Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfcdebc4-fe4e-4366-af90-9d0bc1e6016e.roa
File: cfcdebc4-fe4e-4366-af90-9d0bc1e6016e.roa (raw, json)
Hash identifier: xI4Ui0pG+pfmjE/qqh4In0TSnQuEkKsx4aIY9BQfsB8=
Subject key identifier: 81:1A:DC:71:32:AD:1B:58:41:EF:D8:26:CB:75:4D:E5:A6:53:02:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46A52BB5ECEAAD03ADECFBBEEFB78DF24E17B70B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfcdebc4-fe4e-4366-af90-9d0bc1e6016e.roa
Signing time: Wed 15 Oct 2025 18:11:10 +0000
ROA not before: Wed 15 Oct 2025 18:11:10 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a5:2b:b5:ec:ea:ad:03:ad:ec:fb:be:ef:b7:8d:f2:4e:17:b7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 18:11:10 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=c6635fdafda9cbb5b98ccedc547efd8a5a88da35d41c5f469f615075c30688fc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fb:a1:c0:09:6a:85:df:67:25:b0:78:0f:0f:
e5:dc:30:34:23:f7:b1:b1:a8:db:93:d2:eb:19:34:
9d:de:40:34:96:88:77:f6:07:3c:d5:ad:4d:8e:a5:
78:b5:41:e5:22:b1:f2:86:65:1a:bc:e2:6f:e4:fc:
83:55:aa:47:55:1e:7d:94:9c:a0:22:2a:40:45:54:
cd:56:58:37:c3:90:fc:93:51:ab:fa:63:7e:c4:a5:
81:8b:b5:e0:fd:29:59:f2:85:76:42:16:b7:0c:1c:
84:b3:91:15:77:de:55:b9:02:fb:c0:ac:d6:47:ec:
fc:b3:41:f9:f0:e9:1f:b0:4e:ac:0f:c4:4a:2c:bc:
08:5c:df:86:c8:6c:d2:72:6b:16:84:da:d9:cb:5c:
a7:6d:d0:3d:a0:3d:e3:47:54:b7:dd:c6:47:bd:47:
52:2f:2b:51:d0:ee:4e:b2:b2:69:b0:5e:d3:74:96:
fe:74:f5:7e:29:c2:07:8a:c4:8d:30:7d:1a:53:dd:
dd:7f:6c:8f:29:e5:9d:84:ed:b9:f2:d1:ce:8f:ff:
69:bf:00:09:c8:ed:b3:a4:a8:76:60:81:18:45:e6:
d5:01:54:51:08:3d:46:0c:ef:b2:c6:bc:fd:3a:6f:
c9:ba:4a:e1:e2:0a:57:66:ec:35:47:64:54:b5:99:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:DC:71:32:AD:1B:58:41:EF:D8:26:CB:75:4D:E5:A6:53:02:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cfcdebc4-fe4e-4366-af90-9d0bc1e6016e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.129.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3a:24:b4:27:76:9d:e7:9a:ac:bf:da:05:a4:ad:8d:1f:d8:
57:77:d2:4c:9c:ef:88:57:70:b0:4f:10:29:e1:f2:bb:dd:97:
0b:0e:d2:ef:97:e0:3b:11:a5:d9:07:d7:0a:2f:2b:91:87:6c:
14:c1:2e:e7:dd:51:86:d1:5e:71:f6:1f:1b:5e:80:c0:93:d1:
19:cb:54:a6:89:58:05:66:ea:38:d4:27:a7:21:21:5d:96:2f:
5c:da:d6:1c:a2:07:e3:86:2a:2f:99:5d:54:0c:0a:8d:22:ae:
18:ae:6a:0b:6a:61:10:47:fb:b4:e8:18:72:f8:e1:05:ef:11:
d1:9c:b0:95:e4:84:bb:2f:88:91:86:2b:31:54:90:ff:ab:f6:
5a:07:a3:3b:88:98:d6:9d:d2:d4:f9:e2:1e:b5:ec:de:eb:a1:
2e:1d:cc:73:16:b5:99:21:ae:ed:d1:7c:e9:cd:24:88:00:5a:
d0:3d:7a:8b:3a:aa:87:de:ff:3e:24:f4:e9:97:1f:d5:5e:9e:
91:92:78:1d:0e:a2:42:1d:a2:fd:3f:d2:8a:f5:71:8b:42:f1:
cf:2f:29:60:36:9f:24:99:e5:22:5f:c2:9a:b7:8e:01:2f:20:
4e:2d:0d:3e:38:9d:40:14:4a:a5:86:17:aa:54:ed:4a:d2:47:
89:8b:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:35 2025 by rpki-client