Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa
File: 06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa (raw, json)
Hash identifier: SaRuE41kVOqtYMYbqTOyvgNNDUIICVH6CoucP4avipY=
Subject key identifier: 98:D4:23:68:1A:FB:60:A6:67:78:EF:F5:6C:25:D1:AD:A2:98:B6:79
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 674D48FF163C1D9BC88BADE7DE4F391D2DDA9777
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa
Signing time: Tue 28 Oct 2025 00:40:49 +0000
ROA not before: Tue 28 Oct 2025 00:40:49 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:4d:48:ff:16:3c:1d:9b:c8:8b:ad:e7:de:4f:39:1d:2d:da:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:40:49 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=f6593016ebde90048b1a9c509bdf3efc65ca1bef159d26274c410b1399669297, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:13:ab:8e:36:ea:03:a2:bd:28:31:9f:89:
3f:62:d9:fc:f2:95:4c:18:36:0f:88:3e:d2:bf:d7:
47:87:bc:58:68:50:ca:6d:94:60:fa:81:95:8a:5f:
0a:13:2b:a3:05:14:9b:50:f3:30:5b:a4:cb:53:69:
da:c9:40:cb:bf:1a:73:f3:5b:67:b1:fd:cb:b1:2d:
ef:28:d6:e0:bf:48:ad:bd:83:be:28:4d:5e:e2:71:
8d:ea:97:16:b7:66:0a:79:1d:b2:99:32:7d:63:a4:
52:58:8c:09:94:bc:b5:74:47:72:7f:61:a1:b8:ba:
04:cf:87:cf:13:3e:09:b0:5b:8c:b2:7f:d2:0a:de:
96:4e:26:bf:20:48:37:fb:18:b2:4e:32:28:06:f4:
de:ed:e8:6b:cd:8b:82:ab:70:bb:79:3c:cd:4f:9f:
f9:1d:a2:cf:e2:ea:dd:28:d4:55:a0:d2:4a:0f:f4:
2e:03:f2:ef:75:23:a8:09:f4:6f:d5:c8:56:34:0b:
58:07:f9:dc:76:b3:82:91:8d:b4:d2:a1:b6:d6:6c:
90:12:6b:67:dc:87:02:17:0b:0e:92:11:7a:bf:9b:
42:a3:91:52:a3:64:1b:f4:a7:8c:a8:a1:fb:c5:56:
37:48:c1:b7:5a:b0:dd:2d:4c:b9:80:3b:e5:2a:e6:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:23:68:1A:FB:60:A6:67:78:EF:F5:6C:25:D1:AD:A2:98:B6:79
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06c142ae-0e8b-4925-9ea7-e9d2e7f3bfb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.141.0/24
Signature Algorithm: sha256WithRSAEncryption
78:88:74:a5:4f:0a:89:c0:c0:22:c4:2a:6a:3e:03:c3:6b:02:
4b:ff:60:12:08:3c:e4:cb:de:c8:dd:b8:33:20:55:55:f2:98:
54:1b:b7:93:0f:24:28:4c:67:11:0d:6b:42:de:0a:54:3f:4a:
23:a1:ab:55:74:69:e6:1b:8d:51:3c:70:68:48:db:d0:dc:6a:
68:b2:53:74:8f:43:0e:da:3c:f8:17:65:31:fc:41:f3:35:e8:
49:91:31:ea:9a:c9:71:a8:0d:6f:4b:ce:07:d3:d3:32:bf:5b:
27:79:c1:d1:12:12:98:e4:c1:ab:ea:ea:56:db:dd:91:d0:ee:
28:27:1b:71:22:b5:b5:36:97:1d:67:c3:a6:8e:0e:89:be:c9:
50:a4:c5:08:d3:2a:a5:10:7c:ea:c4:aa:aa:7c:d7:6b:47:8f:
13:da:43:30:80:31:5c:bf:82:b5:3f:2b:c7:c4:53:ce:ff:31:
59:c3:9b:d2:f0:ae:2d:d8:47:82:5a:53:e5:2b:a3:d8:25:b7:
09:77:92:44:be:a6:7c:5e:34:80:d7:a0:1b:b8:81:85:b4:20:
a5:c7:43:17:2b:16:0d:1e:ff:e6:c3:48:49:f2:3d:ce:56:ee:
85:ff:b7:f5:04:a6:2b:8e:f8:1a:b5:10:98:cd:3f:f1:53:00:
0c:15:f9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:31 2025 by rpki-client