Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec85625-012d-4086-8d1e-52bb27448a7e.roa
File: fec85625-012d-4086-8d1e-52bb27448a7e.roa (raw, json)
Hash identifier: DoLWEhwn86RrqQHF9CSpjRgpbkBx61F6314n7cjtHeU=
Subject key identifier: A2:BF:E6:98:D7:2C:05:BF:C1:C1:E1:CD:6B:68:40:6E:92:2B:83:9F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27AAA69DDBEF6AABB88DF8F26B1AFF69807CBE0D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec85625-012d-4086-8d1e-52bb27448a7e.roa
Signing time: Wed 15 Oct 2025 17:38:29 +0000
ROA not before: Wed 15 Oct 2025 17:38:29 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:aa:a6:9d:db:ef:6a:ab:b8:8d:f8:f2:6b:1a:ff:69:80:7c:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:38:29 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=6dff40b0f638f7582afb7e8a14e14542ef32a25de1e990f920e374f49b3d673e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:da:29:b1:5a:43:7c:59:8a:d6:7a:36:be:
20:22:67:c1:0c:3d:14:c6:23:17:28:dd:56:11:ff:
ee:c3:dd:d3:b4:ad:3a:0d:c7:d2:66:3c:97:0c:57:
23:2c:09:4f:08:92:9c:bc:ea:a0:a3:a0:b2:9d:63:
c0:37:74:5e:dd:34:6d:c9:9a:c7:9c:3c:57:3a:8d:
6e:1b:38:c2:17:65:b4:28:ed:fe:f4:0b:6a:93:c1:
b2:d0:a4:86:cb:69:03:32:6d:af:25:9e:bd:cf:27:
29:39:21:0f:cd:e9:9d:b1:50:c8:80:d8:a0:f9:ec:
59:41:e4:c4:37:4a:88:7b:96:f4:51:c8:84:89:d1:
8a:bb:ef:ad:03:3a:e2:aa:70:84:1a:ba:75:79:dd:
ea:fe:67:1a:ac:09:eb:dd:23:c3:22:98:d8:d7:9f:
e5:8c:ec:eb:17:c9:70:86:13:fd:3b:de:e3:29:80:
ef:8c:60:a9:c1:bd:08:43:17:0c:bf:b0:5e:55:47:
a8:75:7f:e1:4c:88:35:5a:d4:be:4e:a5:e6:8c:93:
f8:f3:f1:07:43:7b:a2:61:89:b8:33:c3:b8:c1:29:
cc:a9:a1:2c:00:4a:77:23:b3:c3:c6:f4:42:fc:65:
b3:36:ed:23:03:06:aa:12:04:ae:79:28:dd:ca:7e:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:E6:98:D7:2C:05:BF:C1:C1:E1:CD:6B:68:40:6E:92:2B:83:9F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fec85625-012d-4086-8d1e-52bb27448a7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.215.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:61:b4:1b:ab:1a:89:34:a2:fa:78:cd:64:50:76:25:df:ef:
0c:95:a7:6f:c4:94:dd:06:1a:93:11:7e:cc:8c:f3:b3:23:85:
84:bd:32:b6:82:54:5e:c0:3b:19:9e:91:1d:d5:c9:b3:92:ad:
c9:37:51:54:e6:54:79:93:ec:c3:c9:a2:d6:62:21:9b:51:7a:
23:c6:5e:89:d5:30:a9:07:d2:58:59:b7:98:58:80:d2:c3:4c:
dd:30:b6:7f:52:d5:07:22:9c:c1:7b:0d:32:2b:72:b3:12:e6:
df:e3:27:a9:d1:94:f1:29:b2:61:fc:c3:bb:3b:d3:53:be:be:
97:7c:65:0c:0f:82:08:0e:0c:27:47:13:e5:2a:2f:c6:c6:ba:
4a:8d:dc:b7:43:57:72:09:bd:02:86:ed:dd:4e:8b:1a:a9:b8:
2c:d2:4e:dc:75:b3:86:d8:81:9b:6c:eb:15:4b:da:bc:fb:36:
77:50:45:b0:47:de:64:b0:b9:99:d0:32:3c:12:86:a3:d5:29:
1e:86:8b:fd:7a:ab:ac:d8:43:f2:32:9a:0a:19:e3:ea:ab:07:
22:2a:5f:2c:54:a3:44:80:ad:b7:a1:dd:67:74:00:1a:20:66:
4f:ce:4a:f0:a7:e5:53:61:70:14:59:c2:9a:6c:bc:41:bc:45:
2f:e7:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:55 2025 by rpki-client