Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
File: 1708c9ff-3127-454f-89db-7342094cdf97.roa (raw, json)
Hash identifier: hsfYckZcfqqf3STdkqvrdIjx2pk4iQoWlzbH1pBM1PQ=
Subject key identifier: 39:8E:4B:BD:B8:BF:36:F9:11:AE:28:E5:66:59:F2:4A:A7:35:DA:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4870716D1FEBD6150E3F0752316C050AA32D8FCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
Signing time: Sun 26 Oct 2025 00:21:11 +0000
ROA not before: Sun 26 Oct 2025 00:21:11 +0000
ROA not after: Sun 30 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:70:71:6d:1f:eb:d6:15:0e:3f:07:52:31:6c:05:0a:a3:2d:8f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:21:11 2025 GMT
Not After : Nov 30 23:59:59 2025 GMT
Subject: serialNumber=2097616f1ed9057e800691f169c53695c848bcbc4df8b8d7f2867185fed80da8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:8a:c7:8f:39:6f:5c:4d:f5:02:13:05:cb:
7c:2a:ea:53:5a:91:16:5a:d0:52:bc:d6:c6:84:38:
01:34:08:45:00:73:ff:ce:5a:8a:02:61:f4:37:b0:
ad:11:68:7c:ac:a9:6c:af:8d:05:13:5c:6b:a9:df:
6b:48:84:10:95:44:d1:c8:5c:ed:5a:4a:24:ef:29:
38:de:f7:a1:60:a4:24:b9:24:d1:2b:9a:9c:db:84:
4a:8f:9c:7c:8f:82:c7:7c:91:ab:42:cc:b5:f7:15:
c2:85:61:44:a4:c3:61:52:39:54:cf:b5:af:cb:ab:
db:2b:dc:f5:7b:84:8e:12:cb:a9:ac:23:f7:ba:8d:
d1:3b:c8:07:28:1c:9a:65:77:cc:94:ba:69:13:39:
64:d3:ac:71:2f:ed:10:7a:65:f0:97:c8:12:1b:fd:
d6:b1:23:72:c6:1e:88:29:9b:c1:ac:51:af:97:c9:
64:9b:f5:e4:d4:14:6e:38:0a:d2:5e:2f:a3:03:55:
29:50:ac:3f:4c:da:7b:d0:8e:64:16:fe:37:f0:ee:
4d:b2:a3:55:3c:96:bf:33:80:28:b0:1b:57:a8:ea:
a2:6f:91:d4:58:d8:b7:c4:90:8c:09:30:38:8d:84:
db:44:a3:2d:1e:8c:bd:8b:39:ce:4f:f6:02:a7:2e:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:4B:BD:B8:BF:36:F9:11:AE:28:E5:66:59:F2:4A:A7:35:DA:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1708c9ff-3127-454f-89db-7342094cdf97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.133.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b5:ea:8d:24:fb:1c:2b:53:21:28:d7:36:3d:a4:f3:7e:f0:
67:b4:1c:c8:a9:99:34:20:51:aa:15:ba:70:b7:18:13:89:82:
cc:00:01:74:29:ef:62:9d:43:48:60:29:97:49:d3:67:01:85:
14:9b:f7:03:e3:84:6c:73:c1:2c:0c:05:38:70:7a:94:de:e8:
91:f9:d1:3d:82:b1:87:46:4d:07:3a:7f:29:8b:77:61:f4:64:
b9:12:1f:9d:dd:3b:41:35:f7:f6:ee:f1:67:64:97:92:07:0f:
8f:ec:80:12:21:3d:e6:9f:bd:32:a7:01:10:ad:57:3d:32:22:
c6:7b:00:e8:84:5a:8c:83:a7:74:a8:99:7b:ec:d2:54:a4:43:
74:97:aa:e5:5d:69:ba:d5:ea:7f:ef:f8:4b:65:03:81:ba:f1:
b5:ac:cd:3e:05:20:56:ee:0b:fd:dc:8f:c1:68:d2:df:59:f9:
a6:23:cf:c2:f0:f0:89:02:9b:c7:14:20:94:76:8b:d3:e3:53:
c7:9b:30:a9:84:38:ae:45:e1:76:bb:84:c9:70:b9:84:fd:f0:
e4:a3:4c:07:21:77:e3:bd:e7:53:f5:7e:5c:cc:6f:39:ee:94:
09:a1:3b:f3:af:28:d8:23:89:f9:42:92:1b:99:c5:bf:5c:d7:
9d:c7:53:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:41:35 2025 by rpki-client