Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa
File: e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa (raw, json)
Hash identifier: TX+Sz/dFod+WvirUJxIW852tJs6mJI7Dh7WgLvQzSBE=
Subject key identifier: 05:33:8F:BD:02:82:9D:32:51:E0:F4:6A:6B:CC:E7:C0:9E:00:A1:04
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06AEF766531841ECB3065FB82777003C3CB101AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa
Signing time: Sun 26 Oct 2025 00:20:13 +0000
ROA not before: Sun 26 Oct 2025 00:20:13 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:ae:f7:66:53:18:41:ec:b3:06:5f:b8:27:77:00:3c:3c:b1:01:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:20:13 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=65c99cab29f42c6e7896b2218b26fd1e75e6e819ad6a85508190b8ee8b176490, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:c1:88:fc:f8:c3:cc:36:53:20:f7:db:8d:
b8:02:e8:fe:e5:d0:2a:cf:de:95:d4:43:a6:04:2a:
cb:77:80:33:94:dd:bb:4e:cc:85:3b:58:78:89:3f:
d8:2e:ca:2f:b3:51:be:c1:a3:d7:a9:42:0d:6f:42:
dc:c9:38:c7:45:a8:20:4a:99:df:ed:00:3e:fe:a7:
d6:41:62:0d:31:85:9b:39:cb:eb:77:cf:fd:70:ff:
4f:56:37:5b:7b:66:9d:3b:75:11:61:b2:62:b4:29:
ec:60:08:74:1d:a8:49:39:1f:ec:c6:50:6c:cb:8c:
9b:0d:c5:02:50:3d:f9:9a:65:a8:44:e1:ab:5b:25:
18:b8:ea:62:a2:06:3c:35:9e:da:f0:00:c1:b3:33:
18:89:71:95:0e:14:13:1f:84:d6:0a:fe:c3:1d:2a:
f5:24:ce:b5:94:e6:1d:af:c7:db:46:f8:7b:9f:e0:
8f:83:f5:a2:21:50:e9:9e:66:3d:bb:d0:e2:ad:fb:
fb:87:ce:c9:c6:11:cb:b4:dc:f9:22:62:8f:c1:19:
39:92:da:77:e0:d3:be:5c:d0:9c:11:34:54:d0:e7:
f8:48:47:dc:83:c4:65:5b:22:3a:52:c4:31:70:88:
4d:1a:70:eb:86:52:96:ce:d4:9b:20:43:94:bd:c4:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:33:8F:BD:02:82:9D:32:51:E0:F4:6A:6B:CC:E7:C0:9E:00:A1:04
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e463e796-bd29-4ef8-8a0e-7dec0713ec4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.155.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ec:b9:e6:73:5c:0e:d8:8d:d9:26:de:e0:3e:b9:ff:0b:ab:
c6:d0:9f:4d:4d:e5:01:42:13:c1:c4:c8:db:34:ff:d4:b5:4b:
cb:0a:28:0e:71:a7:73:d2:19:e5:80:14:14:79:83:b6:d7:7c:
69:d9:e8:de:44:ad:2b:e9:e7:75:66:34:36:5d:95:07:0c:c3:
51:dd:cc:a7:87:5c:8a:bd:34:38:ec:00:37:36:29:02:02:4a:
e3:95:0a:76:4e:d5:33:e9:fb:2a:94:6e:f6:84:e8:f9:62:03:
b5:25:e3:2b:00:bd:cb:49:f5:b4:ba:63:e3:43:05:af:7a:18:
b3:c9:6a:ff:cb:8b:18:d5:88:87:25:23:2d:71:ff:e8:01:33:
ad:7d:05:9a:52:fa:e6:cf:bb:db:35:7e:67:76:c7:df:f8:83:
ed:ef:b1:46:1f:8b:0a:17:66:e0:64:56:d1:d0:88:74:82:e3:
08:07:b1:d2:47:ac:fa:d2:70:8a:8c:e6:8e:6b:a2:96:ac:46:
dc:69:ef:4b:2c:ca:5e:41:0f:b0:29:fa:cd:6d:78:79:f4:87:
25:3a:d7:5f:0e:ea:69:6c:f5:b3:2f:6a:38:0f:39:ff:f6:18:
8d:13:81:63:33:7f:d8:1f:f4:43:4d:1c:87:13:16:93:99:d5:
8d:42:12:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:19:19 2025 by rpki-client