Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d8a6c8-84fe-435a-8281-f984b5a28201.roa
File: d4d8a6c8-84fe-435a-8281-f984b5a28201.roa (raw, json)
Hash identifier: LiiUHR7wYnD7VjWn9870W6l5O/U5clEva7S9h8jLBMw=
Subject key identifier: DB:9D:8B:BE:39:09:34:66:AB:98:9E:6C:F4:8D:47:38:54:38:DB:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A3CED8D307D8193154C205D11AEAAE8975B01CA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d8a6c8-84fe-435a-8281-f984b5a28201.roa
Signing time: Tue 14 Oct 2025 20:51:17 +0000
ROA not before: Tue 14 Oct 2025 20:51:17 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:3c:ed:8d:30:7d:81:93:15:4c:20:5d:11:ae:aa:e8:97:5b:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:51:17 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fce2c23ad0ec8fbf08084bf1bc62837c05ddf6ce179daa2605c77ad6b79464f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:7d:0a:ce:0c:65:72:36:e4:18:bd:5b:31:
d2:db:5c:28:1a:06:7f:0d:12:bd:ea:d0:38:37:6e:
d9:35:cc:d7:fe:6d:c0:1d:94:7d:46:e1:7f:4a:a8:
d4:40:e6:56:44:dd:dc:98:6f:f3:15:6b:e1:3e:d8:
c9:f9:47:da:8a:d9:ed:15:c3:9b:57:63:0f:77:2c:
55:ef:04:86:34:e7:6f:19:fb:3a:bd:f0:fc:bd:11:
ec:fb:43:29:7d:3a:4b:20:29:26:85:8d:d8:ed:04:
5b:b4:23:0a:55:e5:ea:69:c0:e7:81:aa:70:47:5c:
33:76:60:71:1d:13:0a:b7:40:10:38:13:3b:a7:4c:
a5:09:37:51:20:78:92:ff:6b:fe:9a:c9:02:ac:06:
cb:7f:76:e7:b0:ac:b2:5c:89:57:fe:de:20:ba:56:
4e:71:80:c1:a3:ab:12:0a:34:43:59:67:9d:84:04:
9c:39:1c:97:66:ab:2f:d5:fe:77:0a:4c:81:8b:27:
51:55:54:b1:d2:3a:4f:67:d6:cb:63:7d:8a:99:84:
f5:5a:cd:96:2d:54:6b:6a:b0:61:ce:fe:32:5a:d0:
82:d3:f8:4e:f9:2e:76:3e:ce:29:fe:7d:ab:43:c7:
06:1a:a2:06:34:51:c1:14:7c:d0:38:7b:70:a1:9d:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9D:8B:BE:39:09:34:66:AB:98:9E:6C:F4:8D:47:38:54:38:DB:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4d8a6c8-84fe-435a-8281-f984b5a28201.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.100.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:23:63:8a:5b:6a:02:ff:3d:30:2c:9f:16:0f:36:fe:f2:5d:
0e:3b:a0:43:7a:c7:22:2c:51:be:30:9b:9e:b9:bd:12:1c:43:
cb:79:25:f3:6c:cf:a3:96:ff:f0:47:3b:ed:28:b1:bc:6c:01:
30:4d:13:1e:27:2a:75:29:20:5d:55:bd:2b:de:90:47:02:c2:
2f:b6:52:c2:f3:20:18:6d:7d:7b:57:0a:1f:f5:76:97:da:0b:
6c:d1:38:ba:76:86:76:18:fe:75:3d:dd:2b:0a:37:a2:f7:21:
5f:0e:c7:90:c8:97:10:62:f1:e2:dc:6a:68:5f:f3:a4:ab:39:
9f:62:d7:c3:82:6a:3f:0e:31:d1:c5:77:1e:8c:44:76:db:db:
10:5f:80:ec:bb:8e:ba:a9:be:41:fd:33:f3:51:48:b6:88:43:
03:19:56:a6:69:2d:fd:59:d6:75:e8:75:70:3a:24:0a:64:c7:
9b:3d:da:a2:91:a2:05:11:d1:db:e8:14:44:4d:d7:e9:99:f8:
a7:1f:48:c7:d6:ff:f2:20:44:94:54:c3:d7:1e:6d:79:f3:a9:
59:7c:f0:1a:e7:8d:cd:db:29:d9:c4:60:79:b0:52:a1:17:c0:
43:ea:d1:99:da:94:1e:8d:ed:09:01:44:3e:00:aa:2a:32:99:
91:5a:6f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:35 2025 by rpki-client