Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f66a13-5879-48bb-b275-10276fd2b586.roa
File: 10f66a13-5879-48bb-b275-10276fd2b586.roa (raw, json)
Hash identifier: O/F933aT5+6nxAQZp8GRgrQsT5zGDFyA/KxQvGMt46c=
Subject key identifier: AB:DA:C3:51:A1:F9:E2:E1:D1:0E:2E:D6:CC:F9:4F:96:03:41:DC:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BF8BEBA9F384A512E9A7E7DE464C36BDACB3CFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f66a13-5879-48bb-b275-10276fd2b586.roa
Signing time: Wed 01 Oct 2025 00:51:15 +0000
ROA not before: Wed 01 Oct 2025 00:51:15 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f8:be:ba:9f:38:4a:51:2e:9a:7e:7d:e4:64:c3:6b:da:cb:3c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:51:15 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=6aef7e815b0f41e5e47247a23213f8592266e19f10fdfbb21f3aab8f63c44cea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:fc:c8:4a:d5:8a:13:19:fa:af:57:7a:30:
9b:90:79:2b:00:ef:ea:10:00:55:32:9b:13:20:56:
a3:15:0c:ca:8d:4d:94:f6:4c:44:71:a1:20:2a:54:
6a:d0:52:33:8c:60:38:ca:28:72:20:65:df:44:9a:
6b:4e:04:f6:5e:af:bf:08:ff:52:5b:49:50:c8:ed:
d0:0b:db:e3:df:02:58:32:cf:44:2d:31:fb:14:40:
6e:12:98:00:de:2d:df:be:3b:32:85:e4:0a:27:d9:
75:b3:f3:ec:a8:9c:80:2b:0a:72:a7:a2:47:21:2a:
ab:9e:cf:67:e4:12:a0:af:e8:82:94:9f:ca:a7:b6:
0d:4c:b5:57:f5:2e:ec:09:65:b8:a5:33:a1:a9:9c:
de:f6:da:e4:e8:8b:10:94:eb:32:66:63:8a:b8:4f:
8e:31:f2:5f:75:af:17:b1:13:e4:57:3a:ae:f0:23:
c5:ce:70:05:15:56:49:44:56:d3:9e:ee:63:ac:a2:
d8:66:1d:20:c9:0f:71:db:53:e6:ab:98:b4:6d:6e:
ba:21:9e:b1:5f:e8:aa:5a:2d:d8:27:c2:54:4a:12:
d0:07:aa:c6:0a:3c:39:af:1d:60:8c:7d:41:62:10:
65:5d:d4:b7:50:56:78:e2:30:b4:96:73:23:6e:94:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DA:C3:51:A1:F9:E2:E1:D1:0E:2E:D6:CC:F9:4F:96:03:41:DC:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10f66a13-5879-48bb-b275-10276fd2b586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.161.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:95:31:a0:5e:67:5a:68:62:89:88:b1:39:9a:00:75:ea:
e8:9e:f6:09:17:69:97:1c:17:6c:8b:59:ea:37:ca:14:e1:b9:
b0:1d:2a:a3:44:37:91:79:e2:d3:8d:ec:8a:13:a4:6f:17:87:
20:e0:b4:c8:2d:94:53:96:3b:ab:3b:54:3e:4a:2a:f0:17:a8:
47:20:ab:43:df:5d:58:05:11:b2:c2:fa:e1:fe:43:6c:2e:b5:
9d:ee:2d:21:86:c0:f9:a7:a9:08:9a:d0:34:99:7f:fa:99:d2:
c5:0b:fb:8b:1e:1f:1c:80:65:5e:bc:e0:56:56:49:d7:53:bf:
e9:68:4e:0e:4e:ad:0a:7a:53:63:04:41:3e:0e:06:5c:9a:03:
35:50:3b:99:99:08:0a:43:3c:3e:9b:bb:b7:83:ab:7e:bc:73:
66:bd:dc:a6:c9:e4:05:64:99:66:b1:92:ad:76:dd:fd:21:5b:
a7:f7:02:73:a8:fe:d6:d6:7f:35:83:a5:61:1a:bd:17:f4:39:
2d:c2:4a:ec:97:33:e1:ea:e0:a8:ad:b6:8f:a0:80:d2:45:3b:
ad:56:10:14:3e:d8:0b:ce:fb:5d:77:ca:ea:67:fd:b4:7c:d8:
80:88:9e:d3:6b:9e:e9:0c:40:ad:4a:e4:49:fe:39:ee:fd:db:
5f:e7:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 23:17:20 2025 by rpki-client