Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcdeb7d4-8fcf-415c-be46-7751ea280729.roa
File: dcdeb7d4-8fcf-415c-be46-7751ea280729.roa (raw, json)
Hash identifier: 3vx/6GTafErRUE353hMpWX5YqPH58SnYZqYBn0iS5uA=
Subject key identifier: 50:78:16:18:81:E0:EA:6B:CB:7A:7D:67:A3:C7:C0:BE:90:5B:BB:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61132DCC391118B12E8627929A8E5AD549B8264B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcdeb7d4-8fcf-415c-be46-7751ea280729.roa
Signing time: Tue 14 Oct 2025 20:01:09 +0000
ROA not before: Tue 14 Oct 2025 20:01:09 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:13:2d:cc:39:11:18:b1:2e:86:27:92:9a:8e:5a:d5:49:b8:26:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:01:09 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=89361464cef69a267250168722f048be822b092d49d0959c9fe0c1dfd64dbd14, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:3e:ea:7c:a5:52:15:41:7a:b2:df:c6:8c:
65:5a:97:34:1d:ef:1f:cb:da:92:5f:07:58:08:1b:
a7:80:91:88:d7:30:fa:fb:1d:ee:e5:b3:b6:cc:2c:
c3:86:c6:99:97:52:96:94:b7:e3:b8:7f:41:0e:09:
a5:ec:46:3a:ce:3f:f8:a2:e3:1c:5c:32:34:ce:aa:
aa:ff:f9:a5:a7:48:85:2d:44:fc:75:0b:aa:ac:53:
e9:34:2d:0a:ee:42:e9:d9:92:55:72:de:4a:0d:e0:
6a:c0:1c:49:bc:de:55:a3:55:42:3d:f5:90:38:cd:
8b:28:b1:10:79:f9:bb:9a:8d:88:8a:51:65:26:99:
da:38:d1:bf:09:fc:70:e3:ad:35:87:45:a7:ac:9c:
d3:7d:d8:26:49:2e:26:36:23:98:f9:79:83:33:04:
ba:4b:63:0e:87:8e:f2:78:47:9b:93:e5:e2:cd:78:
bd:8e:b4:9c:e7:e1:9e:2d:20:65:98:88:61:8a:a2:
b8:f2:6d:b2:65:cf:31:87:b2:bf:1e:6f:47:34:a3:
47:92:71:95:1a:5d:9d:19:32:85:8b:f4:dd:1c:71:
51:36:04:2d:5a:51:ba:64:a0:8c:50:cc:47:4b:06:
75:4e:e3:a9:2f:11:f6:11:40:6d:49:3f:34:c0:8c:
97:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:16:18:81:E0:EA:6B:CB:7A:7D:67:A3:C7:C0:BE:90:5B:BB:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dcdeb7d4-8fcf-415c-be46-7751ea280729.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:8f:e2:c5:8d:c8:a7:6e:5c:1f:3e:5a:47:cd:e3:8b:5f:79:
c9:34:a3:5e:38:87:5b:eb:46:33:8e:c7:4b:36:93:a3:c0:57:
51:00:ab:e3:5d:0f:bc:ee:48:1b:3f:12:10:0f:e9:56:b1:4c:
8c:55:c3:87:0b:d7:fd:6f:a0:3d:bf:75:1f:db:8e:81:dc:08:
ab:16:3a:5b:88:a7:cf:df:15:23:4f:cb:5b:f4:38:81:47:07:
1a:8a:61:16:97:2e:e9:3b:9e:10:f7:16:64:97:a2:c0:61:ec:
5a:9e:e0:7b:f7:7c:d1:8a:d5:a4:4a:54:5a:6b:78:9c:31:04:
a5:27:a1:37:9f:ca:86:25:d0:9e:54:7a:d1:90:0d:34:6e:9b:
76:90:e5:b1:e4:b2:4f:2d:bd:6a:81:18:73:9d:be:ed:99:20:
95:fa:d8:90:29:39:0e:81:c4:32:f3:03:84:a2:ae:7a:05:1e:
9b:e2:23:76:2e:b5:bd:51:f0:68:a1:0b:33:5f:0c:06:d1:c3:
90:a4:32:02:12:4d:be:5b:80:72:f7:0c:71:4c:52:41:0b:67:
d6:89:18:fc:46:a3:0d:7d:81:10:8a:59:4f:e2:76:81:e5:89:
03:0a:97:cb:a5:ab:b0:5a:70:8d:ad:08:9e:f6:16:6d:40:da:
4f:6d:88:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:24 2025 by rpki-client