Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
File: 15dd7280-6c64-4c5f-9920-b8e295ae5383.roa (raw, json)
Hash identifier: f4e9z7F4t5o8DPwkvJ188WHFEbXAC6ijPTlsMYWa3MM=
Subject key identifier: 9F:FC:7B:97:5B:7C:C6:B0:44:F9:20:8E:84:E7:EF:7E:63:89:4C:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41F8C285F96AD2DFC6EE795E99AD53A73D52D0DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
Signing time: Sun 26 Oct 2025 00:20:15 +0000
ROA not before: Sun 26 Oct 2025 00:20:15 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f8:c2:85:f9:6a:d2:df:c6:ee:79:5e:99:ad:53:a7:3d:52:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:20:15 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=a9ed4f24e79cca288316e870292866d4f2a22fd153785f88fe706e7b3f7beaeb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:c9:71:c2:0e:a9:09:87:b9:6c:03:e0:fc:
b3:bd:25:d9:e8:57:70:a2:3b:c2:ca:b9:91:8a:59:
00:94:3c:48:cf:4b:99:0b:cb:59:49:5c:51:50:b4:
81:1c:dd:c3:1f:bd:f1:ee:e6:5c:3b:89:0f:2f:8c:
38:65:64:da:ef:98:7f:b8:7f:a2:48:11:26:27:36:
22:ac:61:c1:01:ba:c9:e6:71:9f:b9:78:1f:49:3a:
30:60:3e:34:1a:75:28:8a:43:ce:f1:96:40:ea:9f:
3f:12:76:57:aa:2a:94:4e:6d:15:d1:b6:80:17:64:
3e:ae:6c:82:62:9f:cc:a7:e5:fc:fa:86:e8:0c:af:
44:90:3b:65:f9:82:9f:bd:c2:48:44:44:b4:7c:4d:
90:92:8c:7e:da:a6:8e:87:70:a0:19:10:52:5b:0b:
7f:81:78:b8:c6:06:96:79:df:b7:0c:68:f6:2d:62:
b3:51:13:5a:62:a5:64:c7:fa:fa:b8:af:7f:da:4a:
bc:e3:00:f3:65:22:2e:e1:2e:8f:ad:f8:40:31:3f:
58:43:33:af:1d:55:cc:10:b3:85:59:24:37:27:f4:
30:93:e5:6e:71:47:0f:56:74:7c:b2:bb:1d:7a:23:
6d:6a:cf:6f:a4:3a:41:19:62:97:1b:bd:a9:d1:db:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FC:7B:97:5B:7C:C6:B0:44:F9:20:8E:84:E7:EF:7E:63:89:4C:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/15dd7280-6c64-4c5f-9920-b8e295ae5383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.233.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:ff:35:d3:a1:b2:ac:ec:be:30:78:9e:1e:9a:79:fe:9b:52:
69:72:c5:45:aa:00:bf:5e:7d:08:af:51:57:5f:87:5b:bc:ec:
a3:ed:de:13:3f:8e:9c:80:82:ee:df:a9:cf:19:07:08:66:a4:
ca:24:cd:37:d9:69:73:cf:71:45:6f:4b:21:db:d8:50:96:e5:
ca:47:59:cb:27:39:a7:39:66:81:b3:5e:04:c7:46:97:89:a1:
37:97:18:0d:ec:1c:a3:0c:45:47:13:56:99:dc:c5:f4:d2:b5:
20:7a:f4:17:60:a6:f2:6f:be:a3:a6:35:7a:5c:a7:8b:70:03:
8e:1f:bd:e6:18:5d:6a:ca:53:8b:a1:68:53:6e:c8:53:b8:4f:
34:4c:92:5c:74:aa:30:d3:5f:e8:f0:7c:0c:9e:9c:55:09:6d:
26:0f:f5:86:09:8a:cf:b5:1f:99:f3:e0:f8:40:09:53:8c:9c:
ef:7b:68:f2:a9:83:3d:04:ab:b1:d2:76:66:7f:8f:52:80:07:
19:d4:c2:01:8e:05:ca:85:34:dd:53:f5:33:ac:6c:69:8f:c8:
95:af:cd:ed:0c:ef:e1:c8:fc:b9:79:22:45:d3:8d:67:45:62:
de:36:77:33:e6:ce:3e:68:41:13:ae:14:6a:04:bb:dc:28:d0:
5a:53:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:15:40 2025 by rpki-client