Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0d7097-320a-4ee7-9242-86d4edcca06c.roa
File: da0d7097-320a-4ee7-9242-86d4edcca06c.roa (raw, json)
Hash identifier: ZTJXF92oRJzUVkzwtI5p/vzre7SJHazi8hHcSCUn18s=
Subject key identifier: 09:71:7A:1B:F3:41:59:37:21:7D:31:ED:8D:4D:DB:13:08:8F:46:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47F6428DD282A564B376157A48EBEE69F83892BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0d7097-320a-4ee7-9242-86d4edcca06c.roa
Signing time: Wed 15 Oct 2025 17:21:49 +0000
ROA not before: Wed 15 Oct 2025 17:21:49 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f6:42:8d:d2:82:a5:64:b3:76:15:7a:48:eb:ee:69:f8:38:92:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:21:49 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=490b501e1b2dcc770f07ccaa523dbcdc8efc444c783da6b8a5f4a7ad21df7b5b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:ce:03:b9:64:53:6b:45:b3:74:d8:e5:a3:
25:48:6c:d7:af:d9:df:17:c3:f8:6a:b4:0f:15:30:
3a:36:af:9a:51:21:61:35:3f:49:3a:25:c0:3c:d8:
a5:21:85:92:4f:09:ff:f5:51:f0:d1:1a:3a:79:f3:
07:47:47:ff:26:91:d3:d4:2b:39:6e:d4:92:9c:df:
2b:e3:4d:d0:6d:dc:14:17:3e:e8:ed:b9:8e:f4:33:
0b:dd:14:fe:1f:b3:1c:74:a8:07:d2:32:33:ab:16:
18:5f:65:54:92:7e:a6:35:d4:c0:ab:ee:af:fd:b1:
da:f9:8d:20:04:01:1c:04:52:9e:46:bb:b4:06:e4:
42:6b:88:45:d4:81:1e:80:48:05:7e:98:44:b5:6c:
81:2c:70:14:bf:dd:0e:85:63:c4:fd:87:28:f8:ad:
51:5f:55:34:2c:fe:0b:45:21:1b:6d:b2:0a:3b:55:
b8:3e:4f:20:6b:0d:7d:60:3f:8c:9b:ca:68:d5:fd:
91:c7:e9:37:2b:87:1b:47:48:30:6a:84:23:96:de:
9f:61:a3:d7:f0:8a:bb:27:b3:f5:83:5a:83:04:d2:
53:16:3a:4f:e9:cb:bf:14:5c:eb:13:1a:99:c2:fe:
4e:98:9b:00:36:ff:b1:f5:b0:c5:70:04:5c:88:64:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:7A:1B:F3:41:59:37:21:7D:31:ED:8D:4D:DB:13:08:8F:46:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da0d7097-320a-4ee7-9242-86d4edcca06c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.75.0/24
Signature Algorithm: sha256WithRSAEncryption
05:04:48:c4:71:bc:8c:22:4b:76:5c:d6:bb:57:d0:97:5f:7f:
db:13:a6:56:f2:bb:0f:86:44:b2:f5:80:e3:62:e5:db:ac:08:
b2:c6:bd:0b:a0:4c:a8:85:d2:9a:68:41:74:cc:44:bf:0d:89:
7c:d9:35:e5:72:73:da:41:a4:93:a6:78:a7:75:3d:bc:69:4c:
ee:28:7b:ea:c6:c0:11:30:e6:a4:e9:05:52:d9:5a:d1:7c:4f:
a8:68:8e:62:ba:5d:b6:a5:05:f3:b5:29:7e:07:cd:c5:e9:c6:
cb:f2:16:b2:db:2b:52:3b:96:ec:b5:e1:92:75:95:df:05:34:
c2:ed:4f:b0:35:98:6e:ca:96:4b:9c:c5:19:97:79:df:96:f5:
45:f4:6b:4f:77:88:2d:00:f8:cf:e8:b8:f7:ad:8d:97:28:77:
ff:08:16:85:0b:a5:cc:60:26:9b:1f:b0:b1:21:13:af:a6:f8:
dc:ac:3a:b2:e8:ef:d1:81:c6:a0:15:ab:20:a0:d2:a6:43:5c:
34:b7:72:ef:2f:a9:1e:54:7d:57:da:e8:58:b4:8a:e8:4b:7c:
0a:9a:da:50:dc:08:ae:ff:7b:6d:24:49:ad:1f:f9:f2:9c:c3:
63:f3:44:fc:06:11:62:c2:53:de:78:07:bd:3f:ff:96:6c:34:
c9:14:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:34 2025 by rpki-client