Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa
File: d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa (raw, json)
Hash identifier: Of+YfV2Nt0IK6PRb0qR446bUEzHF0sBe5c5fZPgyKcA=
Subject key identifier: 71:DF:52:79:9B:11:64:24:E8:C7:D8:1F:A4:DD:01:9B:3F:15:13:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7DED0083B871A49209351179B492AD3F27EBA87A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa
Signing time: Fri 03 Oct 2025 00:51:11 +0000
ROA not before: Fri 03 Oct 2025 00:51:11 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ed:00:83:b8:71:a4:92:09:35:11:79:b4:92:ad:3f:27:eb:a8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:51:11 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=20a8f4600f2a9047caa0443e61658cd426437554a300f78911cdb45c9bea9a8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bf:ef:73:0a:37:80:0a:1d:bf:c3:02:96:2f:
e3:02:58:74:af:b7:e2:1b:d4:34:b0:be:03:4b:43:
c9:fe:f4:89:54:35:4d:31:ff:9a:a6:45:b7:34:f1:
96:0c:29:a8:91:64:97:8f:ed:cd:87:d4:41:69:50:
4a:87:76:67:ac:07:10:4d:ed:ec:88:78:00:cd:2e:
48:5c:c3:58:9f:de:0b:50:b8:0a:21:78:a7:4d:d0:
ae:28:a2:ee:dd:0f:44:18:e9:22:35:c6:3d:46:54:
04:05:9f:6a:fc:de:5e:f9:d2:45:8d:4e:3d:96:6f:
73:b7:b6:d0:ae:1d:b9:18:38:95:5c:dc:31:c0:36:
43:c0:d7:5c:e4:9b:1e:5f:08:e4:cc:a5:63:cb:e1:
8f:88:2a:09:ce:aa:0e:40:e4:0c:ce:ba:69:3a:3c:
8c:3c:67:a5:27:74:c0:01:d0:26:bf:60:c8:b2:24:
fb:75:39:56:7f:44:76:b8:d6:df:e5:a9:88:10:cc:
16:c4:d0:ef:23:40:3a:db:ba:eb:26:73:98:7a:59:
d7:c9:4c:bf:0f:3e:bc:a0:33:e0:53:b1:c0:4a:43:
2e:a3:81:28:fd:11:e8:a7:d9:8e:bb:bc:78:0a:95:
63:53:6b:cc:b8:0d:b5:68:04:aa:ba:b3:0d:a9:59:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:52:79:9B:11:64:24:E8:C7:D8:1F:A4:DD:01:9B:3F:15:13:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d2953d19-0e62-4d86-b608-d1803c5c2e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.244.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:28:a5:53:9b:b8:90:1d:9d:41:2e:8a:24:3d:32:3d:e9:37:
b9:6a:40:86:1d:37:c3:22:0b:a7:f1:79:be:87:5b:c0:93:b6:
ef:75:3b:02:cb:9c:a4:51:17:1d:ca:3e:16:36:db:7f:13:85:
e5:f0:e5:4c:d6:7c:02:2f:d7:53:40:61:76:ae:87:44:a2:ee:
44:14:fb:8e:ad:53:41:d7:3d:a3:81:ed:1a:16:9e:cc:3c:4d:
0d:65:4b:1a:f6:ba:fa:16:11:02:e0:b4:71:c8:7f:62:b5:a4:
a7:3c:89:cc:f6:0b:c7:13:64:1c:98:d0:50:99:63:f8:a9:27:
70:eb:62:25:74:80:c4:93:3d:9a:e9:19:e3:1f:7e:a2:21:79:
67:88:11:00:ee:d9:56:b3:7f:9d:74:6e:84:65:2b:d5:d9:31:
5a:2d:f0:68:94:8b:02:d9:13:d8:1b:80:9e:3c:eb:97:d1:be:
3a:92:46:74:75:c5:82:1c:39:29:d4:8b:e0:74:0e:05:c8:cb:
7a:7a:1e:d7:69:ee:54:b1:fb:39:e7:a2:a7:d2:1d:36:74:78:
8a:ef:0a:3b:f6:fe:06:d1:05:06:b3:a3:e8:c2:b2:f1:03:3b:
e9:d2:38:fd:72:85:5d:3e:10:87:e6:8c:47:b4:88:fb:c2:b4:
1f:22:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:17 2025 by rpki-client