Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f84f2450-1659-40ab-9d65-03b638b71f7d.roa
File: f84f2450-1659-40ab-9d65-03b638b71f7d.roa (raw, json)
Hash identifier: 7mhM7SWd+PzwuujXt2+306bv5ZCAR1nvgB0tjLYQNaQ=
Subject key identifier: 9C:EA:57:39:BA:76:CB:48:46:45:DE:A7:C1:E0:32:A4:A2:52:50:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5927C5A17A141FE95AAB6DE1C335CF092C06BFBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f84f2450-1659-40ab-9d65-03b638b71f7d.roa
Signing time: Tue 14 Oct 2025 18:39:17 +0000
ROA not before: Tue 14 Oct 2025 18:39:17 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:27:c5:a1:7a:14:1f:e9:5a:ab:6d:e1:c3:35:cf:09:2c:06:bf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:39:17 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=2d105c456d70c0ead99ae55f16b5344ec1aea950f135d81b81d68c5eb3942d4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:ad:42:c7:e2:9f:d3:75:3c:cd:8e:cc:88:
b1:0b:23:01:45:b6:80:25:42:2d:3c:81:15:64:e2:
17:6b:62:da:b0:e9:f4:c9:9d:cd:b3:b7:3f:45:0c:
77:c1:a7:95:39:25:55:ce:08:15:15:71:5b:d3:b3:
8c:7f:cd:b1:1d:04:60:6c:26:ca:81:2e:a5:62:99:
a5:d5:cb:8a:54:56:f0:55:96:4f:63:43:d5:31:ca:
e5:28:7c:a6:a8:93:d4:8d:bd:13:45:10:5f:8b:f8:
ed:70:e1:16:5e:86:4b:85:e3:33:11:5e:be:41:0c:
1b:61:22:74:d8:fa:71:d3:4b:6d:be:4b:a6:77:ab:
9c:89:ea:a7:df:aa:a9:97:1c:fb:2f:cb:cb:b5:1a:
80:a6:af:21:c7:5b:f9:06:65:94:78:80:45:14:e6:
42:d9:0d:9e:33:48:96:a3:34:50:86:82:d1:98:c2:
c7:66:76:0a:b5:cc:f6:ee:53:0d:38:38:15:5d:28:
dc:8f:ae:c2:a8:c6:91:da:4c:92:38:3e:1c:a7:66:
a1:e2:ef:a1:04:de:10:71:75:8e:49:6f:fc:8a:87:
76:c1:3e:af:6d:5f:c2:a2:cd:ff:f8:4e:de:cd:56:
3c:d4:79:74:17:22:bb:33:50:d7:64:b8:ac:bd:ce:
87:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:57:39:BA:76:CB:48:46:45:DE:A7:C1:E0:32:A4:A2:52:50:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f84f2450-1659-40ab-9d65-03b638b71f7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.253.0/24
Signature Algorithm: sha256WithRSAEncryption
45:bd:8b:46:c5:52:42:05:03:3a:09:70:dd:66:43:2c:54:d3:
23:f2:54:b4:f1:64:18:35:18:60:ef:ae:24:ff:7d:f2:8b:75:
15:44:4a:7f:97:d2:0d:4b:75:ef:35:00:47:5e:1d:3c:2e:5c:
f1:4b:16:ec:81:cd:52:55:97:dd:1d:65:5f:9a:50:37:d7:24:
86:63:17:f9:66:fd:9f:f5:7e:f6:82:03:10:80:c9:fc:7b:71:
ec:dc:c1:c2:b3:1a:d3:45:c9:dd:c8:6d:78:cc:64:d1:07:e1:
f3:7e:59:8e:b9:7b:48:64:f1:be:4e:51:04:89:cc:1f:19:7e:
7e:46:38:b0:aa:b8:45:19:e9:c8:84:9e:3e:a0:a5:4c:29:6e:
c6:25:5e:cd:33:c4:9c:53:c4:43:8d:21:ad:cd:d2:53:f4:f4:
11:c4:84:1a:52:10:2e:95:5a:67:6e:5e:d2:67:16:80:e2:c8:
f2:33:24:d9:aa:fb:be:ba:c9:60:16:b8:66:8c:9a:50:da:47:
b4:1c:15:5e:26:d6:91:c6:15:14:30:77:c2:72:e0:42:da:70:
a3:9f:43:65:58:b2:e8:19:d6:f9:45:c3:b1:0f:75:09:38:23:
48:20:98:a2:90:6e:69:eb:9c:99:87:a8:77:3e:1c:f6:a0:62:
38:bd:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:46 2025 by rpki-client