Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d20fd866-5906-401b-8665-16f63e2f9976.roa
File: d20fd866-5906-401b-8665-16f63e2f9976.roa (raw, json)
Hash identifier: clMy5Vop45+h0QMENqmNjsm0YBlt+fNzwFSk0MrIQR4=
Subject key identifier: E9:55:F1:A1:F5:2D:AE:8F:58:01:C9:BE:4E:85:F2:9D:CB:DF:15:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6431AD15B8CC581A06777F024EE40386FB6AFFC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d20fd866-5906-401b-8665-16f63e2f9976.roa
Signing time: Wed 15 Oct 2025 15:02:05 +0000
ROA not before: Wed 15 Oct 2025 15:02:05 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:31:ad:15:b8:cc:58:1a:06:77:7f:02:4e:e4:03:86:fb:6a:ff:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:02:05 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=69cc463671cb1b8285999144ba4be5708376dd2b4666b6a08c608fb34071ddbe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:aa:a1:94:10:99:a8:d3:15:a5:9b:87:3b:
fe:e8:67:8c:fb:34:d9:c6:66:16:12:90:39:69:4c:
08:e2:f0:ab:23:e6:9c:d2:10:bc:f6:54:0f:7b:91:
2e:fd:ae:c1:3a:84:55:77:69:88:6a:dd:d8:15:ec:
4b:4f:5d:6e:ec:ce:30:a4:a7:70:61:34:8a:44:f9:
cc:62:0d:7f:5a:2c:1b:02:d5:e9:f5:e1:22:81:c7:
03:95:4e:fe:14:24:6f:0c:88:84:83:0d:99:35:2b:
23:d1:81:d0:f9:89:42:4b:9a:b4:42:c3:e9:73:24:
5b:ce:7d:46:14:0b:26:47:96:55:63:ff:e3:c0:69:
55:58:99:2c:74:b6:82:b2:5e:e9:36:de:8e:49:f1:
8d:be:a5:59:58:c6:49:6f:9a:87:c0:85:ba:ae:7c:
b7:10:eb:c8:0e:24:f2:cd:21:5f:0e:ee:a3:1d:48:
69:68:b1:c5:0b:f1:0c:16:9a:3c:b1:58:49:15:d1:
ff:c7:95:f0:40:9d:dc:40:7b:ea:2c:e0:14:5e:ad:
4a:4a:fb:a7:cf:5c:5a:e3:f5:53:e2:b2:a3:e7:e1:
d1:9b:2b:d2:b3:f8:09:5c:2b:fc:0d:9a:26:fd:e8:
b5:a4:cd:66:42:3e:8d:71:57:fa:a9:6a:93:aa:01:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:55:F1:A1:F5:2D:AE:8F:58:01:C9:BE:4E:85:F2:9D:CB:DF:15:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d20fd866-5906-401b-8665-16f63e2f9976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:47:ff:23:1d:a2:31:38:d7:92:ce:3c:f1:63:c1:7e:6f:62:
9f:24:92:34:46:a5:fd:44:92:61:24:c1:a3:40:b4:61:73:ec:
9d:82:e1:1d:62:20:1f:5c:2c:51:e6:97:6a:d2:08:31:79:d7:
fb:37:b6:8a:9b:21:d3:fe:c3:61:57:bd:7b:d3:85:cc:06:c2:
55:d4:14:20:93:ca:5e:51:e1:67:cf:0e:ee:0f:ab:1d:ee:2a:
37:5b:e3:28:bf:c8:6d:ba:15:bf:e6:18:5a:83:45:e1:31:44:
0c:0b:26:e9:3d:59:cf:92:9b:ea:88:21:76:0c:a1:c0:c1:57:
33:1d:39:3c:f1:1d:18:1f:d0:fd:c3:58:57:4e:12:c0:11:a7:
48:33:b4:c2:2d:a3:82:3e:ca:f8:7c:a7:fd:0d:21:4b:80:85:
8a:d0:79:6f:9b:1c:f8:4c:ca:d0:cf:1d:fa:35:6d:86:9e:4c:
f1:d2:ea:02:33:59:19:90:72:6f:85:f9:15:fc:60:73:4e:cf:
5f:f8:9c:1e:23:e6:a0:bd:4a:b0:6f:a4:34:0a:3b:a1:e0:5b:
bb:00:f4:8c:ab:96:c5:6b:ce:d1:14:3d:6f:53:15:08:bf:01:
63:71:77:21:22:ba:60:43:3c:91:77:b6:ab:50:73:56:d0:88:
47:a5:31:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:11 2025 by rpki-client