Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d185be-4e5f-406c-b893-8eba7118f779.roa
File: 53d185be-4e5f-406c-b893-8eba7118f779.roa (raw, json)
Hash identifier: HFaDd/I6glw9VwN9gNkBGgcjYIAdZBwtQleNUbnI56E=
Subject key identifier: 0E:60:3C:12:60:41:56:98:FD:8B:27:29:D7:1C:B0:33:C4:9D:4E:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 683EB348A95EFEE9AF82E96089596548DD721E3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d185be-4e5f-406c-b893-8eba7118f779.roa
Signing time: Tue 14 Oct 2025 22:52:04 +0000
ROA not before: Tue 14 Oct 2025 22:52:04 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3e:b3:48:a9:5e:fe:e9:af:82:e9:60:89:59:65:48:dd:72:1e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:52:04 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=2b667e0af7c55262cf1d31d3c9c920ddcc8a25d3fa31c3410a221ab8bb904a88, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:fa:3a:b4:31:11:44:41:35:24:64:4f:27:
9e:82:7b:48:55:b6:82:98:93:05:d2:50:58:78:e0:
1f:ca:10:72:9e:e8:8b:b3:59:b1:2f:c2:17:4d:b7:
ac:4c:db:48:7e:d7:65:d2:14:57:80:60:d4:52:98:
e3:18:ed:6a:d2:b3:80:b6:81:3a:03:2d:4d:cd:a9:
ff:5b:89:b0:de:26:69:15:74:9b:26:e2:9b:51:5a:
73:f3:d6:c5:bc:16:0a:9f:8a:77:5d:6d:34:8f:8d:
1b:ce:3f:d8:63:95:b1:fe:eb:3d:eb:a1:09:5d:0c:
cc:83:b4:74:7f:64:a6:e3:83:2b:bc:e9:45:0d:c8:
d1:ee:1e:27:7b:70:c2:ad:4d:3a:98:cb:85:6d:b9:
5d:43:e0:75:c0:0a:4d:5f:65:ad:56:2f:da:af:c1:
cd:04:0b:78:f4:27:78:2e:eb:79:91:d0:a3:46:4f:
b9:f8:96:b0:32:27:0b:36:4c:15:14:2c:f1:8e:31:
25:32:bb:47:ac:d3:19:84:13:d2:79:8c:1a:68:a8:
47:8a:ea:39:ce:31:5e:80:59:23:bc:e4:97:11:39:
1a:7b:4c:ff:bc:0c:9c:82:34:65:dc:5a:f4:e1:01:
70:5f:89:60:d0:0a:c3:a0:6a:4e:35:6b:f4:10:4b:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:3C:12:60:41:56:98:FD:8B:27:29:D7:1C:B0:33:C4:9D:4E:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d185be-4e5f-406c-b893-8eba7118f779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.152.0/24
Signature Algorithm: sha256WithRSAEncryption
78:eb:ee:c3:4c:c5:92:f6:2c:77:79:53:71:cb:86:3f:e9:90:
e2:09:6b:23:50:ea:a6:ae:a8:99:3d:43:1d:0a:b2:7a:4f:ec:
bc:70:1a:5e:d4:0d:18:d2:22:ed:1c:fe:03:50:45:40:e3:7c:
84:42:4d:f2:b9:e2:e9:50:d8:79:d0:99:c0:c6:33:a4:8d:48:
23:62:cb:a5:46:a0:68:67:9d:83:e9:ea:06:c8:c7:ba:99:0f:
ad:ab:71:de:cd:ca:b0:65:c0:4f:2e:e4:3f:9c:2a:ca:83:48:
37:41:4e:5e:31:e7:1f:b5:33:c2:7f:12:53:16:1e:6e:12:16:
9f:10:82:c9:6e:d4:f6:40:b4:f1:03:ec:fd:09:be:de:27:a2:
bc:f1:07:25:43:6e:9b:aa:14:14:76:b8:09:93:00:e2:92:8c:
d2:dd:e4:11:93:0b:a1:9e:7a:a3:f9:7a:cf:b0:3c:78:de:96:
98:05:1b:41:d4:ca:4d:61:61:2a:65:73:42:26:a9:4c:b3:08:
27:7f:ad:c8:d5:01:cf:96:06:b4:0a:54:cb:10:8a:33:37:01:
87:aa:23:ed:a5:6f:40:ae:51:b0:de:b2:be:d1:c0:15:8f:a0:
6b:97:ab:3d:e8:ce:39:29:e3:01:79:75:2f:4c:b9:71:e1:64:
f6:76:ac:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:02 2025 by rpki-client