Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42773a73-c47f-4830-b5e8-359817bc853f.roa
File: 42773a73-c47f-4830-b5e8-359817bc853f.roa (raw, json)
Hash identifier: QA6wgo4uhLUhCZ6nTtJhVdwVFr4ssBba4AowJSW/rxE=
Subject key identifier: AC:A4:2F:13:2B:47:33:7F:74:CB:98:FA:3E:1E:53:05:E5:D4:29:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CCDE8E6CB2287D7D543D68626DB0C56D3B4A405
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42773a73-c47f-4830-b5e8-359817bc853f.roa
Signing time: Tue 14 Oct 2025 18:12:43 +0000
ROA not before: Tue 14 Oct 2025 18:12:43 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:cd:e8:e6:cb:22:87:d7:d5:43:d6:86:26:db:0c:56:d3:b4:a4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:12:43 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=34e3164d69cd5cfc5e6ffde96a647e8d40539a341cf30800c1b5f074a6a01ab6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:f0:a9:5b:31:32:6d:07:ee:5a:05:f2:fb:
93:72:ff:b1:cf:c4:42:19:fe:c6:58:50:34:3a:c5:
e9:f2:1c:84:bd:cf:71:2f:66:2b:69:30:3e:ff:e7:
55:1e:9a:45:bf:bf:1c:c4:10:a5:d6:4c:97:3d:6a:
0b:56:ff:df:2c:bf:65:a7:2c:5d:82:bf:71:b8:fc:
04:ef:64:ff:cb:ef:4f:a9:8c:16:31:b7:eb:06:24:
67:27:b5:98:60:4b:9f:8d:99:3d:03:8c:94:ad:57:
cf:46:8b:dd:8a:8e:aa:5c:fe:23:79:98:2c:d2:78:
9e:91:c5:2c:87:d7:fe:b0:5b:59:13:a7:f0:1d:39:
5f:4d:c3:b6:8a:b0:6d:ad:18:94:8f:06:a7:2c:66:
f4:d8:8c:7d:bc:fd:23:5d:b1:08:2a:32:75:6b:f9:
f3:d1:d9:a8:1d:82:fe:8a:b7:a4:c9:0d:c8:3a:81:
0b:1a:49:d3:5c:4a:34:17:16:2d:e4:73:86:7e:39:
7d:3a:75:15:7a:b7:e5:37:3a:1c:0b:b2:c8:58:56:
a8:da:63:b7:f7:4d:d8:3b:f6:fa:12:e5:01:35:c5:
d9:b1:2d:94:b7:47:36:22:83:31:f7:70:d0:35:d9:
b2:15:ff:ea:69:c9:cf:1b:e9:65:c5:b6:f3:d9:4f:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:2F:13:2B:47:33:7F:74:CB:98:FA:3E:1E:53:05:E5:D4:29:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42773a73-c47f-4830-b5e8-359817bc853f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:66:41:29:b1:17:11:23:ec:64:76:60:3c:a9:fc:48:88:95:
f9:c8:a2:d8:34:a3:33:03:79:cf:38:51:6c:c2:c7:95:c1:24:
dd:75:5a:16:95:c7:10:4e:99:ed:d6:9b:e9:52:6c:83:ba:bb:
c7:4a:31:11:71:a0:19:ed:fe:54:f1:54:e8:6f:7e:72:6d:05:
4a:a9:cd:43:5e:9f:a6:27:48:fc:55:de:7e:bb:45:ad:05:67:
f8:aa:05:59:5d:50:43:2b:71:7a:47:6c:65:85:b7:23:ad:e9:
46:33:5b:6c:70:15:02:c3:c4:6c:3b:3c:10:bf:55:ee:74:2c:
0f:5a:19:9a:36:4c:9e:22:90:5f:bf:59:db:8a:ae:d2:1c:3c:
7c:72:10:ca:aa:9f:24:8e:25:99:a9:ad:49:33:95:75:e2:03:
7c:7d:53:f7:93:77:89:a9:0c:41:05:f2:9a:b6:83:12:09:ca:
2b:c3:ee:36:5c:e0:ab:9a:d5:8b:30:47:dc:80:0a:f4:84:e5:
5e:f1:46:e4:b2:8a:39:0a:72:ba:8a:f5:1a:8c:51:6d:ed:75:
82:69:42:11:ea:40:2c:53:1f:3d:a5:31:bb:80:e5:61:c5:ba:
9a:b0:3c:81:1a:9d:59:8c:87:e2:4d:1a:34:01:83:18:d1:c3:
9b:16:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:14 2025 by rpki-client