Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdaf7fd1-a6d3-4fcf-8c9c-265648ce34fe.roa
File: cdaf7fd1-a6d3-4fcf-8c9c-265648ce34fe.roa (raw, json)
Hash identifier: 28WylRJnViRpTsm3NvErS/qvm15JNf0Pz5jTJK7QNnw=
Subject key identifier: 4E:24:8D:57:EC:0D:C8:C2:20:9A:E8:36:12:B8:9A:B4:5E:D4:1E:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 332CF3347D6952CD197A9DF0D7DA20599C530C4C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdaf7fd1-a6d3-4fcf-8c9c-265648ce34fe.roa
Signing time: Tue 14 Oct 2025 23:38:50 +0000
ROA not before: Tue 14 Oct 2025 23:38:50 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2c:f3:34:7d:69:52:cd:19:7a:9d:f0:d7:da:20:59:9c:53:0c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:38:50 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a243b6e5a68ff613dc99d075cc260405f0250e441bf3dd6031c6fe7f993b7f11, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:c6:bf:d0:1c:38:99:99:3e:e0:3b:2d:b4:
63:e2:c5:e8:b7:28:f1:46:56:39:0c:f3:2e:a3:7f:
f4:29:13:85:b6:43:e5:6f:62:23:58:d4:99:00:5d:
db:7d:22:57:ee:2e:6d:e3:85:3b:98:78:7d:c4:75:
ee:46:b4:2b:fa:11:12:ed:ef:80:70:34:79:13:82:
cd:32:03:4b:b6:2f:49:e7:86:73:53:92:44:2e:6f:
30:59:fd:39:6d:70:db:10:44:ca:10:8e:29:6c:64:
17:41:dc:e2:b6:45:d0:f3:49:26:77:d2:4c:8f:3d:
1e:79:0f:34:db:0e:8a:0c:ec:b6:fd:1b:66:fa:ce:
bb:7a:b6:94:e5:8e:8b:b6:1e:26:b2:00:fe:c0:73:
5e:e7:fc:a5:50:9e:74:3e:fd:49:4c:9b:a9:fc:01:
50:ba:e3:43:50:38:56:01:72:5c:9d:14:70:5b:ad:
ad:d6:20:9a:e3:4d:67:25:21:df:d6:35:9c:36:3a:
92:7f:59:c2:1f:01:4e:e4:32:f7:e8:61:e5:74:b2:
61:97:83:3a:d5:0f:34:e2:cf:9c:aa:49:75:a1:b3:
19:7e:a6:38:36:9d:6a:2f:a1:f5:76:66:0b:19:76:
61:fe:56:0d:ce:6d:18:60:eb:09:d3:ae:0d:80:b8:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:24:8D:57:EC:0D:C8:C2:20:9A:E8:36:12:B8:9A:B4:5E:D4:1E:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cdaf7fd1-a6d3-4fcf-8c9c-265648ce34fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.64.0/24
Signature Algorithm: sha256WithRSAEncryption
03:7c:45:36:0d:82:d1:b2:7c:04:5e:bf:28:fa:d0:49:5e:c9:
0d:33:06:44:d4:64:16:24:50:b3:1a:2f:fb:85:e2:2c:9c:ee:
d7:09:e6:20:ab:f3:9d:0e:46:4a:33:0a:fd:41:95:9a:98:02:
53:f7:a0:66:ae:6f:5b:1f:94:91:4a:20:95:18:58:37:a2:7d:
7c:13:95:93:bf:80:e6:73:27:21:c4:ba:d3:10:a9:3f:c8:59:
9a:ee:71:9a:10:1d:8d:67:66:51:60:aa:35:b0:fb:de:80:fa:
7e:ff:67:70:61:1a:ed:99:64:e9:bc:a2:05:ab:cf:cf:9b:6e:
46:71:1a:86:2e:b1:e7:93:89:81:b2:a0:40:66:8d:ee:4d:ee:
25:cd:02:b6:3f:f8:44:9b:e2:9b:6d:37:00:4c:2d:31:55:b3:
2b:44:ce:f3:84:f0:62:d3:af:a1:a5:2b:bc:2b:c5:54:99:99:
f3:53:7c:d4:31:07:03:ca:8c:f5:5f:d6:11:6b:34:53:c2:83:
c1:2a:01:f3:b1:f0:82:19:73:54:fe:d2:a9:7f:5b:8e:c2:c2:
64:42:dd:82:aa:a8:23:a2:30:6d:20:75:18:77:19:6f:5c:9f:
69:fe:e1:c0:e3:dc:30:d9:f7:e5:1c:06:06:42:f2:68:01:1b:
5c:1a:17:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:52 2025 by rpki-client