Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0da5a72-30bc-4fe1-be6d-93a59224fc90.roa
File: e0da5a72-30bc-4fe1-be6d-93a59224fc90.roa (raw, json)
Hash identifier: dkcV7XMcsvtF9df80QiDe7wfK3UyOHYUs7HoT7y+A4k=
Subject key identifier: C9:7A:B4:9A:2A:70:3A:E9:89:E2:49:A3:CD:53:6F:59:B4:AB:A9:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5488062A82A6E7ADE978CEF82057E17D56BFC542
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0da5a72-30bc-4fe1-be6d-93a59224fc90.roa
Signing time: Wed 15 Oct 2025 15:52:04 +0000
ROA not before: Wed 15 Oct 2025 15:52:04 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:88:06:2a:82:a6:e7:ad:e9:78:ce:f8:20:57:e1:7d:56:bf:c5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:52:04 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=4ac3bde1982376f42c2204f0cbb19f218154f15660e899c3f10c5dc684314dde, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:65:a9:ec:5f:6a:fd:47:07:59:12:2b:83:72:
b9:d4:2d:2b:b5:3f:79:79:8b:0e:2c:62:24:61:4a:
bf:fb:c6:af:e7:51:0d:34:5a:28:98:fc:44:a2:93:
60:37:00:9e:9c:a7:54:64:2a:87:a4:f1:73:06:4d:
12:84:b4:cc:5a:b8:74:7a:1a:20:15:b6:64:8a:2c:
07:72:f6:ea:24:89:4d:0c:9e:95:eb:93:51:01:4f:
b6:e5:9d:29:ca:59:1f:b1:e8:ab:ac:38:7f:11:4d:
60:fa:8b:52:c3:32:84:ce:09:e7:3d:8a:02:c3:41:
67:e4:f3:e6:5e:e4:4e:8f:cc:db:75:42:2d:2a:d3:
e5:7f:59:1f:bf:e2:45:9e:6a:f8:66:ee:de:4a:e4:
c8:41:28:7d:7f:f8:f1:51:62:fe:1e:03:79:97:79:
00:b8:57:54:95:5c:13:e2:ec:ab:c7:08:77:2a:49:
51:37:0b:82:79:99:94:bf:2e:30:35:20:c8:7f:96:
3d:ce:be:b4:c2:92:c6:2e:fa:e9:b0:01:cf:75:6a:
50:48:04:b6:06:f2:b5:bf:34:6d:3b:69:cf:93:fd:
29:e8:49:25:a6:76:00:5e:d3:67:8e:df:1a:1e:c2:
37:0b:83:b5:b3:92:25:b3:7f:f8:45:1b:d3:bc:db:
2b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7A:B4:9A:2A:70:3A:E9:89:E2:49:A3:CD:53:6F:59:B4:AB:A9:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0da5a72-30bc-4fe1-be6d-93a59224fc90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.12.0/24
Signature Algorithm: sha256WithRSAEncryption
55:7f:19:04:22:a1:e3:29:17:e5:87:31:43:91:31:11:ae:12:
2a:ed:70:3b:a1:b7:fb:3f:35:cd:37:09:ab:8a:97:0c:15:e7:
bb:c4:4d:f6:d9:a2:28:c1:18:ba:39:e7:c3:f3:dc:b6:fe:80:
43:b4:f9:f9:2a:2d:d5:89:6e:3f:c9:29:68:9b:a1:7a:1e:c8:
2c:7d:7a:04:9f:38:e1:f9:3c:df:87:84:a5:22:db:dd:2d:ae:
09:2f:76:88:28:69:a1:6d:04:30:73:9e:81:f2:2a:51:ef:20:
9b:1c:4f:25:c8:46:bb:6d:0c:ac:b8:b5:a5:1c:f2:8c:28:51:
05:8c:cf:85:26:e0:12:2f:db:2e:36:28:b5:58:7c:3e:54:b2:
0e:8f:af:20:16:59:ee:fd:7f:cf:c8:f8:0e:9a:1f:44:fb:62:
cc:e3:da:e3:12:03:10:fa:d4:34:6f:b1:7e:78:6f:72:3a:d0:
45:06:5a:9e:f1:ea:71:69:85:32:ff:5c:8d:c8:83:5d:46:92:
71:82:e6:82:90:c8:4e:4d:54:fc:fb:69:70:45:26:33:21:19:
b9:f1:11:ea:df:9d:d3:e4:e9:16:da:1d:ee:6f:97:37:3d:3b:
ef:82:0e:fe:78:6a:d9:8f:1c:67:71:03:32:59:82:36:a1:7a:
b6:99:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:41 2025 by rpki-client