Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
File: 4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa (raw, json)
Hash identifier: E2H+d3p5f6IlMdvriJgphGNyMr+WtPV5vaefd7WEAEU=
Subject key identifier: D2:79:C1:3C:CB:73:AD:82:09:CC:C0:31:A6:6F:B5:8C:57:AF:F3:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 17EDBA6232657E816987F379D2CFFDA0CF3B7A54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
Signing time: Fri 31 Oct 2025 21:24:50 +0000
ROA not before: Fri 31 Oct 2025 21:24:50 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ed:ba:62:32:65:7e:81:69:87:f3:79:d2:cf:fd:a0:cf:3b:7a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:24:50 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a383ab60806a652528d9969228f1a876564b1f004e8df9e2af3b113e4c236935, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0f:41:33:76:11:fa:11:5b:58:a2:e2:d9:60:
ba:a8:f7:70:a7:b2:ae:b9:a8:a9:87:77:9a:24:af:
f3:66:c1:14:51:5b:c1:08:dc:12:49:74:79:9d:e4:
e7:fe:9b:bd:13:43:08:15:3d:00:30:12:21:dd:ad:
d6:35:ae:d7:d2:b2:2a:fb:32:94:69:14:80:0d:b9:
f6:a8:c8:61:32:f3:f1:9d:42:54:38:94:c0:ec:8e:
fa:2b:de:83:e9:2d:64:58:be:88:de:3f:f0:e9:e5:
16:42:3b:91:7b:72:58:3c:92:3f:80:90:63:5c:22:
a2:03:a1:db:d5:19:86:25:cd:94:73:38:a6:8f:4c:
89:87:69:62:00:b9:4d:42:bc:80:8b:2f:9b:8a:17:
f1:57:7e:06:e5:60:40:c5:94:1c:f5:a9:87:c8:54:
77:1c:72:82:18:0e:2f:90:7a:8f:06:2b:30:88:f8:
95:8c:37:0b:4a:ce:28:65:00:47:52:a8:5d:40:18:
50:32:b5:c8:be:e6:8f:dc:06:67:47:2e:32:a0:29:
ec:49:33:d3:8e:c6:8d:c0:96:79:08:a7:54:30:33:
7d:54:26:13:71:dd:cf:f6:de:1d:9c:a2:56:c6:a7:
6a:cb:05:9a:d4:c5:e3:97:8c:9f:bd:14:a8:98:86:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:C1:3C:CB:73:AD:82:09:CC:C0:31:A6:6F:B5:8C:57:AF:F3:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:69:16:63:48:85:3c:f5:16:5b:41:2b:21:47:fb:5c:8a:69:
8e:3c:b2:7d:3e:62:19:8f:c6:0c:14:8a:b1:4e:8f:f0:20:28:
41:95:1c:cb:57:68:b3:4b:74:5f:64:9e:49:b4:40:17:e9:29:
c7:c7:9d:f4:c6:36:8f:4d:b8:77:f6:6e:b7:61:2e:3c:1c:ec:
ec:2d:6c:9a:c6:a5:26:25:03:a6:b0:ab:e7:05:65:f7:c9:1f:
60:18:20:f0:99:47:53:5b:53:43:be:ee:8e:e5:ae:fc:e9:4b:
c7:52:a0:83:4f:ff:be:9c:54:5f:6d:80:27:a2:a4:ba:d3:ef:
a2:c2:45:f8:cf:1d:c0:a9:70:14:6d:89:7f:6f:d4:ed:ec:92:
19:06:5a:a1:ba:7d:af:04:de:1b:aa:c1:d1:ce:99:65:d6:0c:
75:db:8d:34:db:17:99:cf:c1:03:f9:3e:bb:45:0a:db:f6:87:
59:46:48:f4:2b:21:29:da:cd:3e:81:95:11:79:5f:35:8d:c6:
83:b4:23:5d:21:10:56:73:56:d5:19:cd:e7:62:96:e0:f4:15:
b8:05:d6:77:83:27:bb:f1:67:8d:0d:7a:77:69:79:09:83:ac:
d2:60:76:b0:6a:e6:27:e3:ab:21:8a:e1:90:9c:32:87:fa:0d:
26:b1:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:26 2025 by rpki-client