Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef6266b-fc21-4eb9-9344-a81ac870664b.roa
File: 8ef6266b-fc21-4eb9-9344-a81ac870664b.roa (raw, json)
Hash identifier: gIaQIgOy4v/xhN1fyxw7uo2vbVDy/qyyLaMwSTEUUnw=
Subject key identifier: 63:C2:40:83:38:AD:1E:20:52:2C:3C:96:F2:DE:C6:7F:7D:CE:1C:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F00B002098645CFCB4EE20FC19A4CABD282D8A1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef6266b-fc21-4eb9-9344-a81ac870664b.roa
Signing time: Tue 14 Oct 2025 20:39:33 +0000
ROA not before: Tue 14 Oct 2025 20:39:33 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:00:b0:02:09:86:45:cf:cb:4e:e2:0f:c1:9a:4c:ab:d2:82:d8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:39:33 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fe91803cb98bb723aa03e336d1eee1b9db5365aea5888d0587d23f9bbaf33e6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:06:7f:15:e0:eb:dc:35:1a:11:82:4d:e3:
4e:d6:49:2e:b7:4f:55:a0:63:d4:7c:eb:d6:80:10:
83:21:fd:ea:d4:d4:f0:e5:35:aa:0e:93:ef:bb:64:
ed:52:35:f9:ad:16:76:d1:db:0b:9d:d6:ce:43:3a:
fb:94:cf:2c:cc:fb:7e:d1:dc:a6:34:99:d2:19:37:
d5:4f:0b:88:1f:e4:1d:29:37:1b:98:19:30:5f:eb:
29:d5:23:0a:c1:e3:ac:9c:28:b8:04:36:fc:56:d4:
7b:e6:55:d3:24:4c:a9:c6:38:f9:b1:cf:35:3a:c9:
84:33:66:85:b6:4a:e2:5a:b4:eb:ee:92:3d:b7:cb:
96:5c:4c:5c:ac:97:68:ce:6f:74:52:04:e5:7f:ca:
fe:16:35:d0:47:a1:36:c5:fd:31:4e:1c:fa:a8:da:
a9:55:ae:e9:56:ea:9f:1e:51:be:07:2e:48:f3:2c:
23:ea:ea:69:d3:76:9a:6e:fb:ac:81:aa:01:7b:ae:
55:c6:44:d9:01:b8:4c:bd:25:0b:7c:27:4c:f2:8a:
37:a7:35:3e:c1:d7:a4:71:9f:05:0f:64:3c:fc:e9:
f5:44:40:31:f9:1f:95:13:a4:8d:38:47:1c:01:45:
0a:a7:70:c6:35:dd:cc:7f:5c:58:a6:80:52:e2:9a:
46:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C2:40:83:38:AD:1E:20:52:2C:3C:96:F2:DE:C6:7F:7D:CE:1C:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ef6266b-fc21-4eb9-9344-a81ac870664b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.233.0/24
Signature Algorithm: sha256WithRSAEncryption
34:88:b5:66:0b:99:a4:df:b3:b5:06:0a:47:5e:a4:ac:ed:05:
97:5a:d9:39:ab:cf:ae:7e:8c:f7:26:dc:54:65:ce:73:d2:e3:
3d:83:bc:bb:3e:4e:a5:fd:d9:48:6d:64:76:fa:17:eb:eb:7d:
68:5a:e8:25:28:ce:ec:f8:2c:0c:49:ff:ce:dc:48:09:1b:87:
a9:16:e0:52:19:ae:b5:55:9e:57:9c:d5:94:fd:ff:88:19:eb:
81:42:5a:36:a0:bf:32:8d:b7:e5:7e:ac:f3:07:0d:07:8e:ba:
fe:12:d2:87:8d:04:a3:10:4a:d1:d5:93:52:a5:7d:fd:35:d7:
28:dd:14:8c:0f:f4:9e:b6:e3:a0:56:c7:65:d2:b1:0f:45:b1:
13:08:f7:39:6d:34:4c:10:20:9b:dc:e4:8e:bb:70:f4:19:5b:
dc:7e:21:55:98:f6:4f:cd:0e:3a:57:12:35:eb:3e:a6:12:01:
59:31:4a:43:dc:d4:a4:a7:72:f6:cb:70:de:3c:47:99:ec:1c:
60:80:e4:58:7d:4d:d1:dc:1b:ca:d2:f5:5d:02:b7:cc:2a:82:
ea:b9:d5:f6:bd:8d:26:6b:62:95:db:12:44:f3:47:da:68:18:
b9:40:e6:7b:5d:48:37:76:b5:a8:7e:50:71:36:4f:9b:12:a0:
55:26:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:39 2025 by rpki-client