Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce16c3c5-d9e9-4157-bd02-e3ff3b292b8e.roa
File: ce16c3c5-d9e9-4157-bd02-e3ff3b292b8e.roa (raw, json)
Hash identifier: n2VL2gnzLsZb2Ww5iWDabLUx+caEHSwRSyZEnn283Oc=
Subject key identifier: 84:55:79:6E:8F:CF:6F:9F:A4:E5:B6:87:19:E2:04:A0:76:7D:D0:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F481A5B2E5DB085CA5FAEF6A8C0D0B28D36C7A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce16c3c5-d9e9-4157-bd02-e3ff3b292b8e.roa
Signing time: Tue 14 Oct 2025 22:02:55 +0000
ROA not before: Tue 14 Oct 2025 22:02:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:48:1a:5b:2e:5d:b0:85:ca:5f:ae:f6:a8:c0:d0:b2:8d:36:c7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:02:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=7a8034dfe0e0833716bb2ef8a004e62d4b4fded0789d4c2aed6da6d84dabc614, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:41:62:87:f6:00:25:04:0d:44:bf:28:25:47:
52:62:01:eb:dd:44:e5:b0:a4:c0:80:eb:1d:ee:6a:
86:15:20:76:06:3a:76:4a:80:33:7e:10:11:25:24:
62:79:98:61:34:6f:d3:86:b9:75:5c:73:69:87:5b:
7f:3d:0f:84:25:bd:e6:01:dc:79:20:ae:9c:30:29:
9d:c2:46:53:c0:2b:af:33:24:c2:02:88:26:44:f6:
5e:91:1b:ce:b5:91:30:31:8f:f0:0d:08:a9:10:a5:
2f:fe:d0:1d:0c:51:84:4f:66:ea:44:ac:f4:32:58:
03:e9:8c:79:f9:89:5e:f3:8b:71:9f:78:e0:99:32:
2f:13:0a:ae:cd:9b:17:a5:6f:31:51:20:71:24:df:
df:96:28:de:23:4d:56:a7:c3:61:b3:70:31:ba:93:
99:c6:85:c7:44:31:62:2e:23:07:b6:df:8a:a5:72:
9a:b0:01:68:68:bb:4e:86:ef:db:df:49:a9:fd:4a:
ed:4b:cd:2f:f2:3d:40:d0:fa:ff:be:41:7d:ca:4f:
be:83:95:18:eb:fe:0c:16:90:c6:de:b0:2e:91:9b:
d8:b3:9d:02:71:75:01:40:66:60:2f:9e:0c:81:3e:
27:58:07:be:6c:f7:7d:b8:2a:4f:5c:40:be:85:1d:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:79:6E:8F:CF:6F:9F:A4:E5:B6:87:19:E2:04:A0:76:7D:D0:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce16c3c5-d9e9-4157-bd02-e3ff3b292b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.43.0/24
Signature Algorithm: sha256WithRSAEncryption
35:85:89:1a:10:a6:89:2a:d3:35:ef:2a:c3:b1:b4:d1:8d:9b:
17:ca:da:30:9e:b3:56:3e:92:66:e4:b3:6e:41:93:a6:ae:aa:
d2:a1:fa:91:11:12:2c:b4:1a:1b:18:17:11:35:a0:64:7b:f0:
1c:f3:f5:f0:b3:65:af:c7:6b:48:dd:14:01:61:79:6f:5c:6a:
23:f7:17:f8:27:fd:dc:c7:27:6c:7d:ee:4d:6b:26:63:a9:35:
e1:7b:e0:2a:41:2f:5c:89:e3:69:e5:3d:7b:75:ea:42:08:f1:
3a:e6:b1:40:0d:d8:73:72:53:96:b9:25:ed:f5:77:db:fc:09:
bf:8a:65:92:44:e7:cf:d7:57:1d:66:7c:07:a9:8b:39:93:09:
cb:65:08:0a:a5:6c:4b:ff:65:b2:8e:d6:a9:7c:65:fb:0b:5b:
4f:a2:f2:00:93:8a:77:59:cd:59:a1:0d:54:42:49:f4:a8:4e:
4a:c8:ff:60:ad:a2:18:e6:f1:6c:a3:34:fc:c5:5c:d3:0b:5e:
0f:ff:d4:9c:eb:da:f5:a9:e8:3e:75:b8:d2:30:5c:41:95:f8:
d4:3c:03:4c:56:55:9e:65:27:01:b8:a3:32:c4:6f:16:ad:df:
fb:25:1b:f9:21:3e:94:7f:c8:16:5f:e1:18:76:b6:8b:a2:ab:
e5:b3:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:28 2025 by rpki-client