Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33cb594a-82aa-4002-a7b8-c0d528a205cd.roa
File: 33cb594a-82aa-4002-a7b8-c0d528a205cd.roa (raw, json)
Hash identifier: OZL3oi6q/i8h4nBIuX30PfCEPj9ytVxgEVr48OisUuU=
Subject key identifier: 59:CE:05:EB:34:CC:2E:10:8D:50:BC:77:F3:0A:3B:4C:6B:15:C3:A9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3365D98B6E9A05CC35ED6120AC17AAC70663A089
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33cb594a-82aa-4002-a7b8-c0d528a205cd.roa
Signing time: Wed 15 Oct 2025 17:42:03 +0000
ROA not before: Wed 15 Oct 2025 17:42:03 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:65:d9:8b:6e:9a:05:cc:35:ed:61:20:ac:17:aa:c7:06:63:a0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:42:03 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=00b22ab7d18e3a8d39f10a9ca300def360b49354e31f8dc5c8b66a25bb1b5457, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:45:b2:89:2d:c9:d9:56:0e:36:34:15:1c:
5d:e1:30:5e:45:fe:61:73:2b:e6:62:74:43:3f:2b:
c6:49:52:cf:4f:4b:5e:02:e7:57:cf:dd:d7:d5:7b:
a2:ee:6b:fe:90:7a:68:ef:c9:a3:6d:2e:b6:0f:95:
7f:08:d9:53:23:c2:95:08:6f:75:44:40:f0:8e:6f:
5e:75:7c:95:96:23:29:c0:2c:30:5e:a2:1c:73:63:
4d:53:53:fa:cc:04:cf:f5:a0:90:46:64:ff:cc:01:
20:88:15:ee:a5:73:b9:19:f4:ba:94:32:9f:41:c6:
26:f6:3f:7e:28:f9:40:6f:05:9a:04:be:54:94:11:
ce:1f:2c:fc:cf:4b:60:88:8a:5b:45:13:ae:31:e8:
a3:e4:54:0c:0f:7d:c9:c7:9e:d5:f2:30:cc:2c:78:
f8:7f:08:6c:1c:1d:76:6c:a0:99:89:4f:a0:b8:51:
0f:33:e1:e6:42:0d:71:7f:5b:65:f7:82:97:18:70:
70:61:57:32:f3:f0:40:dc:70:09:eb:8a:7a:a8:5b:
56:d6:4b:d8:fe:89:3d:98:63:a2:01:3d:63:d5:57:
9e:b3:7f:95:29:02:d0:c4:54:f4:c4:d0:36:44:48:
38:e7:33:63:20:4a:ef:56:a5:26:25:77:5f:91:1d:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:05:EB:34:CC:2E:10:8D:50:BC:77:F3:0A:3B:4C:6B:15:C3:A9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33cb594a-82aa-4002-a7b8-c0d528a205cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.120.0/21
Signature Algorithm: sha256WithRSAEncryption
14:1f:5b:1d:33:16:d5:a7:ff:c0:57:b7:53:ff:02:11:6a:f5:
e8:03:33:a6:63:e6:1c:44:52:66:0d:fa:81:c1:05:fc:cb:f0:
7a:86:c4:60:91:ed:82:97:4a:55:8d:01:2c:69:ce:b5:04:52:
6f:fc:68:60:63:70:f2:ec:72:32:6d:81:c5:e7:8f:7f:15:9e:
fe:90:08:80:e6:d8:f9:d5:53:97:fc:be:e9:fb:1c:c9:b8:1f:
7f:c6:25:db:5d:71:ac:cc:b8:40:3e:3c:c3:6e:5f:56:65:53:
8d:55:a3:7f:b6:c9:ac:6a:fe:dc:11:32:4b:80:0f:22:e2:fd:
ad:eb:34:9e:1f:6a:4d:9d:7f:e1:9f:9e:94:ca:32:aa:8a:35:
ef:a7:10:7d:14:5e:f2:90:d0:9a:92:ea:26:9d:9e:5d:44:e1:
ff:d4:81:c3:be:1e:e3:a6:21:b1:69:0d:61:62:0c:19:b1:0d:
89:75:26:6e:dd:cb:97:6a:5a:ac:48:7c:af:03:62:4e:40:0d:
06:5c:cc:63:fd:ba:35:4f:cc:01:d3:a6:10:fa:72:48:9e:35:
dc:2c:e1:13:e5:62:68:67:ff:9c:6f:6a:7d:0c:e9:8c:b8:0a:
60:46:78:c4:cb:d8:31:32:1c:e5:46:e8:43:e8:eb:55:18:55:
6a:2c:09:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:20:11 2025 by rpki-client