Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef553ad8-e21e-4e4a-9e15-59e2ad083a7c.roa
File: ef553ad8-e21e-4e4a-9e15-59e2ad083a7c.roa (raw, json)
Hash identifier: 9v5Wmq58I8PcSiZO/6g79DwcUX7StclGmkKKKuFE63Q=
Subject key identifier: 82:F0:19:59:FA:E6:4F:BB:73:C3:2D:C3:87:BC:3D:7C:3A:53:42:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55657955754C6CC04979FC76DAC5C6BE7ACD7DA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef553ad8-e21e-4e4a-9e15-59e2ad083a7c.roa
Signing time: Tue 14 Oct 2025 22:11:16 +0000
ROA not before: Tue 14 Oct 2025 22:11:16 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:65:79:55:75:4c:6c:c0:49:79:fc:76:da:c5:c6:be:7a:cd:7d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:11:16 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=979ef73dd04bc8e0b5343fe07988409de79aed0bb67c942d3104ff85f701ea48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:86:3d:a9:20:a3:5b:ab:6b:29:00:fa:bd:
b8:3c:ca:c8:30:8b:e8:94:8e:da:dd:fc:ee:13:31:
79:a2:c3:9e:15:80:da:d4:ab:3b:23:b1:3b:57:ce:
5d:a5:2a:a0:3f:36:0c:2c:3c:86:95:15:a2:de:08:
75:3c:87:47:e8:63:b3:ae:28:98:0c:15:79:5e:8c:
d7:3d:0b:eb:57:26:05:ef:2a:6e:f5:1e:80:74:90:
23:99:46:76:1b:46:de:fa:67:70:46:32:c8:45:1d:
02:d7:1c:52:ba:a2:67:db:c0:be:6e:bf:60:81:2a:
fc:93:a6:09:97:18:da:14:ce:8b:5e:9b:0e:5d:e1:
08:9e:7b:bc:c3:d8:a8:4c:94:70:3a:a4:7f:56:34:
60:d1:2c:7e:4f:44:90:5e:7c:09:97:c0:e8:88:d5:
22:b6:19:f8:9d:de:8b:6c:77:60:2c:d6:92:b2:1f:
f3:54:5e:0c:7e:bc:17:4e:eb:cd:5a:71:db:96:17:
31:73:d8:07:dd:9b:14:e3:c9:d1:a7:bb:b7:b1:2c:
13:64:c8:b7:8c:b3:c3:04:6d:40:53:2c:2f:0a:04:
56:48:4f:82:c0:89:5d:f9:2f:4a:8e:38:fa:73:a0:
2f:37:10:f2:4e:a0:45:c0:ce:13:62:3c:e6:2e:8d:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F0:19:59:FA:E6:4F:BB:73:C3:2D:C3:87:BC:3D:7C:3A:53:42:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef553ad8-e21e-4e4a-9e15-59e2ad083a7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.128.0/20
Signature Algorithm: sha256WithRSAEncryption
31:3a:78:0c:02:ef:0f:37:4f:4f:fe:03:7d:b0:b6:e0:4b:eb:
58:f6:c5:a0:00:cb:9c:73:14:65:2e:b4:e6:2f:41:94:ef:21:
37:6b:b5:7e:ec:d5:91:46:fa:d7:34:90:b1:89:ec:69:01:a4:
29:c2:c2:31:3d:34:0f:1e:8f:9c:0d:41:30:17:f1:0f:79:ba:
7b:64:f8:58:7f:c8:61:31:6c:a8:b0:80:d5:58:f8:1d:a8:35:
20:53:b5:af:9b:af:92:30:ab:a1:8d:09:c4:4f:78:0f:f4:cc:
d4:9f:fa:94:cd:a5:4c:2e:87:25:93:98:f5:8e:76:55:14:44:
2e:71:df:37:c3:29:80:c2:13:b4:28:57:5b:61:cd:f3:9e:10:
8c:b3:7a:1e:8e:8f:d0:04:df:76:03:e0:23:2e:4d:b4:26:0c:
f8:c3:51:31:61:e5:7d:a3:f1:73:d2:3d:00:1f:ea:75:5e:2f:
20:04:36:3b:40:ef:d0:59:08:2d:ae:ae:21:25:eb:c1:d8:f6:
4f:39:c1:99:89:7f:7e:20:d2:a0:85:31:cb:85:52:a5:d4:96:
04:51:8d:25:58:10:00:6c:97:7d:ea:7e:44:c4:50:73:77:5e:
e6:39:0b:65:20:45:f3:f0:a1:ab:be:69:90:e9:43:d2:5b:50:
6c:86:2a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:11 2025 by rpki-client