Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a9a2dc-0412-4024-bf68-443b5584f036.roa
File: 30a9a2dc-0412-4024-bf68-443b5584f036.roa (raw, json)
Hash identifier: 3uPjLqMSYRmH/VKEi6wpNnu2uaCKwGx5gHrk3/fsQko=
Subject key identifier: 15:85:50:5F:CD:1D:75:CA:3C:AB:7F:D5:BC:32:6D:E1:2E:5F:64:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F1D2B6C5001D3201617C5098FF417A9D2F0CC98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a9a2dc-0412-4024-bf68-443b5584f036.roa
Signing time: Tue 14 Oct 2025 21:22:47 +0000
ROA not before: Tue 14 Oct 2025 21:22:47 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:1d:2b:6c:50:01:d3:20:16:17:c5:09:8f:f4:17:a9:d2:f0:cc:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:22:47 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=dafabaa4b8bf2edcf6f9797eecf90d44b0b7863ff79c51c03168290577cbbb0d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:41:2e:cd:b1:3f:90:cb:07:6c:03:45:0c:67:
0c:99:5a:62:36:89:fa:83:e4:94:76:a7:80:6a:b7:
7f:f8:8d:1f:9b:ec:78:a4:86:7c:75:e2:ee:33:81:
33:c7:b6:7d:5f:e9:a5:55:b4:5f:be:c4:34:c0:05:
66:b2:21:a6:8f:0f:38:ef:17:d4:ef:0c:29:0e:09:
e0:36:65:52:c6:f7:5a:6a:0c:dd:cd:89:a8:7a:49:
44:0b:77:67:b3:bb:be:f3:25:95:40:ea:6f:33:5e:
76:4c:11:d5:1f:14:56:40:7f:20:5f:68:50:24:53:
ef:41:09:99:eb:36:06:b7:73:5d:8b:dd:46:5c:03:
cb:c2:d8:18:dc:1e:d4:30:1c:af:06:f1:38:f8:ae:
c3:fd:0e:6e:ae:98:df:4d:e8:70:08:55:09:72:03:
e1:a2:ff:66:ba:b1:78:48:77:34:33:17:39:fa:fd:
6b:66:a3:e4:d1:83:fb:a0:6d:1c:f3:d5:f4:7d:bc:
7d:99:7c:0c:44:fb:26:5d:ee:d6:b2:5c:71:48:ac:
8f:d4:3d:e2:e7:ad:72:37:0c:c2:cb:15:1a:21:43:
8b:77:50:89:c4:f0:01:0c:fd:a8:b6:a6:f1:af:b4:
2a:43:0a:b2:c5:4d:9e:89:5b:22:1b:30:b9:64:35:
07:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:50:5F:CD:1D:75:CA:3C:AB:7F:D5:BC:32:6D:E1:2E:5F:64:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30a9a2dc-0412-4024-bf68-443b5584f036.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.167.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:83:77:fd:71:52:6f:66:11:ad:10:05:c8:31:87:f1:2b:64:
37:48:4f:de:0b:27:c0:57:16:f4:d5:e3:03:53:dd:63:df:c3:
34:85:fa:f1:62:23:da:1d:7f:79:19:a3:3d:32:dc:5c:6b:03:
3a:c7:8e:c5:9d:e6:b3:49:8a:42:65:52:22:eb:c1:41:23:be:
3d:63:90:6c:44:ef:b1:d8:30:61:7a:05:28:33:65:7e:1f:78:
bb:50:cb:48:89:b0:35:04:d2:b2:fc:23:52:28:f4:2b:1b:26:
a6:1c:2f:a5:2c:03:13:ec:b5:50:3c:93:76:29:21:b4:94:83:
5f:9f:61:2f:10:fc:4d:4b:01:21:1e:0b:bf:e5:de:d1:25:e4:
98:0d:c4:b0:7e:18:fe:55:62:91:38:99:69:ec:ca:51:9e:78:
b3:7e:b1:bc:36:e9:81:7a:a7:2f:c6:82:ca:2d:ce:7e:58:ad:
03:50:cf:3c:71:ba:84:25:4a:2c:f8:5a:0d:13:80:97:97:4d:
0f:7c:2c:f6:d4:1b:41:0a:5b:b2:ca:1f:eb:3b:8f:5c:fe:1a:
08:cd:c4:27:ab:c5:48:e2:db:64:7c:c7:b0:07:2e:5f:06:d2:
0d:89:2f:b8:77:3f:04:b8:e3:2c:c9:c9:96:f1:4e:49:6a:8e:
07:37:f1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:13 2025 by rpki-client