Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa
File: b7247667-78f2-433e-a9d4-4a2073e18b85.roa (raw, json)
Hash identifier: lMy0x39a6vB7TdTKOjsyB/YwApAZ+HFXh1YdFn6CYIg=
Subject key identifier: 1C:48:75:61:88:14:6F:6A:6F:5D:05:1D:AE:2C:E6:2B:26:2F:19:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A6E0F9C1AE8C17E24360FA449AD3F6B4CEEBC04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa
Signing time: Fri 03 Oct 2025 15:01:03 +0000
ROA not before: Fri 03 Oct 2025 15:01:03 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6e:0f:9c:1a:e8:c1:7e:24:36:0f:a4:49:ad:3f:6b:4c:ee:bc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 15:01:03 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=3e6cc8447ba1b0050b4c702cd786d8a7cfd3153bf3e0ac9700f725e7b29f43e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:e2:44:b2:e5:4b:92:bc:51:1b:18:56:f2:
df:ff:d3:4c:ec:56:c9:36:0c:a3:31:69:3a:a8:6a:
50:de:1c:71:cb:7a:12:54:40:a0:a4:a9:92:4a:6e:
da:f5:84:1b:f6:28:33:ce:df:52:b1:e6:53:eb:fd:
cb:4a:36:d8:04:41:a2:4d:5e:8a:17:72:bf:f8:e6:
39:0c:78:ae:cf:1b:1b:7e:5f:a7:32:f9:78:33:14:
2c:85:cc:12:54:07:0b:29:79:42:d8:76:3f:7d:a1:
c9:90:07:0d:c2:37:51:fc:82:34:1a:77:57:d3:6b:
3d:58:2b:b5:66:85:fd:21:0d:6a:ee:f3:e6:74:f0:
97:3f:55:39:cf:10:2d:7f:07:05:d7:10:53:00:37:
3c:5b:e2:80:24:65:e8:8b:65:2b:01:f5:1b:3a:b4:
1d:1d:64:cf:ee:f7:d7:c1:b4:f7:75:22:fc:13:1d:
8e:37:74:91:63:9e:4d:a7:da:c2:43:ec:2e:67:18:
2c:b5:6f:69:ad:48:7a:71:e1:07:16:ce:04:4a:c4:
2c:1d:45:b9:a7:bb:69:2f:c2:17:c1:a9:a0:92:90:
f6:9b:a8:91:f1:f4:03:51:97:9f:f1:68:18:cb:9d:
0d:5f:e3:04:f9:dd:2d:08:e3:1c:ec:d9:75:a3:27:
26:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:75:61:88:14:6F:6A:6F:5D:05:1D:AE:2C:E6:2B:26:2F:19:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7247667-78f2-433e-a9d4-4a2073e18b85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.165.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:19:10:0c:0f:80:c5:45:0a:0d:04:21:18:2e:14:75:4a:ef:
c6:19:4d:8e:22:d6:ab:33:8b:26:56:83:d9:d5:6f:1a:22:cb:
55:f6:d6:9c:d0:ea:1a:19:0c:f3:19:65:2d:49:77:56:6e:81:
d5:59:f6:e0:24:39:b4:df:63:0b:88:7f:a4:63:d8:57:54:a4:
2a:a2:d2:70:3a:58:cf:b3:40:d4:9f:79:7b:05:bf:48:dc:0b:
2b:40:5d:80:7c:73:b3:57:ed:d0:ba:24:78:f6:5f:8a:f9:85:
43:36:18:c1:34:15:37:c4:14:97:08:5f:0b:e6:d9:85:d1:c4:
ad:c9:7e:4c:e7:9f:a2:f5:50:59:af:1e:45:70:1b:bd:ed:c3:
48:d5:df:0e:73:ec:78:4f:12:1b:d4:d7:31:32:ce:8a:94:42:
5f:5b:5e:50:b7:ae:e8:f6:c6:77:31:40:eb:0a:54:7e:8f:0c:
b0:43:e2:3b:89:2c:2b:1f:d6:10:0e:f1:64:a3:af:bc:2c:04:
e0:8a:ca:bc:0e:93:f7:9c:9d:1f:d4:3a:0b:a3:a6:ab:2e:7a:
7a:79:40:61:8b:e5:e7:5e:fb:74:53:1b:e7:b2:31:1c:73:07:
54:25:e4:38:71:f4:16:90:46:ef:23:88:39:57:d4:a3:4f:69:
8a:6a:6a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 23:56:43 2025 by rpki-client