Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa
File: 2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa (raw, json)
Hash identifier: 7jUmAr527CBLtXJILVlEu93jhlQri8zWIcec//sp658=
Subject key identifier: AE:F4:6C:18:7A:DD:BE:FA:8E:B4:75:46:D4:FD:74:DD:66:AD:88:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F1139F5884AAAA8BA16F00A45593F62548BA3B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa
Signing time: Fri 14 Nov 2025 02:36:38 +0000
ROA not before: Fri 14 Nov 2025 02:36:38 +0000
ROA not after: Fri 19 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.83.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:11:39:f5:88:4a:aa:a8:ba:16:f0:0a:45:59:3f:62:54:8b:a3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 14 02:36:38 2025 GMT
Not After : Dec 19 23:59:59 2025 GMT
Subject: serialNumber=46419eb773295ad63328ca689a7888b5d68b9c85ff0059b85b916d501048a431, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:a9:bd:42:5f:89:f0:7d:53:f0:cc:e1:b5:
b6:65:c6:06:96:fc:4d:49:70:23:67:b9:68:7b:93:
94:78:3c:ae:74:43:4f:b6:77:ae:9b:b0:cb:10:b9:
3c:9d:12:74:2b:ee:7b:c1:73:a8:e5:ac:30:6a:a4:
d7:6b:d9:ad:53:46:12:22:b2:c3:a3:a3:a8:57:a0:
8c:94:06:6b:b4:8b:0e:86:0b:0b:57:93:d3:ad:99:
fa:f7:1b:fa:f7:ff:24:34:4b:e0:e7:83:f1:87:fc:
69:9f:90:72:29:7a:2c:2c:d8:c9:4d:9f:56:ff:7b:
b3:f2:17:96:6b:21:81:71:dd:d2:71:ba:59:a4:24:
00:f6:ba:44:3e:7b:cf:36:ff:e5:b0:f1:c5:84:d7:
2d:c9:ab:d9:cf:3b:ca:51:3a:a6:ac:e4:52:ea:54:
fb:98:05:af:33:97:90:bb:a2:fc:d2:3a:42:ee:b4:
e2:15:17:d9:cf:a3:98:b8:68:72:39:52:71:09:f5:
34:10:01:ab:f2:a4:a1:06:90:d1:0b:57:dd:8d:fe:
60:3d:89:db:4b:89:eb:bb:a7:47:ba:fa:f5:c7:73:
77:26:35:fa:8e:fa:00:59:0a:66:bd:c3:85:34:10:
c4:7a:aa:35:49:71:2c:97:4c:fc:3a:6f:5a:85:13:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:6C:18:7A:DD:BE:FA:8E:B4:75:46:D4:FD:74:DD:66:AD:88:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2ed85cc4-b369-4ea0-911d-dc6ad653b1dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
15:a3:78:da:f4:b0:bb:7a:3a:73:a1:b6:62:17:9f:63:89:b2:
fc:90:bf:fc:43:64:2a:f0:8a:3d:ba:43:ed:45:13:92:21:37:
a0:59:5e:48:90:f0:7a:7c:c5:a1:21:9b:d3:a1:57:bd:7b:d3:
46:c9:95:d2:4b:c2:df:f3:26:71:51:86:5d:9a:13:1c:7b:d1:
84:81:85:5b:af:e7:1a:e2:2d:97:cf:19:87:4f:92:b7:4d:a1:
f2:60:b6:72:73:88:7c:2f:12:14:3c:2e:46:78:88:a8:3b:83:
04:35:a6:c3:b4:d2:6e:07:31:f9:b1:f0:b2:ee:37:71:d3:19:
ee:a9:e8:c4:52:0d:8f:74:00:78:a9:e6:d1:37:a4:b3:2e:e7:
b9:c7:29:89:c6:0f:95:63:63:20:66:47:ce:07:6d:22:cf:a6:
56:60:05:92:08:c5:fe:58:a4:93:f7:2e:0f:e8:34:eb:16:99:
44:fa:68:51:91:01:aa:1c:3c:8d:77:b7:22:73:62:57:c3:e8:
20:c3:97:7e:e4:44:5c:87:d2:c4:2b:8f:dd:ac:fa:9a:76:64:
8d:4d:48:72:8c:7d:63:59:79:01:28:9f:7f:26:a0:51:93:0f:
a6:bf:a0:8e:94:28:33:67:70:b7:cd:a7:6c:82:07:7a:21:8f:
d8:50:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 05:48:07 2025 by rpki-client