Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa
File: 4a7e5f14-963c-416e-9fab-cfb42881503e.roa (raw, json)
Hash identifier: 1RJHAUDqJd4+76UT3rbutTJ8Hu4qkEafJ+l1JwKwAhM=
Subject key identifier: 89:A3:EA:3F:2D:23:72:CB:73:70:78:18:D8:02:F9:CD:65:F3:E9:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7130A5E42349B9664C16132E434B80A8FBC84EA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa
Signing time: Sat 15 Nov 2025 00:40:45 +0000
ROA not before: Sat 15 Nov 2025 00:40:45 +0000
ROA not after: Sat 20 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.80.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:30:a5:e4:23:49:b9:66:4c:16:13:2e:43:4b:80:a8:fb:c8:4e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 15 00:40:45 2025 GMT
Not After : Dec 20 23:59:59 2025 GMT
Subject: serialNumber=c9a9422e4e42a9b3cb1d0b22e909624e7a27349abea8ca31051d10676884b78a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:34:c7:21:d4:3d:21:ff:b7:58:5c:80:97:
71:06:1c:d2:e0:19:71:bf:3c:63:0c:bf:e5:b0:31:
ab:7b:62:bf:5f:84:1a:5e:e6:62:b4:24:fd:46:c5:
4f:4b:44:3a:52:cc:1e:2a:b8:be:39:93:05:e5:a1:
da:28:09:48:db:7c:e3:2d:5b:5c:be:4d:61:9c:bb:
5b:90:e2:17:78:33:1f:43:f0:eb:8b:84:27:6f:d2:
d0:64:d2:be:e5:ac:b1:ca:3c:99:cb:92:cb:e0:61:
c5:5f:d6:ab:f6:b4:32:45:79:a6:e9:62:f6:7b:bd:
bb:a9:4e:3d:fc:a0:42:68:dc:bc:b0:cf:36:cd:3a:
e5:94:33:bb:75:e4:04:2e:79:63:f3:5b:4d:3b:5b:
6d:4a:db:b5:ac:a9:9d:0f:33:61:dc:d6:14:af:29:
25:cd:f2:69:61:a3:68:26:11:2d:77:9b:73:a1:cc:
d1:23:39:ee:40:47:bb:d2:88:3b:9c:8f:e9:e6:58:
b3:d2:53:09:74:d0:89:2d:a3:d5:c2:92:21:95:72:
47:bb:93:9b:80:74:a3:78:1f:13:5f:61:cf:87:22:
ce:58:8a:a9:90:f5:1e:26:d2:1e:66:a2:2e:eb:40:
05:27:f4:8a:0a:67:f3:67:90:87:9b:4d:79:53:64:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A3:EA:3F:2D:23:72:CB:73:70:78:18:D8:02:F9:CD:65:F3:E9:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a7e5f14-963c-416e-9fab-cfb42881503e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.80.0.0/15
Signature Algorithm: sha256WithRSAEncryption
95:88:b1:03:f2:5d:6d:51:a5:52:37:4a:a0:21:c0:62:56:ee:
55:35:f2:00:d5:e8:f7:ff:f8:18:46:3f:63:f5:4b:3c:ce:75:
7b:02:8a:61:18:92:21:87:5e:c9:67:71:e4:b0:03:c4:23:02:
8d:66:69:57:17:34:d0:ee:51:d8:35:f4:dc:94:29:0a:9e:fa:
02:f7:d2:48:25:be:f3:57:00:e3:18:73:b8:70:a2:32:64:50:
f5:2b:b8:16:43:5d:31:07:a2:76:8a:72:bb:c0:34:05:85:c5:
e1:c0:79:24:52:f5:f6:ca:10:62:ec:03:d4:e2:00:6e:c6:36:
03:da:99:8f:4f:c2:ae:37:aa:df:7c:6f:de:c6:72:60:76:3b:
08:5c:73:1a:54:87:b0:9d:39:1c:d7:a2:43:86:31:7f:d0:88:
26:d7:37:e7:1a:71:01:b5:96:56:81:b8:df:10:a1:33:1e:66:
5b:7f:34:60:1a:46:e6:1f:04:f4:89:ee:6c:78:67:2b:b2:e6:
14:73:b7:23:40:ae:ef:e0:ef:f9:a6:eb:24:d1:2c:6d:3d:f0:
3b:9d:dc:e8:f5:3e:0b:74:80:88:3a:87:82:9f:0d:52:6a:98:
70:97:12:a0:a2:ac:4f:26:59:6d:50:d5:e9:9b:03:1c:95:61:
de:d5:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:42 2025 by rpki-client