Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
File: 142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa (raw, json)
Hash identifier: agns/PHQrE4XvB2kx1jXPNEkUbw5NB0nKrLW2BFEHOs=
Subject key identifier: 46:9C:E7:8E:A4:4C:64:BD:BB:FD:D6:52:6D:3E:DB:39:D4:7F:C3:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5129C4D62499D7C4296AFF6BACD59B748200C14F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
Signing time: Fri 31 Oct 2025 21:24:53 +0000
ROA not before: Fri 31 Oct 2025 21:24:53 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:29:c4:d6:24:99:d7:c4:29:6a:ff:6b:ac:d5:9b:74:82:00:c1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:24:53 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=3f12f869e653c0d9e2790a49d5247891bf7c3cb172a238b483bfdb5107c2ee8d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0e:5f:7f:d8:cb:b5:ff:65:4e:48:d4:db:2a:
9a:f1:33:82:d2:69:50:36:00:90:01:49:e8:7d:68:
50:24:54:6d:44:8c:50:b1:8f:a5:ac:bf:aa:2a:0b:
bf:91:5a:10:a1:09:89:f8:dc:da:11:b2:bd:5d:26:
aa:53:08:0b:7a:89:59:30:94:4e:b0:ad:80:09:f7:
4f:9f:f4:17:85:0f:e7:01:03:69:7a:b7:55:17:d9:
f7:03:e9:6f:99:82:f9:3f:cc:6e:1a:6c:e7:d0:67:
5a:06:86:f7:c0:d1:1a:ce:81:ec:3d:17:68:4f:d7:
4a:bf:20:13:8c:e0:ae:14:c8:1a:53:7a:c3:2c:24:
5a:88:5a:6d:51:83:6c:cc:3e:db:d5:7b:5e:ee:77:
bd:7f:17:43:7b:2a:48:f3:71:ec:9a:b6:1a:14:e0:
6f:54:69:d8:db:d6:8f:8b:35:0a:36:58:37:db:12:
10:1f:4f:5c:fb:82:89:a8:c5:e6:12:72:33:02:08:
1c:62:e8:c8:a4:9a:ce:fe:fa:8a:95:1c:f2:b0:f9:
ef:a2:c2:cb:93:08:87:b1:83:77:35:17:9e:c8:27:
d5:f4:bf:f9:bf:05:6a:66:a5:bd:03:e9:2c:55:8f:
c1:3f:73:1d:0e:c9:a0:0c:d3:e5:14:ce:50:9d:bd:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9C:E7:8E:A4:4C:64:BD:BB:FD:D6:52:6D:3E:DB:39:D4:7F:C3:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ae:3c:b8:8e:71:73:35:5c:a7:70:1c:91:7e:eb:c7:8c:53:
3d:1b:90:33:e2:b5:74:3d:b1:16:97:27:54:2d:b9:3b:97:63:
76:0c:8c:d3:ad:99:3b:e6:1f:af:b8:e0:e5:c7:6a:4d:71:cf:
db:15:6b:83:4f:80:c6:b9:d0:dd:3d:c4:b3:f1:ff:a2:de:59:
5f:b0:aa:10:69:c4:6e:ff:ec:a3:9d:59:58:46:d3:da:1a:c6:
80:16:84:45:fa:77:b3:26:d3:e5:32:ad:7a:c1:9d:6c:2a:0a:
9c:a3:44:57:5b:35:e7:f7:c3:bd:85:2d:99:e8:b0:b2:4c:40:
8c:41:fc:19:39:e3:62:19:8e:41:f3:9d:d8:9d:3a:ab:62:df:
6e:41:f0:90:57:59:c0:8e:27:00:b6:6b:a0:dd:f1:f1:b3:7d:
8c:67:33:b2:d0:bb:38:f2:77:de:be:1c:7b:bb:2b:c1:db:82:
7b:6b:64:61:ac:ae:3c:8a:6a:38:a1:c1:e3:54:cd:78:bd:2f:
4e:05:29:60:64:3c:a6:38:ac:63:4c:70:19:36:8e:0d:aa:f8:
0f:06:5b:37:31:cc:7b:fd:1e:56:d4:b9:b2:39:40:85:01:3c:
8d:ac:83:59:3e:a7:a5:3d:89:ca:07:70:c1:11:da:60:33:15:
da:51:73:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:28:52 2025 by rpki-client