Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7d5a8aa-e82c-4a60-82b2-377f2cdd4e0a.roa
File: d7d5a8aa-e82c-4a60-82b2-377f2cdd4e0a.roa (raw, json)
Hash identifier: 4ZLz+lQs5awy3YVrIKqcvjpC3fWLo3NyIj7yTRa+z0k=
Subject key identifier: 15:AD:77:7E:1C:74:4D:B4:C6:7D:8B:BE:8F:45:54:DF:4C:3C:65:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24DA9C2C3862D0512C45A2AFA56991CA72AA66C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7d5a8aa-e82c-4a60-82b2-377f2cdd4e0a.roa
Signing time: Wed 15 Oct 2025 17:38:32 +0000
ROA not before: Wed 15 Oct 2025 17:38:32 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:da:9c:2c:38:62:d0:51:2c:45:a2:af:a5:69:91:ca:72:aa:66:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:38:32 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=5bf3cee4abb783ca4511add60df0baa0835ac1c4f77dad931f43ed2849630261, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:b9:3d:8a:48:da:b8:eb:01:0b:83:7a:c8:
e8:42:46:07:94:b1:89:4a:ed:cd:2d:5c:af:34:37:
88:28:99:6a:e0:e0:f9:5b:d4:45:e2:a1:13:3c:b4:
38:b8:10:6e:2c:4c:c5:92:f5:75:03:3f:1d:2b:b6:
9f:20:09:3d:a2:9b:3b:09:58:42:f6:93:b9:62:0c:
d2:55:95:e0:25:1e:35:a3:d5:5e:cd:6a:c9:60:e4:
d8:43:80:0d:46:9b:59:f2:7a:26:1a:d8:33:c9:1b:
54:0d:2f:09:0b:1b:65:29:db:04:dc:08:b8:79:0d:
02:f0:ff:9e:5f:b3:f3:24:60:f8:a8:df:98:59:b9:
07:49:a0:85:b1:63:dd:23:b9:c6:26:eb:0a:77:b6:
21:91:ea:20:a8:bf:36:37:55:f8:00:a9:7a:56:31:
cb:c6:62:99:2b:73:a7:c5:9f:1b:fe:db:31:44:50:
ee:f4:c2:79:6e:46:44:b2:7e:78:65:c5:38:85:59:
e8:a9:76:38:b5:82:3b:1d:f9:db:6a:b3:e2:f9:c4:
3e:42:34:00:27:57:30:a0:15:55:b7:d3:c5:49:cc:
96:b1:d2:b0:8e:98:b9:06:ce:3d:10:cd:bd:84:9a:
d9:45:4a:6f:0f:6f:43:25:94:03:20:5d:51:f1:50:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:77:7E:1C:74:4D:B4:C6:7D:8B:BE:8F:45:54:DF:4C:3C:65:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d7d5a8aa-e82c-4a60-82b2-377f2cdd4e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.183.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:de:ea:5e:ac:23:15:a3:98:96:81:3d:ca:bc:aa:a7:39:c5:
aa:ac:97:9b:16:74:da:b9:d2:ba:db:39:9f:6c:c8:18:44:c4:
68:ca:2e:e5:2c:85:4d:9e:07:a4:79:7b:24:21:07:25:2f:f5:
01:fe:4c:09:33:4c:3d:c6:bb:34:1d:af:7d:7e:33:e9:eb:e9:
62:0d:79:da:7f:3e:74:b8:37:de:cb:0d:6b:47:93:85:ad:52:
34:f7:07:28:6f:29:27:c4:9d:51:04:05:2c:56:1c:4c:11:d2:
ad:f2:ea:80:7f:96:0d:21:44:48:f2:d8:18:7f:e4:f4:50:c3:
63:ad:4c:f0:44:5e:76:19:00:63:b3:13:24:76:dd:17:40:c3:
b6:40:2b:ae:eb:0c:11:1d:59:8b:ba:f8:34:29:e7:89:2c:d7:
3f:10:de:18:4d:25:76:8c:9b:1d:44:09:fa:00:0a:66:20:75:
33:d4:34:26:17:13:fd:4c:ce:62:e9:c8:2a:b9:9e:a4:d8:d6:
71:16:2a:a3:f2:9b:3f:4f:f0:e6:46:9a:3c:e4:93:82:38:6d:
68:5b:ea:49:cf:b0:e4:7f:3c:83:c4:97:9a:61:e0:14:32:bc:
b6:c2:4c:f4:b8:f0:f5:ff:e2:62:ef:c4:1b:c3:f0:c0:3e:75:
6d:f7:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:22 2025 by rpki-client