Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de10a281-af99-45fc-9314-743d09c253b0.roa
File: de10a281-af99-45fc-9314-743d09c253b0.roa (raw, json)
Hash identifier: qebBK70To2a0zxtwm8PhJT6VzXgJeMtlyuxzrKofPUs=
Subject key identifier: 38:F0:23:D6:AB:61:1E:86:CB:2A:CE:D0:38:DC:0A:6B:79:7D:0A:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 03912609F37302AE90494B9FED666F57BEAD08FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de10a281-af99-45fc-9314-743d09c253b0.roa
Signing time: Wed 15 Oct 2025 17:12:16 +0000
ROA not before: Wed 15 Oct 2025 17:12:16 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:91:26:09:f3:73:02:ae:90:49:4b:9f:ed:66:6f:57:be:ad:08:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:12:16 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=f3935e604ddb7d3e48929c6cb56f765a20393b52bb768e204fcb6e7a2e72f16a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:eb:23:b3:50:d6:66:90:e9:1c:c2:2a:0e:0e:
45:95:63:88:49:89:27:4a:83:03:49:41:57:65:cf:
f4:06:2a:4f:0e:9e:61:66:07:c7:94:fe:c2:75:6b:
5b:c0:4e:f7:bd:69:c6:1b:f0:84:8a:66:a6:c5:c3:
d1:1a:43:7c:01:38:16:7b:60:ab:00:ea:cf:fe:19:
33:30:d5:73:41:a1:81:df:3d:d5:76:2c:00:98:44:
39:11:98:42:e8:24:55:b8:63:a4:39:f8:e1:ad:d4:
17:6b:24:81:7d:64:ca:85:7b:de:01:52:4a:9f:35:
e7:14:82:8b:94:11:57:96:b9:a1:ee:32:0d:f7:62:
d4:54:84:0f:d1:9c:67:1c:b4:66:52:cd:60:d6:e0:
7e:f7:7f:b6:b5:ab:40:fd:3e:ff:8d:dc:d8:01:5f:
94:22:c6:ea:9b:17:f7:79:32:87:36:20:a0:97:16:
dc:f0:dd:69:92:b1:73:91:40:f0:9c:01:16:8b:28:
31:ff:36:8a:54:89:bd:23:d2:03:eb:4d:4d:7f:d4:
38:e1:11:67:bb:fd:d6:32:a1:86:e2:f5:c0:eb:10:
a2:ea:89:1f:b1:eb:1a:56:ed:d2:55:10:8e:ab:0d:
38:e1:a0:25:45:7f:4d:10:3d:78:20:40:e0:51:64:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:23:D6:AB:61:1E:86:CB:2A:CE:D0:38:DC:0A:6B:79:7D:0A:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de10a281-af99-45fc-9314-743d09c253b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.250.0/24
Signature Algorithm: sha256WithRSAEncryption
77:74:59:d3:88:a4:3b:ca:60:96:3e:f5:1d:d0:29:3d:1d:4f:
46:e5:e7:d7:bf:be:0e:2a:2a:e4:ee:d9:f6:61:c9:01:b6:db:
dc:da:2f:09:24:e1:50:62:d3:73:6d:07:ab:73:2f:aa:ed:57:
83:0b:89:f2:45:7f:8c:91:3c:6f:3e:de:b5:96:6e:f4:0f:c4:
80:c6:22:26:19:7d:3b:2b:3f:f8:08:4d:c8:f3:94:af:51:24:
a8:de:f6:dd:cd:87:c7:10:cc:86:2c:75:a6:07:0a:3e:0a:6f:
03:99:41:6d:cb:f6:e7:a6:08:78:0a:ae:1f:de:fc:3b:eb:d4:
62:9b:82:b6:dd:cd:30:58:35:27:98:ad:4c:0e:87:87:44:79:
63:1a:1b:38:11:62:22:00:6a:50:c0:61:3f:2d:1e:e4:b7:a9:
d1:33:12:33:50:1f:3d:5b:8b:7d:88:1b:b5:8b:5a:c4:04:69:
69:50:81:0c:c1:23:a4:c9:f7:65:f4:ff:12:9e:9e:8d:0c:bb:
b4:fe:39:c9:2b:9c:26:b2:27:f4:20:48:59:f5:95:24:66:b1:
a1:15:13:7a:89:a0:e6:8c:bb:f9:76:28:1e:2e:44:28:e4:ce:
46:25:bb:ad:a2:cf:86:28:8d:d0:bc:7c:9b:7e:22:b1:1c:68:
31:69:bf:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:58 2025 by rpki-client