Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28cf4189-648d-467b-9ef1-b6e9fa5ba3dd.roa
File: 28cf4189-648d-467b-9ef1-b6e9fa5ba3dd.roa (raw, json)
Hash identifier: E458ggtQNdw52VptJCyrtHsEq2F1TccwAuAXYd9SXyo=
Subject key identifier: FF:FC:42:4E:34:56:C3:FE:3D:C3:8E:5C:D8:43:E1:C2:01:05:DF:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68C75FDF1E31B86941D2A2B68F40C59007B66876
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28cf4189-648d-467b-9ef1-b6e9fa5ba3dd.roa
Signing time: Sun 16 Nov 2025 00:10:41 +0000
ROA not before: Sun 16 Nov 2025 00:10:41 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c7:5f:df:1e:31:b8:69:41:d2:a2:b6:8f:40:c5:90:07:b6:68:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:10:41 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=ab4c2203942a12b03855268f48edc23af8a1db77d787c62440ed22c9c25799af, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:fe:53:2e:af:c8:6b:55:65:b2:7a:9a:c0:
52:10:86:9f:e8:e9:d9:90:b9:2e:18:24:9a:ed:1c:
aa:50:e1:19:b1:b0:f0:5a:72:2b:b2:af:16:9e:2d:
60:c3:df:bc:ed:19:61:f2:09:2c:f3:d6:f0:12:03:
0c:fb:f5:3a:5a:b0:be:6b:56:69:1e:39:a4:57:15:
80:fa:e7:40:da:9c:e1:c2:aa:e2:a8:9e:23:5b:6c:
81:ad:27:f5:57:0b:1e:34:33:6b:37:f6:07:d1:da:
05:9b:29:03:fc:b5:78:18:04:ee:a9:b0:e4:63:9b:
44:6b:25:ed:ba:e6:0b:4b:01:06:7e:fe:e9:a4:ec:
e5:31:74:96:fb:31:fb:40:04:77:94:6b:47:6c:80:
18:84:ec:80:a6:87:6d:c6:bc:d5:4f:d6:b7:0a:4d:
3a:7c:eb:03:22:2e:31:41:75:1e:df:ba:16:9b:6a:
bd:af:c1:07:7d:27:6d:13:49:a8:5a:a3:19:42:7e:
0d:4f:0a:e5:24:f0:27:58:f4:0d:9d:0b:e0:2e:3c:
23:1c:9a:43:93:4e:3e:15:77:c9:3f:79:16:d6:0b:
04:04:fd:ec:35:b6:35:ce:b3:6e:1d:82:10:b2:4d:
61:d8:7e:99:d7:a9:19:bc:03:e1:28:36:54:02:51:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:42:4E:34:56:C3:FE:3D:C3:8E:5C:D8:43:E1:C2:01:05:DF:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28cf4189-648d-467b-9ef1-b6e9fa5ba3dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:95:6c:af:cd:45:4f:08:14:10:74:84:48:64:d1:99:b4:29:
db:1a:a5:6a:31:cb:4d:30:0b:d1:0f:2c:24:b8:5c:3d:0d:91:
99:d5:66:df:11:11:35:06:dd:9f:31:0c:bc:8b:94:70:60:49:
c4:d1:0e:1b:98:0c:89:db:75:64:0b:4e:51:26:96:79:da:a6:
87:f3:71:21:52:24:9a:a7:2f:2c:98:c3:18:84:0d:d3:53:d8:
33:ba:d4:25:e2:32:d5:89:00:12:30:dc:eb:8a:a6:b0:20:d3:
40:80:70:a8:8c:d3:66:d6:c0:10:6a:33:bc:cd:07:51:95:1d:
52:a8:d4:12:04:7e:d8:fb:17:96:55:12:f0:c0:3f:6f:09:de:
5a:e1:28:65:3f:d1:ba:2c:18:44:8c:0e:ac:c2:9e:79:9a:99:
b6:53:b6:41:ff:65:56:8f:df:e2:5d:d2:25:9c:1b:c0:c7:9f:
06:7b:c6:80:92:29:6f:9e:17:10:c2:59:12:f6:c5:6e:b1:6d:
3b:e2:f6:58:ec:2f:64:c5:7f:af:3f:88:fe:ce:98:c1:0f:d6:
18:90:4c:cb:e7:7b:6a:8b:78:e1:72:5c:a2:f7:a5:93:27:41:
ae:ec:96:68:ef:58:8a:40:1b:da:6f:31:72:e3:b3:eb:cf:92:
5e:4c:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:37 2025 by rpki-client