Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0393ae-2c5f-46f9-9056-8e535db930de.roa
File: be0393ae-2c5f-46f9-9056-8e535db930de.roa (raw, json)
Hash identifier: Tqd5dF6YH4sDJ4En8za2HqKek8zxH8LAkT2xCSQ5lLE=
Subject key identifier: 60:ED:3D:79:BB:3F:30:9D:29:B8:A6:0F:26:09:54:03:EE:83:2D:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EFC5271DCA132E707437C4C7188727C3014E362
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0393ae-2c5f-46f9-9056-8e535db930de.roa
Signing time: Tue 14 Oct 2025 18:21:16 +0000
ROA not before: Tue 14 Oct 2025 18:21:16 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:fc:52:71:dc:a1:32:e7:07:43:7c:4c:71:88:72:7c:30:14:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:21:16 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=601140c27cd5a1fa57ee263345e53f8b35a27bfe4e387e30d2cecf36caf44ce8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:e1:d2:b0:d7:70:a3:95:bd:b0:51:ed:58:
07:07:86:d5:db:ac:00:05:e2:a6:90:02:1a:6b:0a:
4f:e1:06:7d:d2:6e:78:e6:a6:ce:b0:93:4a:d3:a1:
1e:62:15:90:9b:83:26:74:ae:71:eb:f9:dd:17:8b:
30:14:f9:04:6b:12:f2:72:b7:d7:0c:a6:c2:55:f3:
f7:c1:cf:58:33:86:c8:75:b4:d5:e3:3a:9c:cc:e2:
c0:a9:6c:16:a6:9a:b1:b1:4a:69:c2:14:90:d2:17:
87:3f:ac:6c:30:05:de:3e:67:e4:a5:12:59:a8:8d:
1b:b0:fb:d6:de:b7:66:69:12:a3:bd:0c:74:2b:31:
12:99:3a:95:5d:94:d5:d4:40:a0:30:63:e2:e3:ce:
e1:a0:85:32:4c:9a:61:2f:c8:c4:3e:f8:78:af:61:
7e:49:19:7a:79:53:0f:d3:fa:6d:42:46:83:c3:97:
26:78:56:78:dd:a3:07:f6:24:e5:cf:b3:7a:7e:51:
e6:0d:e0:4f:be:8b:0d:62:4f:27:5f:87:83:51:af:
f2:13:b8:0a:7d:f9:f0:bc:62:12:70:95:aa:df:73:
38:b7:bd:5e:19:62:58:70:2b:ae:5d:28:7b:81:05:
a8:d2:da:ed:68:e9:06:40:f4:25:46:0a:17:22:00:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:3D:79:BB:3F:30:9D:29:B8:A6:0F:26:09:54:03:EE:83:2D:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be0393ae-2c5f-46f9-9056-8e535db930de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:98:ec:c4:75:65:75:a7:76:d0:5b:24:14:46:df:e3:2c:31:
c4:3e:39:dd:08:7a:26:27:ae:a4:9b:b8:fe:f2:c7:cf:e2:8c:
55:43:a6:04:bf:52:58:31:3e:51:f7:7b:f0:46:79:a3:82:14:
d4:03:a0:6b:6f:f1:19:b5:44:44:d3:65:10:f2:d6:91:0c:ba:
56:db:40:90:b0:41:aa:00:28:95:34:f3:fc:86:1b:ca:10:9e:
fd:ae:3d:e8:db:2a:df:f3:a3:a8:10:3e:58:48:7a:58:68:a9:
28:98:35:16:47:fb:39:99:1d:1c:d1:15:bc:1b:da:51:59:c4:
d1:01:6c:1e:91:92:e8:48:dd:f6:b3:24:8b:cf:5b:c5:4d:01:
09:73:ea:b7:14:73:ca:3c:ad:7c:79:3a:c8:d8:09:95:9f:d0:
1c:28:d0:1d:d7:85:28:65:77:46:74:05:13:7b:1a:5e:4c:06:
08:f0:7b:e3:d5:25:81:12:63:be:8c:04:a8:ea:9b:4e:97:9f:
57:52:51:37:d5:c2:43:93:b0:3b:e1:96:3f:7e:8b:2b:f9:88:
bc:85:d1:c5:60:98:4c:69:37:72:57:40:5f:6a:29:a8:5a:12:
04:8c:31:6e:00:2e:31:d4:fb:14:fc:66:81:20:12:33:74:c3:
9a:67:f5:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbvxScdyhMucHQ3xMcYhyfDAU42IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTgyMTE2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDExNDBjMjdjZDVhMWZhNTdlZTI2MzM0NWU1M2Y4YjM1
YTI3YmZlNGUzODdlMzBkMmNlY2YzNmNhZjQ0Y2U4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfAOHSsNdwo5W9sFHtWAcHhtXbrAAF4qaQAhprCk/hBn3S
bnjmps6wk0rToR5iFZCbgyZ0rnHr+d0XizAU+QRrEvJyt9cMpsJV8/fBz1gzhsh1
tNXjOpzM4sCpbBammrGxSmnCFJDSF4c/rGwwBd4+Z+SlElmojRuw+9bet2ZpEqO9
DHQrMRKZOpVdlNXUQKAwY+LjzuGghTJMmmEvyMQ++HivYX5JGXp5Uw/T+m1CRoPD
lyZ4Vnjdowf2JOXPs3p+UeYN4E++iw1iTydfh4NRr/ITuAp9+fC8YhJwlarfczi3
vV4ZYlhwK65dKHuBBajS2u1o6QZA9CVGChciAA3nAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYO09ebs/MJ0puKYPJglUA+6DLdIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlMDM5M2FlLTJjNWYtNDZmOS05MDU2LThlNTM1ZGI5MzBkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVLQwDQYJKoZIhvcNAQELBQADggEBAKaY7MR1ZXWndtBbJBRG3+MsMcQ+
Od0IeiYnrqSbuP7yx8/ijFVDpgS/UlgxPlH3e/BGeaOCFNQDoGtv8Rm1RETTZRDy
1pEMulbbQJCwQaoAKJU08/yGG8oQnv2uPejbKt/zo6gQPlhIelhoqSiYNRZH+zmZ
HRzRFbwb2lFZxNEBbB6RkuhI3fazJIvPW8VNAQlz6rcUc8o8rXx5OsjYCZWf0Bwo
0B3XhShld0Z0BRN7Gl5MBgjwe+PVJYESY76MBKjqm06Xn1dSUTfVwkOTsDvhlj9+
iyv5iLyF0cVgmExpN3JXQF9qKahaEgSMMW4ALjHU+xT8ZoEgEjN0w5pn9Rs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:07 2025 by rpki-client