Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92f08fa-ac4f-4e8a-9eda-ce6b02fe04b2.roa
File: e92f08fa-ac4f-4e8a-9eda-ce6b02fe04b2.roa (raw, json)
Hash identifier: kteLsrahbkCz919iHd6t693ntFf7zGE224Q90FV+J+I=
Subject key identifier: 70:3C:8D:0D:1A:E9:65:6E:C5:28:6C:2D:9B:91:68:E8:48:F6:6E:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1272F351FC65056637DAAC5DD1EFD9C126B40C83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92f08fa-ac4f-4e8a-9eda-ce6b02fe04b2.roa
Signing time: Tue 14 Oct 2025 19:13:02 +0000
ROA not before: Tue 14 Oct 2025 19:13:02 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:72:f3:51:fc:65:05:66:37:da:ac:5d:d1:ef:d9:c1:26:b4:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:13:02 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=aacf45cd836a783f8578c37b5525e87399ba6a25c507053067aef4b3672ebf48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:95:43:94:3b:4d:04:66:97:78:4e:4f:02:
04:9e:b8:aa:1c:a4:b3:d3:27:0a:ef:87:4e:a5:5f:
fa:b4:7a:61:9c:0c:1b:28:8f:9a:82:8e:9e:0c:27:
0f:24:07:0b:9c:cd:6a:c6:3a:92:a1:c8:d4:72:40:
cf:6b:de:7f:e4:2a:26:13:34:cd:8e:4e:17:88:ce:
59:e6:8e:7d:eb:cd:59:fe:c4:d4:20:83:4a:7f:22:
ee:2e:24:ab:ee:05:79:ec:43:4b:d2:7d:60:52:7b:
e5:d5:1b:44:9d:ad:e9:05:d2:03:de:28:b2:45:9a:
31:26:d9:a2:57:28:eb:64:6f:41:f3:56:67:a9:b9:
9a:03:34:04:6c:47:2d:16:fb:8f:15:39:97:73:09:
8f:27:9a:74:63:85:a3:27:41:79:42:1b:08:42:73:
71:89:68:7a:f4:08:a4:2e:d9:cc:44:02:bd:ec:c4:
a8:65:d0:14:7f:0a:79:88:d2:d4:5b:72:c2:39:bb:
09:b5:df:31:14:0a:3c:23:a4:2e:b0:fc:38:2d:ed:
c7:a5:91:6f:8b:70:6b:f5:cf:29:99:79:39:8d:42:
78:9a:03:fc:f7:2c:51:24:a5:cb:42:5d:e7:23:56:
8c:ab:ec:af:21:63:5c:ad:5a:f3:d6:43:17:98:08:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3C:8D:0D:1A:E9:65:6E:C5:28:6C:2D:9B:91:68:E8:48:F6:6E:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92f08fa-ac4f-4e8a-9eda-ce6b02fe04b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.44.0/24
Signature Algorithm: sha256WithRSAEncryption
84:a6:48:91:5b:e7:a9:47:35:9b:a1:44:ab:19:27:35:67:3d:
15:e3:2e:31:5a:c9:cf:3f:ad:95:2d:f6:57:6c:81:32:fc:77:
c7:17:e3:90:1a:3d:b2:c2:6f:6d:c2:49:1f:79:e5:2e:9b:50:
05:41:8d:4f:ec:83:18:3f:8d:90:f9:04:76:2f:29:76:7d:53:
19:81:2a:38:83:10:65:fd:56:65:31:e9:9d:a0:57:0e:b2:cc:
ae:d1:3c:be:a8:d4:1b:c6:2c:86:f2:9a:92:07:4c:72:60:a5:
a2:c5:da:a4:f4:a7:40:a2:80:0f:51:7e:33:e0:b1:25:f7:39:
30:56:3d:28:24:da:66:91:99:ad:d3:48:fd:df:96:a2:84:54:
0d:89:53:a7:5f:eb:b2:d7:59:c8:58:9a:ed:ce:73:ce:d9:98:
27:db:cd:19:a8:79:b5:ae:58:e3:b6:3b:09:30:89:e0:07:73:
de:61:c0:6a:a9:f3:20:d1:08:42:8a:3d:07:f5:d4:6e:24:f5:
76:01:35:74:e2:21:50:8c:82:68:5a:38:b0:41:f2:de:8f:fd:
04:38:09:e5:b6:06:f3:52:3b:f0:1e:50:e4:8f:83:ee:c7:f1:
f1:e2:d9:bf:62:5b:a1:7f:0b:ea:c5:29:d1:36:0d:60:dc:fb:
71:25:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:15 2025 by rpki-client