Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbf43d1-e3f6-4089-90ff-69e637e585e7.roa
File: 6fbf43d1-e3f6-4089-90ff-69e637e585e7.roa (raw, json)
Hash identifier: FjOHa1NQ6YUiL07a3i4ZkFfKVBwCG7jCDrx4jWpY1so=
Subject key identifier: 9D:5B:73:87:34:BF:5A:9C:6C:6C:C3:1D:79:8B:D1:E1:47:D8:7E:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F2BCF616BC30CD3A7A7476021F12F65A53E6C5C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbf43d1-e3f6-4089-90ff-69e637e585e7.roa
Signing time: Tue 14 Oct 2025 21:52:41 +0000
ROA not before: Tue 14 Oct 2025 21:52:41 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2b:cf:61:6b:c3:0c:d3:a7:a7:47:60:21:f1:2f:65:a5:3e:6c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:52:41 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9cdc47c48f9cc172b4894d30e14a4788508c9b1de33df63c5f1ec802b0c3d3d3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:38:6d:64:af:aa:c4:10:50:51:ac:e8:88:
4b:01:93:d9:71:cc:cd:e7:af:95:cc:d7:c4:18:34:
f7:cb:f4:7b:6a:dc:39:62:e3:7d:71:8f:f3:b2:e9:
86:43:91:fe:e8:c5:8e:27:4b:c9:29:5f:65:d8:b8:
47:c2:44:f6:7d:17:77:e9:ea:28:6b:87:d0:15:fc:
12:d2:cb:5e:2e:dd:40:e0:67:90:17:78:a4:6b:8c:
2c:33:7d:8e:ff:1d:06:6a:73:d4:6d:4f:48:c6:14:
81:28:d4:17:f1:f8:f7:5a:47:23:e4:f3:5f:53:4c:
a4:64:b0:c0:00:92:52:69:10:85:aa:eb:54:56:10:
7d:c3:82:8f:2c:ce:84:9b:1a:76:5f:36:64:c7:9c:
6b:39:1b:6a:31:13:3a:be:e1:29:79:ba:9a:6e:ba:
fc:42:7f:6e:d5:01:df:c9:1a:96:13:fb:ff:6d:7f:
63:da:97:17:20:ad:33:a4:49:34:f1:6c:e2:c5:c4:
56:7a:91:89:1e:52:00:bf:06:68:fd:8f:2c:63:04:
ce:b9:01:89:b5:b9:92:fe:4d:c9:48:93:ce:36:7f:
ac:d8:4b:dd:0e:15:4d:8e:32:e5:aa:eb:12:39:fc:
1e:62:5b:2a:f0:44:79:f2:44:de:dd:e9:2b:85:d3:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:73:87:34:BF:5A:9C:6C:6C:C3:1D:79:8B:D1:E1:47:D8:7E:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbf43d1-e3f6-4089-90ff-69e637e585e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.23.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:30:9f:2a:e0:40:82:30:70:d8:78:99:41:2e:6b:de:cc:c9:
93:06:db:c0:83:97:9c:06:7d:96:7a:01:65:33:aa:80:0e:0b:
56:5c:ed:dd:5b:3b:d9:cb:41:9f:a7:8c:5d:e5:e8:9e:d3:30:
a3:b6:1d:31:a5:7d:0f:b1:70:06:fa:ab:77:c1:9d:39:ac:40:
f6:43:b4:03:4c:20:3a:c9:90:33:fe:29:ad:2a:06:f7:6b:2b:
6f:6b:bb:d3:4a:85:9d:37:84:54:7e:20:cb:cb:6a:66:e6:db:
6d:93:04:aa:80:64:08:f2:4b:8a:6b:70:db:f8:bc:65:27:b4:
97:52:a5:c3:e0:0d:4c:10:85:30:3a:9c:fb:4a:c5:6b:5c:b9:
57:c6:cc:e8:e9:22:0d:18:87:27:e0:4d:17:06:6e:8d:30:3d:
b1:00:48:04:46:51:6c:37:a9:57:a8:5c:f0:ed:ef:7b:c9:00:
df:3a:60:f3:81:8c:a4:ad:4e:9f:9c:e7:e0:c6:9c:ba:bc:e8:
b0:9d:fd:0f:63:a6:da:3c:a3:1e:94:ef:92:9a:57:5e:14:46:
58:0f:d4:49:19:d1:04:fb:67:95:26:62:7a:2e:64:27:05:d1:
73:df:b0:49:44:5e:54:b6:7c:e1:9a:0f:14:75:7b:d9:c1:a0:
2d:15:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:43 2025 by rpki-client