Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8118cde-5b09-472d-8f75-d22ab966a139.roa
File: e8118cde-5b09-472d-8f75-d22ab966a139.roa (raw, json)
Hash identifier: Ux58lx+XGri7de3F77IcRobHU/Sb6rs9Vm00XIgwKWE=
Subject key identifier: 53:A2:35:B2:C6:29:8F:2E:93:DB:4D:6E:71:6B:D8:D9:EF:76:40:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 437C4EB559837A4B222C99B0628BD33E7F7CE2B8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8118cde-5b09-472d-8f75-d22ab966a139.roa
Signing time: Tue 14 Oct 2025 23:13:01 +0000
ROA not before: Tue 14 Oct 2025 23:13:01 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:7c:4e:b5:59:83:7a:4b:22:2c:99:b0:62:8b:d3:3e:7f:7c:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:13:01 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fca51d12ebfb69bc051c1d56791acc99e4ef1980d40f99a9b342ee9147eb19d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:b6:77:16:69:03:73:8a:c8:53:12:b4:46:
90:e7:51:72:80:07:85:2f:e1:d0:dd:74:71:4a:46:
97:a1:1f:c1:39:3b:6c:6a:ef:f4:1a:f3:e6:b9:49:
40:01:39:17:39:d7:df:93:11:6c:f0:c5:4c:9d:0a:
ba:54:36:10:33:6b:61:b8:e1:cf:73:c4:03:f6:08:
ac:c0:36:72:9f:ed:09:03:c9:50:64:15:d7:ef:34:
ba:8c:3b:03:83:f6:9e:e7:55:1a:a5:95:6b:88:d2:
b1:a6:ab:90:2c:af:d0:ba:6c:01:29:b2:50:15:35:
b9:1e:fe:79:cb:f3:bc:18:6e:2d:ee:5d:7d:1d:72:
7c:a3:41:72:15:fe:97:eb:5d:98:77:f4:47:fa:4f:
e0:df:d1:b6:fb:d5:5d:28:b4:4a:f9:40:a4:6f:81:
b0:1a:74:e2:45:31:f7:9e:88:3c:73:e3:74:c5:3e:
bb:d3:01:ef:15:7b:87:bb:d9:48:d7:07:1a:48:86:
e0:28:68:b3:71:9f:7a:e0:2d:f8:62:76:34:b1:8e:
b8:6b:2f:1a:f4:6e:11:e5:bc:a2:38:26:ac:aa:59:
03:75:f6:26:95:2c:52:22:83:e6:62:4b:18:ca:95:
90:3b:c4:71:1d:51:72:da:9f:ea:fc:dc:c7:4b:93:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A2:35:B2:C6:29:8F:2E:93:DB:4D:6E:71:6B:D8:D9:EF:76:40:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8118cde-5b09-472d-8f75-d22ab966a139.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.218.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8f:a7:69:fc:03:60:ef:37:86:26:de:3d:7f:f4:6f:95:06:
ab:f7:e1:65:4e:89:d5:4c:68:d9:5d:65:96:c8:5a:68:be:c2:
c4:36:61:02:3d:0b:ca:15:f4:87:47:45:4d:5d:02:e8:7b:65:
79:99:04:6e:6f:0a:38:56:44:3d:89:5c:ed:aa:56:d0:59:2d:
65:01:ce:ca:bf:79:b5:86:03:60:57:8b:60:7d:35:05:1c:4f:
f4:7d:ed:d2:d0:ad:69:fe:b4:af:74:27:d7:5d:aa:1c:52:30:
ea:14:ca:c2:64:e1:b3:d0:8e:38:fb:fb:4d:6a:3b:88:26:b7:
9e:b2:1a:8d:7d:37:d9:76:f1:87:04:79:25:23:0b:42:86:e9:
b8:a5:1b:c9:31:17:fc:43:ed:7d:e0:b9:5f:81:06:cc:8d:17:
de:6a:b2:e3:27:18:a4:c2:02:e0:38:a2:ed:44:ad:29:8b:f3:
c2:aa:53:b1:b3:26:8b:3e:d7:61:ca:9f:45:7d:d8:e2:2d:de:
a9:ae:b0:47:94:5b:e7:ce:92:17:96:8e:a1:e2:22:de:42:0e:
18:71:cf:2d:81:a0:d7:d9:eb:2b:62:8d:e3:5c:8b:86:cd:e6:
34:04:e9:af:f0:c4:7f:b4:ff:cf:c0:ca:9a:95:c1:0f:db:00:
ba:10:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:39 2025 by rpki-client