Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
File: ba95c612-340c-484f-bd1b-02425457802a.roa (raw, json)
Hash identifier: wOlWenWUGaKw2H+ZCR5ugyYtokBdEXGGSkkw6KdDRBI=
Subject key identifier: C2:AB:F8:32:7C:5C:A8:06:AA:B9:B2:78:13:D7:83:16:D5:B9:02:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2841FA381372F15D51D0F3CD58945E676A850577
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
Signing time: Tue 18 Nov 2025 00:11:14 +0000
ROA not before: Tue 18 Nov 2025 00:11:14 +0000
ROA not after: Mon 16 Feb 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:41:fa:38:13:72:f1:5d:51:d0:f3:cd:58:94:5e:67:6a:85:05:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 18 00:11:14 2025 GMT
Not After : Feb 16 23:59:59 2026 GMT
Subject: serialNumber=fa41a4b1050c1e2c17e10d2e50d607ca9b02836e2d3af859477918d886d1a3a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:de:9e:23:d3:fd:64:36:06:39:63:8a:6b:
61:c8:1b:64:09:33:cb:bf:4b:b0:52:2a:eb:e7:24:
77:0c:8c:06:b5:19:c9:76:a8:d4:2b:42:36:f4:d7:
c8:52:d6:ad:b8:c7:e3:08:44:b4:81:9f:ac:12:9a:
d3:4e:4b:c7:59:f6:d4:6a:ce:b6:bd:1a:33:df:f6:
4c:f5:2e:7b:23:e8:a2:11:14:d2:71:1d:3e:82:30:
f9:25:e6:ea:ed:24:ef:00:7b:30:41:2e:3a:5f:7d:
b6:7f:fe:8d:e5:f6:87:c5:0c:e6:41:63:f3:bd:d1:
d3:7f:39:14:38:c2:3b:5e:83:bd:7b:2c:99:05:14:
51:20:2c:5f:bc:8c:39:21:76:b1:d3:88:15:97:7c:
a2:4d:da:19:b6:39:28:79:88:b9:9d:a8:7b:23:7e:
76:44:ff:e5:f5:0c:9f:c3:a2:e5:b5:75:0c:a0:91:
64:60:ae:01:e9:37:74:43:ee:ff:cf:0d:dc:e4:06:
d9:f7:ec:73:ca:4e:8c:9f:4c:2e:e6:71:30:39:a2:
af:0a:03:b6:ee:03:de:47:e6:ca:f6:e7:99:e7:7f:
a3:7d:34:be:80:7d:2f:72:89:3e:47:cf:69:ce:03:
ba:55:04:b5:6b:a9:8a:e5:d0:4b:7b:4e:0f:cb:cd:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AB:F8:32:7C:5C:A8:06:AA:B9:B2:78:13:D7:83:16:D5:B9:02:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba95c612-340c-484f-bd1b-02425457802a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
bc:61:b5:07:1a:23:a8:74:85:fe:09:26:4e:2c:ee:50:dd:9e:
db:85:78:cb:f6:ea:20:16:c2:bb:d0:8e:0c:a2:79:81:e6:61:
dd:1e:b3:e1:32:02:9c:57:b3:37:98:12:4f:fa:ae:21:4d:60:
3d:94:08:29:9e:9c:73:0e:9c:f3:9a:c4:f8:82:17:b3:03:24:
7d:5c:a4:cf:61:0a:69:b9:1f:3f:d9:b6:a5:a2:2d:c1:da:a5:
7a:c5:ab:f3:35:a9:8b:50:79:d8:2c:58:5f:6b:19:91:49:62:
ed:fc:f2:1f:e3:09:1a:eb:e1:b0:0d:f1:51:17:b8:e6:30:fd:
ef:c4:62:8b:61:22:94:5f:e3:ed:f2:c1:6f:cd:59:85:ce:59:
8e:2f:72:d3:3d:9c:83:7e:af:7c:9d:9f:df:58:b4:94:cd:98:
1e:f9:92:fa:83:c6:de:d3:fe:62:f9:a3:03:9f:dd:81:5d:eb:
7a:7b:d7:3f:ce:9b:6f:60:d1:43:9a:8a:84:1a:cf:f0:19:40:
57:23:09:67:69:28:56:6e:cc:8c:50:bc:a6:0b:27:0d:a2:8b:
f7:a2:99:e3:22:46:29:28:c6:e4:11:00:4b:b7:ef:40:53:40:
c5:79:78:b8:f9:d1:59:d4:82:a0:d5:2e:4b:18:20:e7:01:55:
ce:45:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:23:35 2025 by rpki-client