Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bee7c-f3fd-427b-aeb2-3422b4e8498d.roa
File: d81bee7c-f3fd-427b-aeb2-3422b4e8498d.roa (raw, json)
Hash identifier: M/zxkoT2Xx05k8ANFSQhA0Q4VbLZrpkOj5ez9mKd8no=
Subject key identifier: 69:F2:E5:9A:E0:D9:88:60:7F:2F:E5:A8:50:B0:4A:46:A4:2C:22:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10503E595EBC872BC240CF5BBD5D8512FDB8BC6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bee7c-f3fd-427b-aeb2-3422b4e8498d.roa
Signing time: Tue 14 Oct 2025 23:38:47 +0000
ROA not before: Tue 14 Oct 2025 23:38:47 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:50:3e:59:5e:bc:87:2b:c2:40:cf:5b:bd:5d:85:12:fd:b8:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:38:47 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=de6a07e7619391af9c9e67ccdf9ef1f6bbfe02570014accdbd90348d57dd2f89, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:a3:d0:28:2b:8d:4a:3d:18:49:0c:5c:cf:
88:c0:7c:75:47:63:cc:23:e6:21:40:fd:48:f5:78:
06:cf:1f:96:27:c1:f8:ff:5c:57:fd:f8:ba:4b:83:
fb:35:5b:41:8a:77:34:a6:c7:c3:99:92:15:42:14:
2d:19:ca:36:9f:28:6a:d1:97:4c:1f:3c:fb:13:55:
50:e9:f7:83:28:cc:10:28:a9:01:23:94:57:f3:e2:
1e:dc:d6:70:99:26:2c:70:f8:b7:30:34:1c:b0:e8:
ab:41:55:0b:a9:34:53:67:d8:a0:3a:5b:73:b6:d8:
c9:79:b9:a9:26:8f:82:93:f6:55:e6:c2:f4:dd:0e:
13:2f:e1:e9:09:de:71:39:c7:a6:74:90:8e:06:1a:
3c:be:79:10:0b:7e:ce:9b:19:c8:4e:c4:b7:6e:f1:
c6:d8:70:e3:c8:55:c4:98:83:a9:57:5b:fe:b5:d6:
96:d0:e7:74:49:75:d4:bc:c1:2f:d1:1c:80:86:68:
36:6a:41:79:30:7f:34:c7:0b:08:e9:15:fe:eb:1d:
7c:d1:d1:17:5a:f8:e4:9d:be:35:36:87:e9:79:dc:
55:f6:42:9d:c9:6b:8a:00:70:c7:cf:d2:0b:48:29:
2f:75:16:81:7e:1e:29:3d:06:f2:31:7a:1a:fe:07:
4c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F2:E5:9A:E0:D9:88:60:7F:2F:E5:A8:50:B0:4A:46:A4:2C:22:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81bee7c-f3fd-427b-aeb2-3422b4e8498d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.109.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f5:5f:90:0f:08:1a:fc:61:cc:67:9d:73:ca:02:c6:62:70:
80:18:07:22:da:5c:54:4a:4d:56:f6:8a:21:15:d6:c1:1f:be:
7f:b4:63:c4:18:3d:8d:60:9b:d1:bd:a0:60:a6:ca:3c:c4:16:
54:bf:37:ac:0c:98:df:c3:cf:d1:7c:ea:a7:89:5b:36:2c:9b:
2f:0a:07:bc:55:c5:9b:c1:31:31:de:3d:c0:80:cc:d7:87:93:
0f:bd:04:69:2a:f1:50:54:7c:4a:1c:dc:77:1c:2c:18:29:cd:
20:05:3e:a3:c0:4d:37:cf:f3:63:0f:f2:a3:6f:e9:ca:d1:06:
6c:26:c1:ab:2e:95:96:84:d0:b1:47:c0:d0:5d:3e:6e:61:73:
7e:ed:b1:69:6b:20:ad:b7:b3:17:3a:a6:3a:79:b9:5b:d6:1b:
d5:5c:e4:a4:29:eb:80:0a:4a:fa:fb:c2:61:a1:83:c3:45:29:
5f:e8:06:42:75:af:57:ba:4b:aa:6b:82:1d:ea:25:b1:12:1c:
f1:87:08:63:f4:de:44:87:be:32:3c:b6:21:22:3f:4c:27:aa:
57:70:41:d6:8a:c6:c7:ab:1b:4c:3e:86:dc:6b:32:15:7e:87:
c4:1f:07:e6:d7:d2:9a:65:d2:d8:36:e3:04:3c:53:e2:2b:b3:
3a:7f:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:04 2025 by rpki-client