Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031efaf6-6588-49c3-8552-591f52db15fa.roa
File: 031efaf6-6588-49c3-8552-591f52db15fa.roa (raw, json)
Hash identifier: nDrldprH361gWeZkEURgaeZ0EY5HJ+b5VqHqnCb/ss0=
Subject key identifier: E7:1D:84:19:CC:F7:CC:54:92:48:9D:AD:C4:54:F7:AB:31:94:43:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79AB51E2546C2EE387E042C69C7BEFFF5356ABFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031efaf6-6588-49c3-8552-591f52db15fa.roa
Signing time: Tue 14 Oct 2025 20:01:14 +0000
ROA not before: Tue 14 Oct 2025 20:01:14 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ab:51:e2:54:6c:2e:e3:87:e0:42:c6:9c:7b:ef:ff:53:56:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:01:14 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=0c05118b7ec40c9c9602688dac6b7bdfc5e14590d329667e70de1d579c6acc1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:16:f3:0a:2f:14:b3:b6:6a:2c:af:00:8f:
eb:4f:f1:a0:c2:63:f9:01:49:66:99:00:5c:c7:82:
29:26:a7:b3:04:4d:92:6b:fc:7e:68:e6:12:86:fb:
0d:a5:4b:86:3a:22:85:1d:7d:a7:9f:b5:e6:c9:ee:
31:68:b6:9b:7e:18:b8:40:96:a4:b5:a9:17:41:80:
ef:e7:e7:c7:41:97:77:52:a0:11:41:f8:28:1d:12:
43:12:ce:11:26:35:8d:ab:de:65:c5:2d:e0:1e:2b:
75:ba:87:19:6f:ce:f4:96:e2:06:78:ba:3e:6b:82:
c6:1e:9f:8c:ba:d1:05:43:3e:aa:42:d3:c3:a9:20:
ed:9d:c0:a7:57:f7:5a:b8:bd:c8:c5:63:69:d2:c8:
5d:f0:cd:52:64:d1:87:3b:50:77:0b:14:00:15:d7:
67:1d:91:25:9c:60:fa:2d:89:35:9b:77:9c:10:51:
0e:51:81:f7:2e:3e:00:83:36:31:3f:f2:77:ee:69:
e5:5f:10:8e:06:e5:f3:6a:be:7d:10:51:82:db:93:
72:62:87:8e:3d:a7:fd:27:b1:f1:4a:61:74:6e:c4:
6b:f0:c5:b0:5e:c2:3b:34:3e:6c:4b:b7:0c:2c:12:
34:7e:43:1b:7f:93:da:48:53:0b:88:07:03:47:08:
c7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:84:19:CC:F7:CC:54:92:48:9D:AD:C4:54:F7:AB:31:94:43:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/031efaf6-6588-49c3-8552-591f52db15fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.94.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:51:24:91:6c:90:0b:e8:ec:94:33:5e:07:12:fd:ef:0d:d6:
95:80:e0:fe:5a:60:4f:31:17:28:c2:6f:3a:6c:4c:f3:8b:fb:
31:8a:e8:81:2c:52:b9:50:4a:67:e2:ab:df:43:ff:bf:a5:ef:
59:0f:d3:83:e1:5e:ae:cd:ab:7a:2a:e0:69:be:0d:22:c8:a4:
19:de:a1:30:2e:42:af:78:83:ef:1b:7b:c0:4d:09:ad:b4:5e:
44:f3:4b:be:39:9f:6e:3b:f0:4a:af:3b:f8:a2:e6:a5:08:ca:
ca:c2:4a:94:83:dc:e7:ac:c7:b1:8c:a7:c0:e1:5f:4f:8d:5a:
c6:8e:57:b9:02:bb:d9:c2:b5:cf:94:85:3c:86:80:fd:9a:e7:
b6:2b:c6:96:cf:ca:d6:1a:66:29:61:f7:4a:b4:17:c8:51:fe:
3b:9c:8f:a8:59:b8:60:82:0b:70:17:1c:a5:98:c2:2c:9e:5a:
9a:ac:7d:87:7f:42:28:69:f1:ba:e4:af:9f:85:8f:3b:e8:48:
53:66:ac:e0:27:31:46:12:d6:4e:93:1d:12:0a:bc:f7:48:8f:
c7:8d:43:68:db:64:23:a4:5b:7f:b5:dd:72:60:3b:9c:13:84:
cc:83:52:ab:ea:91:bb:5f:18:01:19:eb:ca:9f:5a:22:6a:f7:
41:6f:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:55 2025 by rpki-client