Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de47f925-b0df-47aa-aef1-0bc298c7be43.roa
File: de47f925-b0df-47aa-aef1-0bc298c7be43.roa (raw, json)
Hash identifier: tRcYPkowE15tRfNibkYlW9FqJ76Vy2V0kAomSii55s4=
Subject key identifier: AC:C6:E8:60:7B:AA:CD:23:EF:06:C1:55:AE:3E:8A:F9:56:B9:8B:5E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37098088C51C64116099B0AA869CEF2F56520B3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de47f925-b0df-47aa-aef1-0bc298c7be43.roa
Signing time: Tue 14 Oct 2025 19:12:52 +0000
ROA not before: Tue 14 Oct 2025 19:12:52 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:09:80:88:c5:1c:64:11:60:99:b0:aa:86:9c:ef:2f:56:52:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:12:52 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=cc695dd339eccb784b34611bfeda30d729fb3b19a9491d16c551cf3e13a35ff0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:52:0d:c3:ec:d0:12:6b:23:59:75:c4:f1:
81:ae:8c:5f:6e:a0:ef:15:1c:1a:4b:0c:19:ac:2c:
61:e9:4c:f4:51:ac:05:ca:17:22:db:ed:fa:75:86:
a9:ee:9f:5a:d8:de:96:ee:54:7a:00:89:88:ca:88:
5f:71:5a:ed:09:5a:a0:c9:2c:7b:ce:20:2d:5e:a3:
8d:f7:72:3b:ca:60:d3:dc:03:25:1d:2f:6c:f2:a7:
d3:30:12:17:64:4f:9d:ec:9b:d5:ac:37:6b:66:85:
51:01:5c:e9:08:81:29:b9:31:57:66:90:e9:35:46:
7b:82:86:57:bb:14:4b:32:71:0b:44:68:f9:59:b8:
3d:9e:fa:2a:2c:80:e9:98:1f:a1:bd:cc:55:a1:e2:
53:74:35:c6:dd:23:6d:5f:23:6b:dc:1c:d5:d2:5c:
4e:57:31:f1:f3:03:c5:07:ed:75:2e:e4:3c:c2:86:
9d:d5:6b:98:67:2a:07:72:73:ec:f3:7d:84:3f:ca:
15:88:5f:7a:fa:01:6f:41:86:33:18:a0:a5:f9:6d:
a0:58:ae:db:0b:fb:d0:9e:4c:88:18:d5:5c:61:38:
57:30:ec:d9:e4:c1:b3:4e:51:b8:6c:90:6e:2a:80:
06:76:29:44:12:7a:0a:3c:ab:2c:4c:a9:56:31:a5:
77:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:E8:60:7B:AA:CD:23:EF:06:C1:55:AE:3E:8A:F9:56:B9:8B:5E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de47f925-b0df-47aa-aef1-0bc298c7be43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.127.0/24
Signature Algorithm: sha256WithRSAEncryption
93:51:0a:c0:aa:75:dc:a8:59:72:df:9b:d4:38:4f:3b:9c:11:
c6:08:03:0c:3e:55:9c:80:1d:06:19:93:da:71:a4:5f:43:57:
26:1c:c0:ac:83:6a:bf:a7:4e:65:35:a1:0f:eb:95:ea:04:9d:
c3:18:a5:56:b9:1f:87:3c:e1:1f:e6:70:32:97:74:0c:5f:ce:
3f:49:87:a8:5b:aa:d7:c8:74:ef:27:b5:0a:92:1d:8b:f4:8b:
4d:e5:8c:87:86:62:53:37:9f:7b:d7:42:3b:1d:e4:5b:0a:e0:
b9:f7:d9:2b:08:ac:56:b7:7a:b4:3d:52:bf:ce:6e:c7:44:14:
ef:e6:2c:ca:2b:a7:b1:72:b2:a2:9a:03:ce:46:cf:6a:81:1c:
a8:5f:ef:2d:e3:8c:6c:0f:2d:f8:2c:f6:21:e4:37:85:22:99:
c8:55:83:e9:15:ab:6d:3f:61:25:4d:92:45:d4:bb:ac:95:20:
e5:1a:6f:a9:91:49:cc:1d:db:59:60:23:b2:e5:11:8a:13:9f:
88:d3:43:dc:dd:c0:8f:2f:ef:82:98:7d:51:33:19:82:c3:66:
b2:72:fc:53:68:c6:00:27:38:59:36:ce:d1:f7:b8:b3:67:37:
25:2a:34:a0:b3:09:ef:38:b8:f5:f0:49:52:3b:48:0a:ae:38:
1b:73:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:47 2025 by rpki-client