Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdbb7823-f41c-42a2-aa39-8dab11889e07.roa
File: bdbb7823-f41c-42a2-aa39-8dab11889e07.roa (raw, json)
Hash identifier: Ue1gCAuUR7p1pHNoUkC8dCvMyLC13it7bF4ekM0fCS0=
Subject key identifier: BF:AF:F0:D4:F9:9A:15:53:7F:90:8D:5C:AC:37:26:C5:C1:B1:3B:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 514F2609A26954C36122BE66E21831102ACDF173
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdbb7823-f41c-42a2-aa39-8dab11889e07.roa
Signing time: Wed 15 Oct 2025 18:21:16 +0000
ROA not before: Wed 15 Oct 2025 18:21:16 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4f:26:09:a2:69:54:c3:61:22:be:66:e2:18:31:10:2a:cd:f1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 18:21:16 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=152f4897e35936f9dec467e0a2d83d0deab3ece0131b5390d8dbb591de906639, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8b:47:96:23:c1:6d:12:6e:40:c7:49:35:87:
50:a9:aa:c4:09:3a:1d:36:1c:e4:91:81:06:3e:8c:
f7:16:69:4c:85:b5:2e:e9:ed:46:78:1a:31:d2:23:
79:04:50:24:68:4a:67:22:22:2a:7f:a0:1e:eb:56:
a0:f4:06:44:53:61:41:5b:ba:16:85:83:f2:40:16:
d4:10:09:6d:97:7e:bc:8b:08:fe:2d:31:2d:31:c7:
3a:34:4d:96:b7:60:ab:c4:5f:77:59:9f:60:29:ef:
27:68:08:64:78:6f:55:8c:eb:27:c5:bf:3a:34:9e:
b2:1f:ee:c9:7b:02:f6:81:b3:7f:4a:01:74:b0:b1:
cc:04:53:c7:30:fb:75:a0:a8:11:d6:99:09:3f:43:
86:74:95:92:8a:f7:89:1c:2d:63:ff:b1:de:c8:de:
30:85:a4:e7:18:3b:b7:47:d4:3d:a3:3d:59:c9:8f:
f5:5e:d1:7b:db:aa:5c:41:e6:d0:5c:74:80:24:89:
4c:0a:1a:19:0e:d7:7d:82:dc:7c:1e:7d:52:ef:fd:
a0:60:12:e7:03:6c:bb:2d:c0:a2:1f:e9:79:44:19:
9f:07:46:ea:c6:c7:8c:62:e1:b5:0d:26:e7:51:ea:
38:73:9e:51:ce:a7:ce:6c:31:aa:ba:87:b7:64:8d:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:F0:D4:F9:9A:15:53:7F:90:8D:5C:AC:37:26:C5:C1:B1:3B:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdbb7823-f41c-42a2-aa39-8dab11889e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
61:7b:e5:8c:4e:e3:f3:20:d5:ed:e1:76:ec:cf:1b:50:eb:6f:
9c:ff:8e:5b:d7:44:28:da:01:fa:c1:10:4d:50:52:a7:cc:00:
1f:78:64:81:aa:34:bb:06:ea:60:43:9a:e7:6e:c0:ed:c1:98:
87:98:bd:82:b4:ad:04:c7:15:38:4e:8c:35:bf:a7:36:e3:2c:
36:a6:0c:65:18:de:6a:b0:17:3e:3e:46:71:4d:81:59:a2:bc:
b9:62:17:fa:80:a6:05:9d:33:5c:0e:a7:eb:7d:36:05:78:3c:
8e:6a:83:33:34:06:f1:41:2b:c9:54:45:ec:4a:61:90:73:7c:
c5:44:a1:c1:ca:b6:85:e7:bc:ee:ca:6f:3f:79:5c:d3:ea:93:
46:93:7a:a2:2a:71:98:5c:0f:c4:25:e6:ad:9e:76:2b:35:ba:
49:31:45:db:37:cf:d2:34:38:b0:99:ce:b8:fa:3e:c5:60:71:
61:38:ba:3b:d3:05:7d:38:d1:36:98:7f:8d:bb:63:f4:d2:bf:
1d:fe:11:a1:46:69:3d:d3:07:c4:50:3b:b5:67:76:1d:b2:7e:
a6:f6:e7:1f:27:27:3c:d4:64:a6:dc:73:0d:66:eb:8a:2a:35:
e3:6a:f0:f3:89:2f:39:2d:6e:3e:f2:cb:6e:c9:b8:e8:bc:c8:
50:65:6f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:01 2025 by rpki-client