Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d112a9f0-b134-42d4-804b-179540f26c7e.roa
File: d112a9f0-b134-42d4-804b-179540f26c7e.roa (raw, json)
Hash identifier: DvNdnPI5GmKspUXRMqpU7rV9Z8I8czl7VA+ks+Lncfs=
Subject key identifier: B2:A8:45:5F:F2:0D:DF:66:56:37:FE:5A:27:F5:99:73:EF:F3:99:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4123E3933FB73B4F8C7FA22AB3FEE25FC3B2F4E7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d112a9f0-b134-42d4-804b-179540f26c7e.roa
Signing time: Wed 15 Oct 2025 16:11:56 +0000
ROA not before: Wed 15 Oct 2025 16:11:56 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:23:e3:93:3f:b7:3b:4f:8c:7f:a2:2a:b3:fe:e2:5f:c3:b2:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:11:56 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=36c4cb5a0312c01be3eade481ddadee7654e5ebd25d4b9d1d002b814acf24a88, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9c:e4:73:ac:a5:68:77:3f:01:cc:04:73:2f:
da:cd:bc:c4:8e:a8:ee:f4:75:70:71:e3:a0:98:a4:
5b:1d:b2:3d:23:ec:ad:a7:40:3d:fb:ce:3e:ae:a8:
40:36:ab:32:9a:98:44:4d:5a:ea:78:11:dc:ca:90:
61:be:cf:f0:e2:f1:7e:f9:72:de:b9:ef:28:a1:15:
a2:00:e9:55:c6:d9:c9:01:a3:b3:a5:24:67:c8:ea:
42:87:2d:b3:b8:bd:30:89:a6:d6:d8:f6:44:39:c0:
bb:91:06:ff:cc:46:e4:46:b3:b3:96:f0:e8:d5:99:
61:80:77:bf:95:31:90:32:2e:b6:6c:12:07:7f:a1:
2d:13:7e:62:ea:d2:e6:77:bb:2a:4f:f5:07:e9:ca:
b4:d8:05:d4:ff:1b:0e:6e:9f:48:90:36:64:e7:af:
66:95:30:be:25:89:68:b9:da:ec:63:0e:12:bd:e4:
98:17:8c:cc:a6:f6:e0:ec:83:d8:04:a3:91:9f:43:
3a:c3:ac:f4:50:5a:8d:57:07:6a:98:27:d6:9f:e0:
88:7d:bf:3f:5b:6b:8a:6a:76:21:94:cd:0e:a2:85:
b5:58:90:b0:df:18:e3:02:f9:49:90:b5:b1:0a:a3:
68:0c:d5:87:70:89:b9:6a:23:7e:ff:fc:61:be:c0:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:45:5F:F2:0D:DF:66:56:37:FE:5A:27:F5:99:73:EF:F3:99:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d112a9f0-b134-42d4-804b-179540f26c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.43.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4a:49:a6:68:b4:8f:cd:3b:7d:37:d9:c4:43:2d:b8:8c:63:
27:62:8d:a1:b9:33:d4:26:18:92:1c:e3:d5:28:9a:fa:fe:ed:
80:a1:c6:31:75:5e:f6:5f:c9:c7:23:1b:3d:8f:e0:cd:b6:77:
a6:4a:63:78:1f:5a:48:21:03:7b:dc:27:44:09:2f:8e:1b:8a:
03:a8:12:b7:6d:95:6f:c4:53:06:37:05:cd:5b:41:2c:d9:fe:
e0:11:85:9b:05:cd:bf:87:44:42:40:f7:a3:5e:2c:db:05:db:
2d:3e:38:77:cf:02:47:91:87:f5:dd:ee:17:97:73:d1:be:ba:
bf:c4:e6:54:c8:e9:ab:16:40:69:78:75:e2:73:f3:75:e7:a4:
10:38:c9:33:17:e0:3b:66:1a:e5:43:81:60:f0:de:df:fb:0d:
77:ac:2c:90:3d:b3:b0:10:61:31:84:e9:e9:17:36:f6:6b:13:
74:6f:ff:9c:61:ab:b1:50:49:43:a7:4d:84:31:50:4e:5b:8a:
af:13:a5:10:c2:e6:3d:53:0f:c6:d2:6d:34:0d:02:3d:0e:bd:
bf:95:0e:7e:af:59:84:0e:dc:49:54:b8:2b:34:4e:7f:43:e6:
83:5d:96:71:20:ff:b2:cb:fc:23:65:a8:43:28:9b:17:8f:ea:
e5:15:08:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:32 2025 by rpki-client