Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee5fb41f-acdd-4d44-aa2f-730fe9195e28.roa
File: ee5fb41f-acdd-4d44-aa2f-730fe9195e28.roa (raw, json)
Hash identifier: jmGG8iyAatw9JegmfQ2qahGUNuopF1C7wenCoxzpsgg=
Subject key identifier: 00:77:2D:9B:C4:75:E0:2C:F1:AC:DC:29:B9:AD:88:B8:25:AF:FD:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77F707673FD4488F0685F4A0712492CEA03B8D72
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee5fb41f-acdd-4d44-aa2f-730fe9195e28.roa
Signing time: Tue 14 Oct 2025 22:01:18 +0000
ROA not before: Tue 14 Oct 2025 22:01:18 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:f7:07:67:3f:d4:48:8f:06:85:f4:a0:71:24:92:ce:a0:3b:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:01:18 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=43d4d3542f02ee74c81778a0cc4e18835dc11485b0469f158344641be6e81db8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0f:94:b1:99:aa:b2:b2:01:f3:47:f5:9b:aa:
35:1e:8b:9c:99:d6:54:e0:94:88:13:94:65:93:a2:
6c:3b:bd:82:f4:21:a3:6c:68:73:9f:1a:bf:e6:ff:
c9:c8:b0:a9:0c:6c:82:1b:2c:cf:1a:26:a5:0e:f3:
bc:0e:05:bb:03:de:e2:15:8f:d3:49:04:3a:96:2d:
03:d1:f2:32:22:c6:ca:67:f0:dc:fe:84:19:02:33:
db:ff:3d:84:b1:f7:7d:53:0d:46:30:3d:a6:1c:b8:
5c:6f:07:b4:54:1d:48:95:c8:ae:77:24:18:50:a1:
2c:45:79:26:17:01:0c:99:a0:65:a2:a1:be:dc:8a:
3b:71:aa:d7:b5:1d:37:fc:ad:96:2d:90:5e:19:d3:
28:b2:a9:9b:fd:db:0f:2c:a9:b6:c2:88:a9:57:3d:
03:56:33:46:23:59:2f:cc:dd:7d:cc:db:43:f6:bb:
03:55:a3:ec:45:57:cc:30:21:6d:30:11:22:ea:ef:
f8:be:ae:ac:ca:71:01:04:49:15:71:27:c4:aa:17:
4c:68:f5:03:02:ef:d4:8f:d5:6c:31:6b:d4:8a:47:
16:d0:1a:cb:35:d8:90:42:1d:57:30:d2:bc:c2:62:
aa:d2:ae:f0:14:8b:fb:ae:99:35:da:00:df:92:28:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:2D:9B:C4:75:E0:2C:F1:AC:DC:29:B9:AD:88:B8:25:AF:FD:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee5fb41f-acdd-4d44-aa2f-730fe9195e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.159.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:3e:33:ab:f0:bd:6e:b0:01:c8:50:b5:00:6c:48:18:e6:9d:
c2:54:76:91:c0:bd:d2:93:bb:12:01:20:c1:34:fe:51:99:41:
34:41:3e:44:04:7c:82:0a:08:75:60:2d:28:28:b2:2f:c1:b1:
ad:05:a1:b7:19:2e:40:a9:46:66:18:0f:de:0f:01:65:17:f2:
d2:a6:5d:0d:df:ad:c3:97:7d:f0:28:9e:5e:67:a8:f4:e4:83:
f4:3b:2a:2f:d4:51:b7:0d:b0:56:4a:4b:9b:3d:30:59:b0:3c:
96:78:57:57:ee:b0:23:b6:84:90:38:80:52:92:48:b3:5a:3e:
d7:3a:14:c8:8a:86:e8:b8:af:a3:9f:e3:65:4b:c0:10:1c:d1:
1d:88:6a:76:dc:2f:1b:c0:f0:a3:f5:42:98:c6:31:03:45:d0:
7f:60:0d:f7:e1:7d:95:5f:02:f3:d0:5c:95:10:c8:3e:e9:95:
23:e1:d3:a9:17:68:75:a8:ba:1e:98:da:12:40:e4:53:55:d6:
74:a3:26:ba:fb:1e:71:13:fe:f3:da:3e:b0:e9:43:07:42:1f:
90:c4:69:a8:38:68:49:00:61:b2:57:54:fd:3a:db:1d:dc:08:
24:72:e2:ac:e4:21:1f:52:73:6a:04:ea:3c:92:39:52:b6:72:
9a:b1:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:30 2025 by rpki-client