Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2248d8c-f6e0-4754-b86e-1d2ab9a6a37a.roa
File: a2248d8c-f6e0-4754-b86e-1d2ab9a6a37a.roa (raw, json)
Hash identifier: Bqy7BTxIjJcgw5X0QTmLZNFVLbJIXuQTFExpFSYG2dU=
Subject key identifier: 05:11:59:28:93:7A:D5:43:F8:0E:5A:A5:FC:3F:AF:72:44:0E:9A:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5245627C2D4CDDDFC4CB5BC99E485C632929A2AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2248d8c-f6e0-4754-b86e-1d2ab9a6a37a.roa
Signing time: Wed 15 Oct 2025 15:13:01 +0000
ROA not before: Wed 15 Oct 2025 15:13:01 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:45:62:7c:2d:4c:dd:df:c4:cb:5b:c9:9e:48:5c:63:29:29:a2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 15:13:01 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=1777c6ce512f6163c3f3056feff23cd669db788264ba633a3928e7d0e8f162e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:e9:96:70:f7:b3:5a:9d:46:47:9d:05:63:
8b:69:34:cd:96:dd:01:51:ac:4f:d8:71:15:c1:66:
ea:c1:07:ef:0c:f6:7f:72:09:63:b3:58:fd:4e:1a:
92:d1:4e:2e:9c:60:ec:27:9c:f2:cc:1a:e0:a4:db:
ba:fa:27:96:97:7a:76:3d:19:c8:82:09:b8:e2:c0:
2d:a3:fe:55:95:85:37:fc:df:84:c7:7e:3f:30:ff:
e6:2b:af:7c:d8:4e:6e:e4:15:2b:a5:dd:58:93:88:
2f:42:ba:61:61:20:c3:15:26:87:e7:a6:1e:42:28:
2b:39:91:a0:6d:a4:1c:9a:38:92:1c:9c:a1:ef:34:
ba:10:06:9d:6c:17:e0:fd:1a:b1:d4:5f:3c:32:50:
1f:1c:24:9a:c1:d6:0a:ef:ea:82:50:76:65:da:1b:
31:a6:f2:39:c0:ab:c1:f9:60:0c:e4:2e:f9:2a:9c:
cf:c4:dc:38:e2:08:e4:2a:60:8c:62:f7:64:04:14:
af:4c:6c:e8:28:a6:93:d9:57:33:83:1b:8c:47:10:
88:ec:56:55:bf:5a:19:c9:2e:f1:63:c9:fe:c7:11:
a0:4a:ac:a8:36:15:78:af:52:b7:f5:6d:25:ab:34:
81:74:52:87:37:70:d0:94:bc:bf:cd:14:69:58:2d:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:59:28:93:7A:D5:43:F8:0E:5A:A5:FC:3F:AF:72:44:0E:9A:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2248d8c-f6e0-4754-b86e-1d2ab9a6a37a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.78.0/24
Signature Algorithm: sha256WithRSAEncryption
53:a6:70:5a:e1:20:43:f6:37:ef:65:91:c1:e3:75:65:72:66:
65:33:dc:a0:e3:9b:18:9d:c4:96:c4:5f:05:9f:4e:dd:99:2f:
1e:e3:87:9d:36:aa:51:ab:d1:12:ab:78:af:94:a5:db:a5:c0:
55:98:55:a6:0a:8d:86:c6:3f:5c:33:e5:86:9d:a0:77:85:89:
53:4d:1b:ed:75:ec:82:25:40:be:58:27:1d:9b:8d:ef:1d:d2:
50:ba:c9:6a:64:0a:b6:40:43:b7:66:89:d7:5c:7c:63:8b:9b:
c3:e1:31:44:ed:5c:06:22:99:6b:41:cf:cb:05:71:fa:e7:05:
b8:fd:ab:e1:43:06:61:9f:96:61:63:b3:a2:9f:16:4b:8e:4c:
b6:c0:03:53:8b:0b:3e:4f:0a:bb:68:f5:99:2c:7c:dc:45:d9:
23:48:cf:1a:6c:78:97:9a:07:09:39:d9:cb:3a:24:82:29:fd:
72:69:cb:8c:18:07:05:a1:d7:3a:74:fc:91:e5:f0:0b:27:6a:
49:87:3c:81:bf:3f:77:2d:2b:ea:a7:ee:58:70:a0:1e:50:d8:
a7:be:f9:5c:09:5d:6b:83:db:f7:4e:cc:ba:4e:c6:7c:71:d3:
38:6d:a6:be:ce:e6:ef:01:e5:c1:54:cc:78:56:3a:d7:2a:ea:
fe:fd:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:42:10 2025 by rpki-client