Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b5da30-4c94-4417-a10c-61870d4f6bbf.roa
File: d9b5da30-4c94-4417-a10c-61870d4f6bbf.roa (raw, json)
Hash identifier: /E9bK4vcp/xSfB6C4XcvaRJmEaWBi7prio+V6qlrFko=
Subject key identifier: 8B:85:32:CD:3F:0A:02:52:1E:8D:7B:17:82:0E:9C:11:6F:5C:44:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30F23856DF00989740F000953D9EE7E3FA01BB9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b5da30-4c94-4417-a10c-61870d4f6bbf.roa
Signing time: Mon 06 Oct 2025 16:41:52 +0000
ROA not before: Mon 06 Oct 2025 16:41:52 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.151.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f2:38:56:df:00:98:97:40:f0:00:95:3d:9e:e7:e3:fa:01:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:41:52 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=254ee94d430a0fffbd8ed217d872407d9e67a1d8ce4c1459e0cb415a8609e3be, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:00:fa:8b:84:79:a4:91:6f:d8:36:b7:31:15:
2d:de:83:dd:fd:62:9d:09:de:05:56:f1:5b:6a:06:
34:0b:de:ed:5f:10:54:19:11:8a:24:fa:55:ac:7f:
89:9b:53:2d:4d:4e:1a:ca:44:c1:19:ba:c7:ac:f0:
0a:a7:11:49:61:eb:1b:d5:5b:b7:16:33:98:45:cf:
51:d1:fa:da:de:c5:1f:63:19:b7:04:c8:0d:fb:31:
11:14:47:8d:10:30:8d:3a:57:b5:c1:73:04:12:9e:
8f:af:74:a4:32:2f:1f:ea:7c:bc:87:68:e1:e8:fa:
23:ff:fe:c8:67:43:8a:ba:97:fa:26:5e:af:d8:4e:
10:a3:b0:f0:a3:1b:d8:ca:91:ed:33:7d:62:dc:d2:
a5:ce:5a:b3:30:bb:02:cf:9c:24:1a:2a:70:6a:1c:
93:55:15:89:f8:b6:68:e9:ee:ac:4f:4b:9c:c2:0c:
e7:52:65:a8:eb:f8:2e:e6:75:d1:5e:dc:8e:84:e4:
0b:25:c2:d0:8b:c9:34:66:35:3d:d2:11:3a:e7:a3:
e6:73:2d:c1:4a:a0:a0:87:d5:0a:99:d2:43:9f:97:
bf:eb:d7:2f:f0:e9:60:89:36:07:a7:01:75:5a:ef:
e2:c0:d1:3c:67:2e:2f:36:13:37:0c:ce:ca:14:71:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:85:32:CD:3F:0A:02:52:1E:8D:7B:17:82:0E:9C:11:6F:5C:44:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9b5da30-4c94-4417-a10c-61870d4f6bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:45:63:64:af:45:3c:ed:1d:bc:6b:25:12:ed:af:bb:eb:77:
f7:38:e5:29:c6:08:5b:ab:59:08:53:44:86:11:72:de:2a:99:
a0:6f:b1:02:9b:8d:e0:c8:e0:ee:f0:33:29:b3:84:e0:5f:2c:
73:aa:78:8b:ea:cf:08:27:8b:81:10:f1:25:0e:87:29:e9:de:
bb:9b:f2:b0:e9:5b:f9:84:d5:9f:d6:ac:57:af:af:f0:e1:2b:
c7:3b:ed:d3:bb:9a:1f:77:de:d2:49:70:8d:29:3e:88:0f:0d:
c2:fc:8c:59:e4:62:91:51:65:ee:29:34:39:82:67:76:f7:16:
8d:5c:13:45:ff:ed:17:52:f5:ef:1b:33:5e:2f:e9:24:47:32:
17:82:db:ef:7f:07:88:e4:79:1f:70:ae:94:3a:f9:58:a7:c6:
a1:f9:b4:03:b3:52:a0:27:9d:a5:d3:33:0c:cb:cb:37:d6:09:
21:fe:d2:50:64:02:10:df:cf:61:aa:e4:52:7d:4e:99:d8:ff:
da:58:d9:31:78:19:f5:ff:79:4f:3c:97:b4:af:41:4a:63:4d:
1c:86:2a:6e:41:4b:a8:18:6d:bd:00:47:19:06:b8:8e:99:d2:
17:ab:58:5b:13:56:11:84:6a:55:33:9f:70:db:c2:04:50:45:
af:8a:9c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:03 2025 by rpki-client