Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d57ae784-914e-4adf-a25f-4511bd4edbfc.roa
File: d57ae784-914e-4adf-a25f-4511bd4edbfc.roa (raw, json)
Hash identifier: rqVPajDt+z8XWlMriQYXKffodh/a4UtaX3AafRFPuLs=
Subject key identifier: 84:A7:1B:B5:3B:D8:F7:06:15:8F:C0:0F:A6:13:28:AB:9D:ED:C7:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CFD71994B56EF24814EB2F6A90DC49D5D58AB21
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d57ae784-914e-4adf-a25f-4511bd4edbfc.roa
Signing time: Tue 14 Oct 2025 22:12:43 +0000
ROA not before: Tue 14 Oct 2025 22:12:43 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fd:71:99:4b:56:ef:24:81:4e:b2:f6:a9:0d:c4:9d:5d:58:ab:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:12:43 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=c13fadc4b8c58e6fc60502185efdb696258c901f57c51551cee179d27deaa413, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:74:67:38:69:37:71:7b:0f:70:59:f1:c9:
13:8a:dc:c8:44:85:82:e6:27:ef:ba:46:00:cc:70:
38:63:81:19:dd:2f:8e:d4:67:b7:75:32:f2:98:0c:
6a:9f:85:d3:82:b4:ef:99:84:30:79:ba:a2:ee:8f:
9b:62:cc:30:9f:df:cd:2f:bc:f0:1e:9a:d6:b5:b1:
68:d5:b5:1a:23:62:45:34:94:f4:93:67:79:dd:ce:
a0:10:a7:3f:a5:b0:07:0d:40:93:b5:e1:e7:d2:8a:
c1:d2:57:44:2c:f1:79:91:5f:ba:ac:e9:44:87:19:
99:0d:0c:05:38:d9:20:08:41:a8:9f:7b:52:8d:bb:
eb:13:15:d5:fc:f9:d3:57:99:6b:cf:96:4c:52:43:
3a:ad:22:8c:ab:32:d4:db:03:ee:d7:81:75:47:f6:
05:2d:d0:c8:bd:b1:b8:2f:0d:3c:5a:d0:75:42:d4:
4c:bc:3b:58:b9:9a:9f:7b:f4:45:92:99:25:be:69:
9a:94:52:9d:8d:27:6c:c5:55:7b:8f:cd:02:51:dc:
3c:18:e1:a3:b1:9b:db:f5:ee:36:8b:6f:e5:7f:2e:
40:d8:44:ab:d3:6c:67:8e:a1:5f:4e:8c:6e:e0:e8:
f5:8c:59:08:23:a7:b3:7a:46:2d:62:dd:cc:8c:20:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:1B:B5:3B:D8:F7:06:15:8F:C0:0F:A6:13:28:AB:9D:ED:C7:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d57ae784-914e-4adf-a25f-4511bd4edbfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:7d:1a:40:14:89:17:4f:2d:b3:64:93:1e:a0:25:5a:ca:99:
e9:f2:3b:37:db:72:55:20:08:a2:71:79:09:9c:93:5e:37:83:
75:be:68:ad:1d:e3:a1:f4:a6:11:a6:7a:34:5d:2d:44:b0:4e:
e2:f5:65:8c:da:93:72:65:22:c5:97:b3:49:30:0a:14:74:ab:
40:95:bf:de:ac:0c:7c:8e:bd:f6:99:f6:7f:cc:16:08:1d:3d:
7b:b0:ca:18:cd:6d:a1:c9:8c:18:5a:68:cb:f8:6f:a9:d4:2a:
d0:5d:3c:4e:56:cc:a3:92:34:cc:a8:cc:f2:50:36:00:96:89:
74:9e:a8:b5:f6:2d:10:3d:94:46:ed:a8:0e:d6:da:09:de:95:
83:50:2a:76:58:80:f1:0c:62:41:65:17:36:5e:79:30:24:95:
f7:23:30:a0:c2:46:f1:70:04:2a:5c:bf:75:1a:60:01:1a:5e:
f0:4a:cf:98:68:00:27:e6:86:72:c7:8c:ca:6c:0e:c7:92:a3:
5b:cb:ab:64:a7:74:f3:d3:3e:eb:b0:f7:56:ad:7b:88:b0:5c:
d4:bb:6a:b2:92:ea:80:38:8d:6b:c9:02:41:64:52:20:2a:ac:
96:c8:af:1c:d3:fe:07:8d:b9:54:8f:02:61:f1:54:3d:c4:a5:
f4:6b:b4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:36 2025 by rpki-client