Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78292315-d5b5-4922-ad96-e4084c89ad66.roa
File: 78292315-d5b5-4922-ad96-e4084c89ad66.roa (raw, json)
Hash identifier: mOQLlYeaDJLB15pMq1yo3CQ2JYEDlnjIDa78U+M9jHk=
Subject key identifier: 0D:38:87:CE:11:37:F0:84:BA:30:B9:5A:3A:53:F6:0C:B0:4C:61:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C9B4DDAEFC4EDDCA9C96CF09677296C8038E3A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78292315-d5b5-4922-ad96-e4084c89ad66.roa
Signing time: Tue 14 Oct 2025 22:02:58 +0000
ROA not before: Tue 14 Oct 2025 22:02:58 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9b:4d:da:ef:c4:ed:dc:a9:c9:6c:f0:96:77:29:6c:80:38:e3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:02:58 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=99e6cc59114560f2f3bfc36ce59951fdb75090a1c90d97c9607dc03a63ee6a5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:1a:ee:3e:04:5a:8a:de:3b:c0:98:80:de:
99:84:22:26:1b:3a:f7:f1:8d:53:d7:80:3e:9a:73:
9a:71:24:50:28:40:b6:16:1a:7f:4d:f3:5e:b8:3f:
9f:14:df:db:e1:76:4c:83:9f:74:e4:bb:f1:b1:e4:
f3:25:af:4e:39:06:5f:7c:4e:e4:24:8a:84:1a:f7:
de:0a:a6:04:90:85:d9:f2:27:4c:2e:45:9f:8d:e9:
2b:e1:19:57:7a:98:f2:18:db:0b:b0:83:af:4f:b0:
50:05:70:91:61:d0:cf:ef:23:9f:bc:86:f1:b2:34:
6e:e5:6b:1d:92:7d:75:f8:47:39:43:9f:f6:9b:ad:
93:c5:e2:91:66:1d:87:01:4a:d4:83:05:38:c1:ea:
44:c3:81:ef:f9:f7:36:0a:15:c8:e8:6b:54:b3:1c:
94:8e:ca:51:f1:99:37:ed:72:8a:34:1b:dc:73:0f:
67:12:0c:ee:54:ae:3d:4c:f9:ef:1f:2e:88:41:96:
65:b6:69:8f:78:ff:03:71:ed:72:f7:ff:c3:01:c5:
09:d9:0b:85:be:58:2f:07:8b:5f:4a:1c:27:bd:0f:
66:fe:96:95:71:f4:7e:e7:20:42:4f:95:ea:4e:cc:
e8:e2:ef:7b:2f:d1:91:cf:e9:8b:55:39:2b:5c:20:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:87:CE:11:37:F0:84:BA:30:B9:5A:3A:53:F6:0C:B0:4C:61:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78292315-d5b5-4922-ad96-e4084c89ad66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.53.0/24
Signature Algorithm: sha256WithRSAEncryption
94:aa:d7:d4:a4:10:19:03:6c:dd:ed:71:7d:46:4c:93:9b:b0:
80:ce:1d:72:44:86:25:29:5d:77:e6:b1:d9:fd:8b:4e:f0:8d:
07:20:79:fb:c6:db:33:8b:5e:f0:de:bf:f7:d9:c8:32:d5:00:
d2:c4:ed:3a:78:70:fa:b4:2f:2f:5b:f8:e4:1f:32:5a:37:9c:
cc:e7:a2:62:27:df:ec:d7:ce:84:58:de:9e:4c:4e:c7:6f:fa:
89:08:06:76:cf:8c:c8:f4:25:70:83:11:e0:42:05:eb:40:cf:
9d:ad:1b:66:e9:2c:39:07:c9:16:18:0d:a5:22:8f:fd:98:04:
96:39:c4:90:fb:49:7a:19:e9:8a:49:1a:5d:f4:f1:68:e7:74:
dd:9b:04:74:49:be:5d:53:47:52:c7:34:11:3c:af:ad:cf:6a:
08:50:94:13:69:0a:8a:22:b1:5d:e1:42:4c:26:0b:b8:ae:89:
97:e5:20:03:cc:59:ee:ef:d2:20:b7:ab:c8:0d:63:fd:7d:32:
a5:54:88:43:84:2e:8c:7b:d3:71:65:e6:93:3a:f5:e7:e5:f6:
e6:1e:f8:31:61:1a:c6:93:1b:48:88:28:62:89:15:54:65:3f:
ce:6f:5c:7d:06:fc:85:a8:91:ca:36:6c:44:8a:47:08:1b:a6:
0d:28:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:10 2025 by rpki-client