Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6723cd4-ea76-4ef6-b792-c06f018e7c55.roa
File: c6723cd4-ea76-4ef6-b792-c06f018e7c55.roa (raw, json)
Hash identifier: qFO1xuAyX51TPycbSVU3Ymvbbw+R+Kw1TN4J9SqxyWM=
Subject key identifier: 24:8A:F9:8D:16:08:05:B3:BF:7F:85:9F:56:08:94:07:AC:FB:4B:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26F0B9375C909EECB05A4E5553AE8C1B733C1BFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6723cd4-ea76-4ef6-b792-c06f018e7c55.roa
Signing time: Wed 15 Oct 2025 18:01:26 +0000
ROA not before: Wed 15 Oct 2025 18:01:26 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f0:b9:37:5c:90:9e:ec:b0:5a:4e:55:53:ae:8c:1b:73:3c:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 18:01:26 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=04721aadf797a9b1b501147349cc8f5fc1dd20ee357aa7ee944a2601340baabd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:1b:78:d3:b1:00:b5:f3:e0:8a:19:98:82:
8c:a7:09:70:81:c2:37:03:7b:37:78:22:1a:d8:9b:
99:79:ad:c2:d0:13:28:8b:94:4a:9a:09:6b:84:39:
39:de:9e:3d:65:17:22:49:39:c1:2f:09:58:b1:ca:
b5:c7:78:c9:00:2b:3a:fa:69:29:a4:00:af:79:f4:
d7:60:82:50:3d:c3:ef:8f:21:3c:a3:20:33:b4:42:
7a:98:c5:9c:f2:73:9b:f0:be:6c:64:7a:3c:48:53:
bc:b7:af:4f:28:5a:b3:be:fc:67:45:16:3b:e4:4a:
83:77:ed:ee:0e:29:fd:d3:fc:24:2a:d1:4e:88:4e:
ed:9f:af:9f:66:d5:68:71:f1:66:85:8b:4c:9d:25:
65:7d:10:cb:eb:b8:3c:d7:b9:4e:0a:a6:9a:8b:2b:
0c:e3:21:47:39:b3:63:b0:af:0b:4a:a7:03:2f:29:
7f:3c:a3:ae:55:04:21:cd:4e:2d:d4:74:76:a0:c4:
3f:83:40:90:eb:cc:b5:0b:7a:88:9f:68:88:a8:b4:
68:64:c4:2f:93:ca:f5:11:45:02:6b:5a:f9:ed:01:
2e:18:a4:d6:44:ef:c2:66:98:d3:4a:5d:9a:97:c5:
91:83:80:a5:4e:df:90:9a:f8:2f:d6:aa:31:db:f3:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:F9:8D:16:08:05:B3:BF:7F:85:9F:56:08:94:07:AC:FB:4B:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6723cd4-ea76-4ef6-b792-c06f018e7c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:64:3c:d3:3e:fa:89:7e:a4:7d:f0:df:37:8a:d2:79:42:6d:
e9:cd:09:f7:d4:80:4e:30:11:33:56:b6:62:52:0b:97:15:39:
ad:6b:01:54:d3:00:f0:36:e8:4a:5d:60:c0:97:2e:9b:c4:ed:
a0:9b:12:b5:18:bf:cc:7d:67:c6:7e:ac:cf:e6:55:b8:29:c4:
77:4f:bb:bf:04:99:ac:0e:c9:60:c9:17:17:97:5b:d4:55:62:
bc:48:9b:49:d0:1b:6a:ba:3c:4d:3d:da:ba:ad:e5:50:ad:8e:
95:ce:e6:8d:26:e6:c0:6c:f6:88:6b:2a:ae:e0:02:ca:61:f4:
ed:9b:53:d0:db:4d:de:ab:43:6c:5a:c1:71:30:9a:b4:2f:bd:
3e:ff:39:62:ff:53:80:45:b9:a5:1a:27:df:ed:0b:8b:58:ef:
7d:c2:9a:e5:15:df:be:38:15:61:58:c1:85:c4:59:ce:b2:42:
d1:57:e6:62:c4:2c:cb:9e:d2:02:19:1e:cc:07:0b:c3:bd:1e:
27:0c:94:67:bf:1a:7a:54:80:af:82:e2:d0:b6:91:ca:3e:df:
46:a9:28:a1:ca:3c:19:c4:00:63:fb:86:fd:7b:4f:2f:c7:69:
83:9e:09:7d:e2:43:72:6e:31:02:ca:15:e2:7e:53:32:58:88:
c9:ea:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:01 2025 by rpki-client