Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c99d1a53-5147-4aed-b5c1-1415ab0130c9.roa
File: c99d1a53-5147-4aed-b5c1-1415ab0130c9.roa (raw, json)
Hash identifier: wxE4Tehk+S+YY6v5t5jGRAeECqJRDy5Eurz948RcQjQ=
Subject key identifier: 95:E6:29:CF:2C:0C:9D:8B:4C:61:2C:0F:D1:44:20:B1:CE:CE:E6:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38A79D95E1B21172993AF1BF5E0860A3A2FAE17C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c99d1a53-5147-4aed-b5c1-1415ab0130c9.roa
Signing time: Wed 15 Oct 2025 16:21:10 +0000
ROA not before: Wed 15 Oct 2025 16:21:10 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a7:9d:95:e1:b2:11:72:99:3a:f1:bf:5e:08:60:a3:a2:fa:e1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:21:10 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=3e23f607bde5aab79b2f49bbffe07d6e3140cb88d6431ba5c4260cad54cab514, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:9b:fe:b7:9f:0a:ed:d4:3a:57:36:b6:bd:
9b:9e:1a:fa:4e:46:cf:19:3e:7a:08:11:d5:a8:fd:
13:fc:60:70:26:e3:a7:80:ec:10:c6:b7:2c:7b:26:
bc:e5:a7:34:b3:4c:0d:a3:98:d1:b8:95:70:ec:57:
f1:70:bb:b3:50:a3:72:29:bd:44:6d:26:05:da:4c:
28:a7:0d:00:16:d6:15:32:c2:b5:ce:25:e0:11:46:
59:e6:6c:14:4e:1d:66:49:28:07:a6:dd:3e:f8:21:
05:a3:b0:12:e9:bd:5d:19:f4:ce:60:76:c7:3d:24:
5b:e1:ba:0d:28:c9:4c:57:e8:30:dd:80:f3:af:1c:
40:8e:e2:ac:73:08:57:7c:68:c3:93:f1:a6:82:af:
fb:9c:5c:d3:31:55:4e:84:fa:ea:e3:03:d0:2b:76:
a9:ee:58:5e:8a:45:b7:51:a6:4c:4c:44:e7:a7:90:
8c:96:79:56:1e:d9:8f:1e:69:35:8e:39:a3:7a:54:
ea:56:ce:42:6f:10:b9:90:a1:67:02:2a:e9:dc:5a:
a6:33:43:80:53:2b:eb:e8:bb:50:8e:61:92:25:d5:
d0:b2:8d:79:b7:b8:c7:5c:5e:ca:de:f4:15:ed:8b:
82:f8:8c:cf:3b:48:c1:ca:6d:39:4f:6f:31:fd:0c:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E6:29:CF:2C:0C:9D:8B:4C:61:2C:0F:D1:44:20:B1:CE:CE:E6:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c99d1a53-5147-4aed-b5c1-1415ab0130c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.53.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ef:b8:72:0b:25:ae:7d:5e:da:40:ad:7d:e7:59:ad:17:8a:
90:ba:8a:f3:94:57:76:58:c9:db:98:1a:a5:b9:f4:49:3a:d2:
55:c8:96:3c:86:3e:6a:18:9d:db:a0:da:f0:cd:34:00:9d:09:
1e:f8:0b:62:62:0e:c1:3f:0f:ff:c1:46:7f:17:29:09:cc:1d:
ce:45:4d:03:b8:98:f0:dd:c6:75:48:f7:3f:11:f6:b0:10:bb:
80:1b:fb:53:3a:0d:79:73:a8:49:20:a6:f1:55:ce:1f:9f:29:
41:30:fc:81:52:16:d5:2c:e3:e0:5a:5c:15:46:93:6c:8b:0e:
90:a2:d9:a5:c2:7c:c6:51:a4:c3:14:0d:fb:18:a3:5b:a8:e0:
04:26:cd:2c:3f:38:fa:1e:ae:00:ad:17:3c:1e:2c:a9:78:37:
87:c2:bb:85:4d:cd:a3:f6:e8:fc:ca:07:5b:74:05:53:3c:ab:
ba:37:c8:5f:61:67:6f:07:c5:e0:eb:46:78:22:74:31:76:9c:
4d:0b:21:27:40:b6:a2:52:a3:54:24:aa:50:c4:6f:6e:a6:45:
09:ef:c3:db:49:8e:33:6e:e4:61:dd:9f:7b:d3:cd:f6:69:63:
cc:5e:72:d2:48:c2:f2:bc:1e:a0:1d:f3:48:53:18:9f:87:d1:
2f:f5:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:32 2025 by rpki-client