Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecaeda8d-97dc-4b1e-a693-cde5e7d612f6.roa
File: ecaeda8d-97dc-4b1e-a693-cde5e7d612f6.roa (raw, json)
Hash identifier: /y0KT6PH4y36dBYSAK1CvL50z1NV+ogagPCGCKbdfTc=
Subject key identifier: FF:F5:53:87:F2:C6:D4:12:23:7E:07:FB:8B:E7:F5:89:AE:FB:5D:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7424034AC9D1CF9EA8724E403486951EE71BEEC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecaeda8d-97dc-4b1e-a693-cde5e7d612f6.roa
Signing time: Tue 14 Oct 2025 21:22:02 +0000
ROA not before: Tue 14 Oct 2025 21:22:02 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:24:03:4a:c9:d1:cf:9e:a8:72:4e:40:34:86:95:1e:e7:1b:ee:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:22:02 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9b2bc0ee1d8a8f18e6b3cd2ec035dd27344b4e8a945d828f44b7d26411349c22, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:da:15:98:7d:78:22:75:f1:8d:cc:a9:52:
93:d3:bd:91:26:34:e2:e2:81:f0:07:a5:26:f9:d8:
c6:7e:d8:90:d2:78:dd:1a:57:ab:63:41:ae:da:cb:
12:f5:4b:af:ab:64:36:f6:c7:3b:df:48:59:b7:78:
3e:43:29:eb:8d:c2:a3:83:78:6c:f7:4e:4a:79:8c:
9e:9f:c6:0b:94:2f:04:c5:c4:e2:ec:4e:65:53:4f:
f0:66:75:eb:44:1e:c8:a5:3a:96:f0:97:86:b0:22:
ad:e7:33:ae:f5:01:b4:09:b5:d8:06:c8:d3:e3:22:
c2:f0:cf:b9:40:af:14:4d:ad:ee:27:51:ca:6b:91:
26:d8:81:dd:b0:8f:f1:9c:18:05:0d:16:cb:20:56:
a6:8d:bc:b0:11:1c:88:8a:7f:09:9d:e8:55:2d:c0:
ac:9e:1c:8a:b3:ca:9f:f9:d6:6e:e6:74:31:56:e0:
ae:43:97:87:f7:b9:0b:b7:f0:f4:ac:49:c9:92:6e:
07:f8:71:ba:80:58:e4:a1:01:8c:39:2d:ad:cd:80:
ad:27:fb:e4:08:ce:72:92:55:a1:ff:f0:73:85:c5:
da:a2:59:2a:ba:63:27:31:d6:35:8e:d2:41:80:5a:
91:d7:0f:dc:9e:ad:66:5b:5d:15:8f:ec:e1:c2:2d:
1d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:53:87:F2:C6:D4:12:23:7E:07:FB:8B:E7:F5:89:AE:FB:5D:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ecaeda8d-97dc-4b1e-a693-cde5e7d612f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.238.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:f4:4b:80:e2:3b:56:56:e2:03:eb:3e:cc:15:ea:94:55:24:
7b:7d:cb:c1:63:ec:ea:2b:0c:dc:a6:d9:7b:42:13:74:14:31:
2c:2f:ac:00:20:07:1f:23:2d:bd:a3:ce:7f:68:8b:26:2d:71:
6c:50:0d:fd:b5:ac:00:51:e6:00:99:22:80:0e:e2:24:d2:19:
bf:9b:ee:41:fe:0d:c2:69:ad:09:26:07:21:68:bf:b2:6d:51:
65:14:0d:b1:24:65:dd:e9:89:b2:56:76:89:f8:74:88:b3:22:
d4:0b:5d:0f:92:c9:7e:16:d9:06:84:a1:dd:eb:73:ae:14:55:
63:ef:12:91:be:9a:68:dd:f9:23:de:55:66:e7:bc:56:57:98:
fa:19:be:49:60:f6:f2:c9:52:ae:11:8f:66:35:c4:a5:72:0d:
a8:4d:d0:b8:5d:77:88:40:0d:17:2b:5c:c5:fb:0f:4c:d7:d2:
81:f9:26:e5:5c:d7:49:88:ff:b3:24:a2:98:4d:cc:5f:89:ab:
55:12:99:1e:89:33:91:c0:50:05:97:ea:c4:78:09:5a:e3:f5:
90:b0:e3:b1:90:66:31:83:79:cf:91:30:6b:0d:99:78:62:d7:
5c:9d:47:7e:ac:da:60:83:cc:2a:ee:d3:7a:52:54:aa:75:4f:
0e:4b:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:50 2025 by rpki-client