Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b17fce5d-343e-432c-9c33-31cbcba6ba30.roa
File: b17fce5d-343e-432c-9c33-31cbcba6ba30.roa (raw, json)
Hash identifier: 7adImQbxS5mvDGOTC4SxtXwaG7+0MLYJ3RpsgPfCgWA=
Subject key identifier: 21:A6:48:D2:58:88:74:12:A5:42:AB:B7:86:4E:8D:60:66:AA:5C:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49B8052AEF6112FF49171B59CC677CD30BA6F2D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b17fce5d-343e-432c-9c33-31cbcba6ba30.roa
Signing time: Tue 14 Oct 2025 22:42:43 +0000
ROA not before: Tue 14 Oct 2025 22:42:43 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b8:05:2a:ef:61:12:ff:49:17:1b:59:cc:67:7c:d3:0b:a6:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:42:43 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=5323ec48d33c4c11cae897f748f728f2a078441fd005d6cb27681e8c4291e5c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:30:bb:16:9a:40:f4:8f:bb:62:f1:a9:db:
4c:5d:e7:fd:8a:30:05:28:36:63:64:16:e3:a1:96:
f2:76:b8:51:a0:62:29:47:bf:f8:49:66:76:52:6e:
f5:a7:6c:46:a3:05:4a:b8:93:d5:4f:b4:b1:e1:f7:
1d:ea:f8:de:9c:84:5c:17:8a:9b:67:ad:90:a9:87:
68:5f:e4:13:21:b1:23:3c:8c:be:9e:2c:cf:d9:f0:
cc:1a:91:73:77:80:2a:2d:d9:b6:0b:35:d2:f4:26:
30:4a:55:20:68:de:c7:8a:58:54:19:75:8d:e0:0d:
fb:a1:2c:15:49:2b:c1:28:ca:a1:66:73:c4:f4:4e:
b2:90:86:36:28:94:b8:59:24:76:01:0e:24:06:c8:
27:29:48:e4:f0:a6:b7:4e:05:44:ac:0d:c5:45:aa:
93:4b:63:d3:94:ce:b9:64:d9:25:8f:1c:bd:10:be:
9a:0d:c6:24:3a:2c:43:11:72:66:6f:f6:c7:d5:46:
72:57:35:ce:0e:3b:89:f8:16:75:68:d2:8b:90:68:
ec:6d:88:78:43:ca:ed:5f:26:6a:22:9a:5e:f3:09:
44:82:1b:93:6f:15:37:06:78:23:4b:12:69:63:4f:
1a:9d:92:dd:0e:47:a2:99:02:88:63:e2:38:84:b8:
a7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A6:48:D2:58:88:74:12:A5:42:AB:B7:86:4E:8D:60:66:AA:5C:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b17fce5d-343e-432c-9c33-31cbcba6ba30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d1:c8:f9:e6:e8:11:5c:05:24:15:8a:7e:d2:74:cb:c7:89:
31:80:34:28:51:26:ae:df:5f:33:05:3a:8c:5e:df:07:62:3f:
43:9f:4c:89:43:bd:5a:71:5b:a6:97:fd:77:b8:58:4b:a2:38:
4a:f5:0a:17:4c:02:92:2a:d9:33:46:2a:c1:01:e5:c1:92:3d:
69:30:e2:23:b1:2e:d8:df:89:b6:3c:fa:1f:8e:9d:82:ea:f6:
a3:c4:fa:62:14:2b:42:03:9e:57:ea:34:15:17:e8:b1:7e:cc:
f3:61:02:8d:ca:c3:e5:5b:85:55:95:3f:e0:bc:5b:fa:09:02:
25:c4:b4:c6:ae:f0:02:31:51:d5:e6:a3:ce:bf:59:ce:51:99:
bf:a5:45:b1:86:ab:0b:d1:8a:b0:cf:64:03:05:26:d1:b5:a0:
1c:b5:a4:89:cc:0a:89:fe:d1:52:4a:0b:b2:3d:0b:61:f9:64:
28:a7:77:17:9e:b0:03:40:be:e8:df:64:f4:31:fe:52:e5:a4:
5c:0a:0a:74:70:d9:33:8e:aa:3e:f5:62:46:ad:91:22:6a:3c:
35:0d:49:fd:87:6a:16:25:60:5d:a4:2a:ec:af:1c:f5:83:51:
e8:cf:b0:c0:c7:d6:ac:af:b6:d6:7c:cd:aa:73:5a:3c:55:09:
a8:85:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:22 2025 by rpki-client