Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144dfc0f-e7ac-4982-9529-8ab71e05694a.roa
File: 144dfc0f-e7ac-4982-9529-8ab71e05694a.roa (raw, json)
Hash identifier: /N2khQFBMKR1W/jXIqGp8yVxOUDMG8ZEfUEnK9LNTZI=
Subject key identifier: D7:3D:7A:E8:13:2B:66:F2:A4:9B:94:63:FC:39:4B:6E:E3:89:2D:49
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 722BBE104E54E587961B30CC00E8077762EDF41C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144dfc0f-e7ac-4982-9529-8ab71e05694a.roa
Signing time: Tue 14 Oct 2025 22:02:59 +0000
ROA not before: Tue 14 Oct 2025 22:02:59 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2b:be:10:4e:54:e5:87:96:1b:30:cc:00:e8:07:77:62:ed:f4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:02:59 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4c9aa345eac5cf52eb68854d4fb21cd26fffec3a7358cf6b155b320a2ce48007, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:69:97:00:24:e6:84:97:23:ed:a8:08:0c:
41:5d:07:f9:20:0e:3a:1c:5e:e9:3b:12:a4:8a:a2:
15:cd:d9:04:ae:13:a5:3a:d5:94:a5:bd:65:19:f6:
47:17:2a:09:12:57:36:a3:da:11:4d:81:65:45:56:
fb:c0:d5:20:6c:4d:12:a6:9a:31:54:1b:47:26:d5:
a7:e0:f9:b5:3f:ed:74:a2:89:92:a2:a8:80:60:d1:
11:95:c6:8c:22:02:f4:d3:d2:8f:9c:98:1a:38:54:
11:9d:98:cf:fd:7c:65:15:e6:a3:b7:75:84:06:0d:
73:03:2b:c5:01:f1:fc:e3:67:0a:92:28:a3:da:fd:
a5:b2:b7:e7:db:f4:1f:23:ff:2b:88:4b:b2:27:67:
56:29:db:17:38:98:02:ff:b0:57:0b:95:74:f5:0b:
dd:79:43:5d:dd:c9:95:4b:52:df:82:02:38:71:1a:
8e:2b:2c:52:57:a0:fa:4f:3d:85:24:26:fd:76:c3:
8f:d2:2a:c2:14:2d:6e:c7:62:8a:d2:b3:45:1e:9f:
ef:43:cd:3b:4a:9f:98:6f:99:ba:50:dc:d2:e9:e2:
d4:95:be:17:af:53:9a:29:57:a8:74:97:56:ba:e0:
ab:e0:0d:85:ad:44:25:a2:2a:8b:fc:ec:15:0b:dc:
5b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:7A:E8:13:2B:66:F2:A4:9B:94:63:FC:39:4B:6E:E3:89:2D:49
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/144dfc0f-e7ac-4982-9529-8ab71e05694a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.52.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:ad:6f:72:a4:c0:db:ee:fb:c6:28:e6:c4:da:27:ee:d4:f9:
c2:f9:ef:13:0b:a1:99:9e:09:e4:05:51:51:30:49:ef:a0:57:
9c:a9:8d:1d:27:d9:a4:ab:bf:cb:9e:13:3e:9e:4d:d8:96:fa:
b7:67:39:f2:46:c7:06:e9:6f:ac:bb:ef:aa:22:26:04:47:78:
53:af:1f:7f:3f:1b:87:e5:0a:57:12:4e:98:43:3b:08:f6:55:
99:30:1c:da:a7:32:33:c3:95:4c:57:ae:a9:9a:29:dd:95:f2:
26:17:80:7a:d6:8b:d2:c1:1b:72:88:63:33:67:35:97:a4:6b:
fb:b1:09:b8:41:71:b1:0c:b1:1a:e1:a9:d5:ce:bf:e4:0d:2e:
78:e3:7c:1f:5c:62:06:a0:b2:da:e8:e3:61:90:27:44:d6:64:
83:38:43:78:cc:f0:08:e5:49:19:84:8f:9d:78:c6:47:0f:15:
76:7b:d6:81:cb:d1:83:b7:88:bc:94:34:a3:be:9a:d0:11:78:
0a:4c:a0:39:7f:3d:ee:54:68:43:b9:72:c7:69:06:a5:68:84:
b7:d5:50:d9:72:8c:65:c5:77:c5:97:b5:08:2a:41:23:07:8c:
8b:b5:1f:d7:73:18:81:da:cb:be:05:78:84:28:72:55:a9:d5:
6e:40:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:43 2025 by rpki-client