Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8055d57-54e3-484b-8689-150096273dc8.roa
File: b8055d57-54e3-484b-8689-150096273dc8.roa (raw, json)
Hash identifier: zc+FNd3VPYrECFe0PW4EJwWeWN8c/joNYGwVP529APA=
Subject key identifier: 34:14:48:4C:BA:0D:D1:83:73:AE:74:53:28:85:23:25:9C:D0:C8:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BD17D9DB8C54A5CACDC20B0F1FB29055F5C73C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8055d57-54e3-484b-8689-150096273dc8.roa
Signing time: Wed 15 Oct 2025 15:03:02 +0000
ROA not before: Wed 15 Oct 2025 15:03:02 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d1:7d:9d:b8:c5:4a:5c:ac:dc:20:b0:f1:fb:29:05:5f:5c:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:03:02 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=0296fe29ceeb495d911c00779a8e624a1b58e43e04ef213defe278a9f38c990a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:6e:d5:c4:05:b6:4f:0f:31:e5:55:69:50:
34:54:a5:54:48:37:74:33:96:fb:2f:6a:dc:38:2f:
63:c3:ae:ac:ae:6d:f9:2c:22:46:af:87:b3:48:ea:
9e:5c:65:d2:a6:39:55:4f:7c:fd:0f:9c:69:dc:22:
e9:fb:18:41:14:ff:c0:49:75:2a:99:f7:24:47:07:
9c:98:36:f6:dd:ea:de:cb:a8:69:90:62:7d:5f:a0:
8c:72:1a:56:e3:81:29:2b:1e:ec:65:70:a5:4a:61:
29:fd:02:65:65:f5:60:4b:b8:1d:34:11:96:90:83:
d1:0c:3a:14:a4:37:63:e1:bb:8e:16:d8:2f:6a:a2:
3b:b1:82:a8:df:27:2b:72:9e:73:f6:65:e1:61:2b:
a4:89:32:3c:6e:82:68:84:55:40:e9:e1:63:27:eb:
bf:57:e1:6e:e4:99:19:d8:7c:5c:65:0a:91:c5:c8:
ad:97:4d:80:0f:9d:54:8e:bb:1b:e8:16:88:cf:78:
e0:23:c1:f5:ae:d8:aa:1a:73:5f:1d:52:95:73:f2:
f6:31:25:ae:cd:d9:23:e0:44:f8:20:d8:80:21:2c:
77:30:fa:28:a5:11:1c:96:d4:da:e4:1c:cf:bb:45:
34:52:2a:9d:63:9c:a9:7f:72:b3:02:07:80:dc:8a:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:48:4C:BA:0D:D1:83:73:AE:74:53:28:85:23:25:9C:D0:C8:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8055d57-54e3-484b-8689-150096273dc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:72:b4:2e:62:48:4c:10:db:11:2e:b8:9a:8b:4a:b4:fd:d9:
89:c0:2a:67:be:80:4b:58:a9:94:76:d8:46:f9:b4:e0:90:de:
44:a3:09:0c:0c:a8:5c:79:bb:db:14:93:59:c1:1c:3a:58:bf:
9b:cf:ed:9f:2f:a0:fe:2e:9b:8b:25:d8:57:02:f6:6b:a4:92:
80:61:85:1a:1d:7b:a3:6e:f0:19:51:7a:aa:87:d3:ba:fb:ba:
30:13:d9:d6:db:97:f6:6d:a1:b1:af:a4:2b:8a:b1:cf:9c:12:
60:66:e7:bf:a6:51:e2:f8:e4:32:d0:6a:db:26:2a:22:d2:7f:
72:5f:28:b8:9b:cb:38:0c:db:ab:18:83:f3:cc:58:14:df:28:
2e:31:51:e9:6b:46:6e:1b:d1:40:fb:39:31:9e:9b:8e:b6:f1:
39:df:49:20:5c:a2:e5:5f:b1:ea:c9:ad:3d:59:90:d6:12:c8:
9e:fc:03:3b:9c:03:56:bf:54:10:58:18:8d:6b:ad:37:bf:f1:
89:e8:d7:62:74:e7:a0:9f:bf:18:40:1f:d6:b0:a9:87:be:93:
8b:0b:fb:1c:0e:58:b1:f2:d4:88:99:cf:3a:6d:97:0a:5b:36:
53:38:24:2d:48:c1:0f:85:43:cb:80:d9:ad:1d:79:84:6a:66:
c4:6e:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:49 2025 by rpki-client