Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
File: 0ab4bbb2-995f-426a-b772-87c418889125.roa (raw, json)
Hash identifier: QhsJtiFZeMuVQnmSaND30izEZoNbpBiNVLDWmPoM4zY=
Subject key identifier: 38:DD:B1:29:77:53:B8:07:D4:5B:64:1A:2A:F7:61:31:50:FD:D5:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75BEFB6A22A092CC579133A244EA28E6516835BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
Signing time: Tue 28 Oct 2025 00:50:52 +0000
ROA not before: Tue 28 Oct 2025 00:50:52 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:be:fb:6a:22:a0:92:cc:57:91:33:a2:44:ea:28:e6:51:68:35:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:50:52 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=e97a24fe4c361f1a17535020bbfdcccb0ec11d3834f289d79fd94dbea9df06e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:09:0c:fa:a0:5a:7a:75:c3:7b:2d:16:54:
0b:61:78:dc:ae:2f:54:21:99:32:f6:a7:0d:90:47:
ee:f7:91:49:2c:d1:b6:e1:c6:64:bd:02:6f:12:4a:
2d:21:a4:fb:48:0e:67:c2:ce:d3:e6:32:85:59:ec:
89:f1:ab:44:c8:03:35:5b:ab:70:d0:17:88:4e:52:
bf:81:bf:05:b8:2d:e8:a2:9b:35:8a:91:a2:be:02:
50:78:44:b1:7d:e5:e4:78:a5:c8:5f:8f:2d:3c:38:
88:5e:4c:8e:dc:e1:dc:03:f0:7e:13:63:b8:e8:86:
4b:12:9e:94:81:e4:af:bc:93:a5:2c:43:f6:a7:1f:
3d:71:4a:5a:78:54:13:d2:b3:54:a9:d0:8e:dd:f1:
32:5e:61:3d:63:7d:63:b1:65:17:75:1f:62:72:dd:
e2:c8:73:b1:67:97:76:4b:f8:cd:19:3c:8f:f2:9f:
cf:e6:b4:54:37:cc:80:ad:3f:e2:b9:1f:46:ac:73:
98:36:6e:6f:17:39:6b:40:f3:cb:ea:94:37:72:6f:
b8:02:f6:8e:a6:8c:4c:01:c0:18:3d:fa:89:11:22:
78:cd:c5:ca:c9:1f:21:17:3c:ee:6f:ce:fc:57:bb:
86:ba:46:b0:c1:7f:67:ac:67:be:69:4d:c5:b0:87:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:B1:29:77:53:B8:07:D4:5B:64:1A:2A:F7:61:31:50:FD:D5:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0ab4bbb2-995f-426a-b772-87c418889125.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.239.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:64:36:b2:c5:51:8a:09:fb:3d:f8:49:36:55:08:9f:55:de:
82:7f:96:87:ab:03:9e:f5:b1:c9:83:5d:a7:a5:2c:15:58:ec:
56:d1:89:b6:39:e1:3f:fb:dd:16:c2:bc:f6:e7:99:0e:ec:4a:
c5:3c:d0:a8:47:f3:dd:3e:4b:da:74:b5:e3:94:a5:73:3e:7f:
82:b4:e8:f6:af:8e:62:58:22:3f:54:85:2a:d5:1d:08:ff:6a:
3c:06:2e:b6:b8:be:90:78:9d:22:a6:d6:30:21:f4:09:df:0f:
3e:6c:50:ed:03:3a:77:da:6a:67:67:c6:29:4c:5e:83:06:f3:
e3:bb:d5:4c:e9:f4:65:d1:46:7a:a7:68:a2:c3:6c:2b:bf:4f:
5f:93:25:b5:35:ea:de:4e:cd:7e:59:dc:8d:7a:fa:da:46:bb:
6c:58:2c:03:c0:8c:c5:41:2b:8b:0d:bb:16:4c:03:90:c7:72:
af:04:5e:86:62:39:8c:04:72:b9:ef:57:65:46:49:f2:01:12:
4b:81:b3:09:c1:6b:9c:1f:19:02:36:9e:da:80:25:05:ff:00:
ec:aa:4f:95:02:72:4e:63:a7:d6:73:cf:60:de:24:42:f3:4e:
53:f3:5a:91:98:87:7a:6d:00:63:eb:d2:b8:c7:b5:f2:b9:f1:
c8:3a:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:23:37 2025 by rpki-client