Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c458add-74ef-413f-b043-ef1e7c4e75e3.roa
File: 8c458add-74ef-413f-b043-ef1e7c4e75e3.roa (raw, json)
Hash identifier: UrWUPv0Y5WEnB8pmUjGyVLG9DbYRGEJ17ExIAOhucE4=
Subject key identifier: 16:05:7E:13:EE:50:79:FC:C1:04:A3:A8:F2:CF:0D:02:9F:AE:02:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0612BA7411462466C52CE57FE51F42989CF4886A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c458add-74ef-413f-b043-ef1e7c4e75e3.roa
Signing time: Tue 14 Oct 2025 19:41:54 +0000
ROA not before: Tue 14 Oct 2025 19:41:54 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:12:ba:74:11:46:24:66:c5:2c:e5:7f:e5:1f:42:98:9c:f4:88:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 19:41:54 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9526c44c1a341bec217d1bba9c9043b1e5c81632ce8b36cb86a5f15451963ac5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:5a:96:88:df:6f:73:c7:9a:ec:e3:f4:09:
9c:49:82:9a:74:db:3c:75:a7:92:31:12:dd:55:30:
e6:12:11:3d:a9:74:2c:5c:c1:36:f5:a6:c8:91:59:
b9:5b:3b:a1:c7:02:35:55:76:fc:51:55:a8:28:88:
2e:4e:5a:a5:97:3a:e8:ab:05:b5:0f:38:dc:56:80:
cc:25:7d:77:c0:53:c5:68:ff:6f:c0:04:f0:d4:5b:
5d:49:57:fc:4b:45:20:2e:6f:2f:89:ab:53:4e:4f:
9c:19:11:f7:4b:f2:78:a5:68:a7:6d:5e:27:d0:0d:
41:2c:a9:ba:1f:7e:e9:2b:aa:d4:68:07:4c:f7:ab:
38:5f:d7:4a:d5:62:87:38:aa:27:5a:b4:6c:53:7e:
4a:c9:d0:87:21:e6:31:b8:71:95:5f:80:85:df:fc:
29:2b:7e:ae:ad:1f:39:aa:40:bf:49:d5:23:27:10:
11:11:06:82:14:b5:0e:3e:f1:93:50:9c:e5:65:c8:
0f:aa:dd:a1:15:4e:de:21:36:42:75:84:67:3f:c2:
fb:eb:4f:bd:35:44:86:05:5e:39:49:fc:63:57:a4:
e7:0c:26:8b:12:5d:0e:40:30:ff:36:43:19:1f:c7:
85:a5:78:56:91:7c:90:77:42:07:68:f7:f3:84:40:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:7E:13:EE:50:79:FC:C1:04:A3:A8:F2:CF:0D:02:9F:AE:02:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c458add-74ef-413f-b043-ef1e7c4e75e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.149.0/24
Signature Algorithm: sha256WithRSAEncryption
88:04:0d:58:53:ba:b5:72:c0:34:a4:51:6e:ea:ef:fd:5f:77:
fe:76:0b:7b:58:19:6b:5f:26:43:30:42:aa:c1:eb:dd:60:1e:
e8:0f:59:2b:01:9f:c5:26:85:c7:72:ee:a7:cf:e4:d5:2a:b5:
e4:bd:ae:e1:b3:ff:87:a1:a6:47:df:52:44:95:43:7d:ea:d5:
e6:47:83:8d:d8:4b:0a:61:50:8f:68:74:cb:fe:8f:d9:61:0a:
a0:66:96:07:c2:70:c6:24:95:55:d8:54:41:4c:22:88:a0:f2:
1d:b8:bd:13:9e:b4:79:09:34:fe:65:c1:01:a1:64:50:cd:0d:
e8:78:33:ba:00:16:51:7d:8d:85:ff:b9:20:8c:ec:05:a1:70:
11:c4:f5:2f:74:0e:49:71:3b:f4:f2:b3:4f:19:df:6f:28:c7:
2b:47:fb:0c:9a:75:c9:0b:4c:56:d3:db:37:b7:8b:c8:0c:bd:
de:bf:76:71:13:9f:0d:25:ad:00:9c:13:da:b3:9f:08:84:98:
75:34:be:5d:a8:cf:51:eb:a6:98:8e:80:a6:c5:46:8e:2d:80:
68:36:71:70:62:a2:7b:ae:e7:f3:d2:e9:be:c4:5b:c7:fd:19:
ea:b3:1f:14:91:74:61:ff:95:9c:17:d8:c2:f1:49:98:20:58:
ca:3a:16:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:00 2025 by rpki-client