Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
File: d4afba84-8d51-440d-a653-037c4b7ea55e.roa (raw, json)
Hash identifier: qAivzITwjPr5ttczuwGL+SyEKe9Po34DTATJkiDiBfw=
Subject key identifier: 08:5F:5E:61:38:EA:21:35:DD:EE:71:E1:15:DD:53:48:57:E4:1C:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D4AAE04F9E338138BF77BCF0548560D829C3DB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
Signing time: Wed 08 Oct 2025 00:43:01 +0000
ROA not before: Wed 08 Oct 2025 00:43:01 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 99.151.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4a:ae:04:f9:e3:38:13:8b:f7:7b:cf:05:48:56:0d:82:9c:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:43:01 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=2d7adba87e4914e11256b7abd170ad3c88ed2e7c7677b3c8ca71a791d3de0b4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f6:0c:f8:57:01:ba:3b:d9:a7:16:48:f8:1e:
84:c7:d9:38:fa:51:7b:0e:f5:4c:89:2c:b6:ef:89:
63:2f:b4:29:eb:76:ec:d2:1b:87:35:2f:8e:a6:60:
13:4e:08:4e:6e:8f:59:9f:75:dd:b2:fd:13:59:2c:
50:d0:0b:74:0c:19:a3:fa:f6:53:d8:04:6b:ed:0d:
eb:26:ca:14:f5:a1:f3:a8:70:2d:99:bf:c3:a6:7a:
b1:57:40:1b:58:14:eb:2f:e7:05:6f:58:66:63:e5:
64:99:90:5a:f0:4b:78:a5:0e:3c:84:a6:a7:5e:9c:
70:ee:5f:09:71:ee:d4:d7:99:39:b8:29:ab:83:fc:
56:fe:df:85:fd:2e:51:0d:fe:b5:c3:fd:63:5c:bc:
0c:c1:e7:f5:3e:58:b8:fb:1c:4b:58:b3:51:28:8f:
95:bb:1b:7f:68:6b:47:e5:00:6d:20:a6:71:6c:fe:
27:f0:6f:49:20:03:9f:d5:f4:18:e2:5d:4b:33:2b:
19:f2:55:6c:8c:96:25:fb:d6:95:a4:05:56:06:a5:
42:79:1d:fb:44:e6:76:ef:27:14:49:d2:8f:85:75:
6d:2d:50:aa:18:b5:bb:03:c4:6b:09:0b:4c:45:39:
ab:d2:4b:86:4a:ee:9a:d7:26:25:4e:b2:e1:98:1f:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:5E:61:38:EA:21:35:DD:EE:71:E1:15:DD:53:48:57:E4:1C:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:bf:1e:88:4e:3a:a9:84:c0:c6:79:69:d9:6d:a9:80:2c:7d:
c6:0f:8d:ea:da:1a:f7:cc:c1:cb:09:5d:49:54:67:dc:d9:08:
61:10:e6:3d:99:a7:c1:72:27:43:bf:a5:dd:a4:9b:76:4b:f2:
49:14:47:2f:9b:a8:26:05:15:1c:63:b0:62:5d:b8:a9:d5:3b:
b1:69:c5:78:97:dc:97:30:f8:5a:0c:1b:91:bb:6d:7c:cb:6c:
87:66:33:44:98:83:07:36:6b:87:12:02:e4:c3:36:83:c7:9e:
77:30:5e:4f:1d:e0:af:d8:53:b9:31:b5:59:d7:07:f3:93:88:
8d:a8:01:44:af:7a:9a:c7:f4:ab:5a:a0:92:c2:29:52:1f:6d:
75:3b:21:ba:71:0b:7a:41:99:13:77:3d:3a:70:08:ff:0b:f2:
db:28:ce:8b:02:0e:fd:40:3c:1d:15:e9:75:6f:9a:b7:c1:0a:
74:9c:ee:05:c3:f3:49:a3:42:4e:f3:5f:f8:2f:0e:de:d5:67:
d1:10:1e:cd:c9:e2:aa:a1:92:8a:b3:43:df:49:48:aa:67:77:
1f:cf:02:12:83:7e:03:25:17:76:0b:87:99:8b:f2:c5:84:ec:
3f:11:cc:1f:9d:4f:42:97:a5:a3:4c:3e:59:00:05:05:09:d7:
af:e7:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:39:55 2025 by rpki-client