Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6998d61-56e1-46ea-bce8-6c0fe4307cb1.roa
File: d6998d61-56e1-46ea-bce8-6c0fe4307cb1.roa (raw, json)
Hash identifier: IwVzJ4WX7YLSHNXWNjXMptCld/jrRgEop0TOkSOZ4tw=
Subject key identifier: 18:24:B2:11:59:0A:5A:C9:A0:6A:EF:BA:C9:C7:32:1F:CE:9E:A1:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F6B2A4047F5B38607D8824668E4B18617C79BBB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6998d61-56e1-46ea-bce8-6c0fe4307cb1.roa
Signing time: Tue 14 Oct 2025 21:02:59 +0000
ROA not before: Tue 14 Oct 2025 21:02:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6b:2a:40:47:f5:b3:86:07:d8:82:46:68:e4:b1:86:17:c7:9b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:02:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=3aa819aadd0f4775f3bf44c685c593e14f256da305aaa17ab405042eaf7342ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:93:e9:f4:64:a6:39:bd:7c:2c:c6:ff:9b:
76:fc:78:55:ed:63:d6:bd:35:be:ae:24:12:6f:11:
bc:e2:c6:96:e4:ad:7f:97:32:5f:bc:21:58:51:6f:
25:2c:4a:01:5c:ee:0b:72:2f:75:72:2e:cb:2f:76:
b6:2d:43:29:5c:df:6c:55:e2:e1:24:13:f8:e3:0f:
d6:1a:d2:72:8a:7b:1b:4c:c0:d3:d9:53:9b:ec:ae:
48:0c:6e:1a:ef:3e:21:ce:d9:9a:8b:c4:d4:95:c7:
1c:61:a8:28:10:d3:91:f6:6b:6b:33:3a:d4:32:cd:
2a:36:52:bd:51:3d:25:11:4b:2e:2d:24:cc:c6:7c:
08:d1:43:1a:7b:5e:cd:6f:ba:e5:31:5e:e1:20:79:
e0:91:4f:3a:ca:e9:02:cd:e8:29:16:79:c9:16:e7:
c9:bb:6a:fe:0e:62:25:30:18:d9:81:82:ca:39:95:
a4:6b:39:58:fb:c3:48:99:63:cb:b6:a5:85:2c:46:
af:d0:53:04:4a:bc:99:eb:c3:d4:8e:25:d1:ce:f7:
5b:e0:7c:6d:4d:c2:bd:5d:68:4e:3c:7e:dc:91:d2:
62:a9:90:b4:65:f3:09:9c:b0:d7:39:18:50:d2:cd:
92:ca:1f:f3:65:15:c0:74:51:4d:52:57:5a:4f:9f:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:24:B2:11:59:0A:5A:C9:A0:6A:EF:BA:C9:C7:32:1F:CE:9E:A1:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6998d61-56e1-46ea-bce8-6c0fe4307cb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.230.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:ed:04:e0:66:b4:6b:80:60:b6:7d:d3:11:92:23:8c:e3:fa:
cf:a0:fa:6e:9c:7b:c2:4b:16:9a:4a:20:93:d2:31:bd:f1:52:
72:51:dc:da:9a:2c:ef:30:9f:1b:1c:09:4f:1f:15:14:21:54:
45:e3:db:82:65:6a:5f:17:a4:a1:55:3d:88:17:e9:66:f0:1d:
0b:76:c6:83:49:3f:1e:d9:88:a2:2a:11:83:6c:ff:0c:ef:96:
96:3f:91:30:2b:bf:9e:bc:81:6c:72:69:ee:21:98:9f:9b:07:
22:56:86:42:5b:72:13:fa:bd:c2:57:10:a8:6c:23:67:f0:3a:
b5:9d:7c:c0:b2:a7:0e:ab:57:fd:ee:71:0f:48:29:58:cc:8d:
e6:2c:2f:30:5a:0d:44:ac:ca:68:8b:64:dd:11:d6:c0:3e:d0:
f1:47:24:7f:1e:45:73:08:ae:40:95:4a:1f:2a:6e:4e:e9:44:
0c:d0:5a:df:8c:84:30:f5:89:de:c8:7c:e2:d0:2b:6f:a9:73:
70:d7:ba:ea:29:9d:e3:76:97:41:66:9d:b0:e3:0f:8e:3b:99:
9a:5c:10:8f:de:0e:f0:52:51:c7:3c:16:11:e9:93:a7:7a:09:
d6:fa:38:70:8a:d0:b8:fb:27:b3:72:3f:e1:6f:50:c7:da:e7:
29:bf:eb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:19 2025 by rpki-client