Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa13c91f-7689-4a76-b342-623f718a1ee5.roa
File: fa13c91f-7689-4a76-b342-623f718a1ee5.roa (raw, json)
Hash identifier: ClErAXNnEQuiO585wPKI9orGcv8Z+IxPhtz+X6X5FEg=
Subject key identifier: 99:F1:22:66:CA:94:34:5B:C6:9A:BB:C4:DC:85:0A:E5:92:2F:0F:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 25CD26F4EB9484FECFE7C20C9B0501857867FBEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa13c91f-7689-4a76-b342-623f718a1ee5.roa
Signing time: Wed 15 Oct 2025 17:41:20 +0000
ROA not before: Wed 15 Oct 2025 17:41:20 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:cd:26:f4:eb:94:84:fe:cf:e7:c2:0c:9b:05:01:85:78:67:fb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:41:20 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=c0ff06ccea14cf45e890bbeb395a4490c95dc334d23dc92fdcd62d45e5012b87, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:77:dd:85:21:d0:a7:7e:0a:94:ff:b9:06:
a0:29:eb:4b:eb:81:c3:49:2e:08:d5:05:20:c7:05:
d5:0a:cf:cd:88:10:42:c9:99:b8:bf:b2:de:88:ee:
2d:c2:6c:da:ad:c0:d1:ae:5c:73:3d:a6:6d:54:c8:
cc:20:ee:e7:03:55:f6:36:ac:ed:c2:86:b0:66:6c:
b8:2f:87:3c:30:1f:f1:61:19:8c:11:68:c8:b6:ec:
bd:63:f1:f5:da:14:26:58:ce:23:1e:4d:31:e3:d0:
c5:3f:ed:1e:4b:a0:ac:af:7b:f9:c1:00:f7:e5:2b:
92:bf:43:1a:de:c4:61:c4:78:99:08:f3:d1:a1:19:
25:0f:f6:14:5a:1d:8c:b1:20:90:11:74:63:ec:24:
60:75:02:42:b5:e9:e3:cf:b6:26:ac:9e:4d:cf:1c:
aa:75:81:1d:ae:ce:f7:6b:5e:1f:45:93:8c:0a:aa:
22:79:e9:6d:34:03:30:64:9a:34:b2:bf:e3:50:60:
30:c0:51:24:1d:ae:46:c5:cc:bd:c4:84:da:83:7c:
eb:ec:93:2d:7e:11:24:bb:7e:5a:43:4b:0b:90:65:
0c:5e:47:70:5f:83:13:c4:d6:e7:03:c2:9b:27:c9:
cd:c3:55:0a:80:86:7a:bd:48:25:00:a0:be:be:b0:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:22:66:CA:94:34:5B:C6:9A:BB:C4:DC:85:0A:E5:92:2F:0F:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa13c91f-7689-4a76-b342-623f718a1ee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.205.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:2c:5c:12:c9:bb:71:2a:67:17:ca:fb:7b:66:0b:ee:12:5f:
b7:89:f4:0a:9e:49:cf:73:da:37:22:f3:ba:14:53:8e:a9:e8:
3e:a5:b4:b1:fb:2c:72:23:8c:03:db:ae:98:a4:9d:51:58:31:
a0:5b:1f:e2:7e:49:db:80:e0:c7:41:8d:63:8b:c2:cd:43:46:
1d:a6:5b:23:10:db:0d:1c:03:71:c8:9b:74:35:57:2f:3b:13:
fc:ef:98:9b:30:38:93:6d:6b:a3:66:3c:84:62:5f:d7:63:a0:
41:f4:0f:23:41:90:a2:bd:52:7c:bd:a5:14:d0:a6:94:cc:4b:
7a:3b:4b:24:99:2e:5f:35:1f:cc:55:65:16:1f:39:42:05:14:
e3:94:dc:3a:81:e5:45:9b:01:91:69:cb:c8:e6:e0:6a:ad:ea:
33:41:be:5c:49:ef:8b:ca:38:0b:99:c3:5b:68:b5:98:35:e7:
fc:de:5a:9b:26:b4:1b:5a:6d:05:ac:5c:08:14:f0:c8:75:d1:
0b:9c:95:98:99:f4:93:f3:b4:33:0e:4e:49:67:99:2c:ee:ab:
ba:cd:86:e8:8c:88:58:96:ff:64:e6:f8:ed:71:05:38:5f:af:
2f:83:13:4b:04:2a:ff:91:f4:09:42:bf:00:8d:19:18:07:fd:
77:d7:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:26 2025 by rpki-client