Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8ce5464-a844-44f2-a0b4-18814a1cdb22.roa
File: e8ce5464-a844-44f2-a0b4-18814a1cdb22.roa (raw, json)
Hash identifier: Rh7tjVZxA71SJlV9qk8wi/YHufsQop/vsxGDfCNvMSc=
Subject key identifier: 7C:8B:3F:A0:E6:41:A8:32:DA:02:35:C9:EA:70:AD:D0:6E:88:EC:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 130A91CFB6663F08DABE422B43486F368C999B0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8ce5464-a844-44f2-a0b4-18814a1cdb22.roa
Signing time: Tue 14 Oct 2025 22:40:22 +0000
ROA not before: Tue 14 Oct 2025 22:40:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:0a:91:cf:b6:66:3f:08:da:be:42:2b:43:48:6f:36:8c:99:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:40:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9bc38ad88a2b2ba69c7ce3c17ab764ae026eeb058127683b0d52c34a724ca099, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:8a:3b:72:66:18:bd:54:8c:a7:c2:e7:dc:
34:b0:90:a8:dd:15:a4:61:eb:53:b2:c9:d9:cf:25:
e7:5b:86:ba:be:52:b5:ed:66:c8:05:c0:2b:75:b1:
fb:be:5b:a1:09:60:46:61:84:47:99:ed:e1:2e:28:
ce:ea:5a:ff:a5:3c:7f:31:5c:5c:1b:c5:e3:be:5e:
9f:a3:8b:7c:51:6b:1f:4e:21:ad:f1:8a:e8:b1:de:
5d:4b:2b:47:6b:62:ad:ef:68:79:b1:80:bf:49:4c:
3d:95:17:c8:7e:ef:9c:f3:f9:67:7e:c1:51:48:42:
f6:e0:d3:e3:91:b1:66:2c:f7:a7:ac:df:5a:d6:71:
4c:1f:a7:c2:75:09:e5:8c:fe:31:ba:a9:41:ce:55:
f5:28:d1:02:7d:dc:c3:29:02:d1:49:db:cb:78:85:
7b:7a:5d:1a:ec:ef:f0:f8:55:18:3c:58:50:6f:37:
53:8f:9a:6e:e2:52:91:ec:c0:c5:fe:6b:72:11:3c:
ee:11:9d:ae:da:67:01:64:fd:9d:d9:1d:7e:55:1f:
ba:ff:3a:a2:47:ac:21:46:95:9a:a3:99:0d:a1:f9:
1c:08:16:5f:d3:cc:85:f2:db:bf:ee:c7:a2:6d:20:
70:2a:ff:cf:6c:4e:05:a0:0f:53:38:9c:73:29:42:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8B:3F:A0:E6:41:A8:32:DA:02:35:C9:EA:70:AD:D0:6E:88:EC:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8ce5464-a844-44f2-a0b4-18814a1cdb22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
c2:24:13:46:4c:77:98:e7:ed:b8:1f:c5:ca:ef:31:af:f0:f0:
b4:b6:aa:90:ad:1b:a1:04:a6:32:dd:6b:6d:02:4f:59:72:b2:
ca:19:72:b6:95:16:0e:05:c6:60:dc:3d:e9:37:71:25:ac:b5:
df:a6:d2:f6:ac:c4:cc:ba:9f:9e:c2:ae:d4:e0:0c:f9:8a:89:
cf:c6:62:94:a3:99:8e:ab:5d:b0:2b:64:b3:c8:c6:5d:ba:5a:
bd:86:e6:13:12:a4:0b:06:84:84:ac:56:df:00:5f:92:19:60:
c0:44:2e:03:ce:13:d1:91:6a:b0:06:cd:04:96:b5:3c:d0:bd:
39:46:28:1e:e9:e6:58:4d:52:83:57:5f:c7:5e:c3:46:7d:e4:
bb:55:f6:49:d1:df:88:79:09:78:35:e1:2a:c5:d3:b5:8b:7d:
af:34:48:2e:9b:a9:b7:9a:88:30:5e:c3:fa:a5:cc:65:53:89:
5f:45:eb:81:bd:63:da:c8:34:82:6c:d1:9e:d4:da:e8:42:4c:
ee:de:12:18:35:1b:5b:7e:7f:1d:24:73:e5:8b:bd:f8:40:53:
6a:db:fd:7a:b7:b7:4f:c1:8f:79:0c:4e:a3:57:ee:aa:d4:0f:
f4:e9:d3:3d:48:0a:96:bd:9b:2b:02:8d:56:74:18:5c:35:d0:
0d:1d:10:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:18 2025 by rpki-client