f3:87:6c:32:96:9e:64:7f:04:
4a:57:9d:69:0c:14:5a:65:d5:ad:05:dd:61:4f:08:
45:8d:3a:28:f0:1c:ec:12:42:62:b5:16:c2:e8:98:
1f:d1:63:84:7a:62:b8:5d:3e:c7:fb:63:19:89:3d:
9a:36:2f:38:63:6c:64:80:0a:eb:e4:f8:32:cd:61:
a3:57:5d:60:42:73:cb:bf:8b:2f:be:60:8b:3d:be:
81:29:87:02:0c:02:ab:3f:e7:da:ce:d3:5f:d6:be:
2b:99:71:f9:13:5a:87:4f:8c:4e:d1:35:42:c8:5a:
84:90:de:da:9c:b0:d4:09:07:55:a8:1f:d3:dc:56:
50:35:65:a8:2f:6e:f5:a1:54:e8:31:5d:78:7a:71:
39:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:48:F8:62:1A:21:43:9D:A9:BE:3A:64:BC:6C:FE:90:AB:F7:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b55782f6-bfd9-47f7-bffe-f957ee467faf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.122.0/24
Signature Algorithm: sha256WithRSAEncryption
88:74:01:33:1b:b0:4d:ab:9c:1d:e8:56:8c:72:7e:4f:be:88:
d9:b4:98:41:ee:33:d9:33:c3:fc:ee:ff:25:7b:d8:bb:05:44:
f4:d0:dc:30:e1:d0:a3:2e:fa:2d:fc:e3:02:6d:80:b0:2b:e0:
07:e0:cb:c0:de:fd:f5:7d:16:e3:22:63:2e:8c:72:7d:9b:22:
8b:96:ff:79:30:91:be:33:a5:49:90:b1:87:a9:50:bb:73:7c:
3b:b5:73:99:f4:6c:bd:d8:f0:34:3f:b9:ba:21:8b:38:3d:d8:
65:58:5b:5d:74:41:c1:d1:a1:78:ff:15:19:30:6e:04:23:37:
de:24:a7:89:72:74:bf:de:f6:df:93:e2:56:9e:a6:65:f8:fb:
b9:1f:f9:a3:b1:ee:bc:7e:52:37:b0:2e:4c:9a:38:be:b1:b5:
2e:32:14:00:0c:b3:a2:84:69:e6:99:10:a4:70:57:d8:e1:f8:
cb:3d:bb:3c:52:3d:62:68:cd:5c:5a:df:e6:c8:34:c3:83:9e:
c6:eb:9c:71:26:61:65:fe:a4:8e:de:9d:40:16:de:31:82:67:
db:d3:7d:b7:93:47:2c:87:91:31:2e:f9:ac:6c:81:6c:71:c6:
8b:f3:14:f7:1b:a5:3d:5a:61:4c:1a:76:38:25:d7:26:c7:a2:
0e:64:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:20 2025 by rpki-client