Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa
File: 5332b03c-61a9-413c-af32-f67a7d5c8781.roa (raw, json)
Hash identifier: EZPggaD2EipBw3f345LStxUu+hilLYesOAUsv2r0R+M=
Subject key identifier: 40:17:40:F7:FE:C8:2A:95:70:CF:DF:1F:D7:EB:46:C5:4F:FF:50:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B7C6201CAAF02BCFA642487E097C1692D9ECFE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa
Signing time: Sun 02 Nov 2025 00:00:09 +0000
ROA not before: Sun 02 Nov 2025 00:00:09 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7c:62:01:ca:af:02:bc:fa:64:24:87:e0:97:c1:69:2d:9e:cf:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:00:09 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=3fb51aae3423de29b31f71661af82b1e58a44bb15499f491237aeb18510557c7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:ef:47:d0:fb:57:3a:40:12:3c:59:6c:a1:
f3:34:7c:13:34:65:80:a7:8f:9d:08:71:4c:50:8a:
88:12:24:88:45:8e:f5:b2:88:1e:c4:9d:58:fb:0c:
91:c8:e1:fb:ae:19:fd:fd:d1:cf:7f:7e:8e:14:c8:
4f:dd:4b:5d:f0:e5:01:6d:a7:84:3c:bb:1a:e9:a5:
82:f7:5c:ae:8e:35:2f:90:c1:64:39:2c:bf:7e:7e:
09:af:d7:57:57:51:d9:37:a6:57:df:e3:c0:86:06:
55:6c:59:69:9d:aa:ca:ef:d7:83:4f:87:50:19:f3:
0d:81:dd:9c:e8:57:87:43:2a:9c:e7:ed:1c:77:76:
7f:bb:69:36:b2:21:d8:5d:1c:a2:88:52:43:bc:13:
5f:7c:7b:f1:8f:ea:df:5e:e0:eb:7a:02:da:56:43:
cb:8f:9f:92:02:8c:95:83:3c:3f:1e:12:5d:64:93:
1a:ea:ad:6e:f7:25:df:38:a3:b5:1e:af:38:ff:2c:
95:c6:99:32:ef:68:4b:5d:ec:aa:95:00:e6:23:6f:
dd:d9:73:c7:17:5d:5a:37:33:b8:0e:81:1f:6b:91:
7a:ba:da:fb:01:27:f2:d7:c0:9d:12:87:b2:8c:2f:
ff:58:e1:c4:fe:cf:6c:5d:de:94:cb:d4:6f:1e:b0:
8e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:40:F7:FE:C8:2A:95:70:CF:DF:1F:D7:EB:46:C5:4F:FF:50:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5332b03c-61a9-413c-af32-f67a7d5c8781.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:4b:aa:cf:7b:e8:f8:aa:8a:da:b3:e7:35:54:e9:70:bd:da:
2a:89:d5:9c:09:1a:2b:72:36:95:2f:a5:5b:86:86:ab:a1:07:
f9:67:43:db:80:b2:88:56:1b:53:40:a7:c4:44:4a:d9:d2:1c:
bf:1b:35:22:e9:01:e8:18:11:ab:c2:66:f5:3d:90:70:2b:09:
11:62:a2:1d:d3:cb:62:e0:06:5c:b9:d4:46:72:b8:cc:90:8c:
bf:22:5e:d7:bc:4d:c1:01:13:91:40:0e:4e:72:ec:4e:3a:74:
88:84:48:79:c6:5b:56:7a:8d:57:e4:24:20:6f:39:8c:1c:38:
21:40:8f:ed:13:cd:4a:51:78:d8:e0:b2:06:a6:a0:ef:82:77:
9f:3f:37:23:da:f3:16:bc:a5:86:9a:d8:a4:6e:d2:8a:8e:80:
c9:f6:1e:ff:19:53:04:1c:0a:73:f0:0d:37:a4:50:00:72:c5:
f2:c4:dd:da:d1:07:76:87:f4:06:fc:c3:d4:75:17:9c:cc:48:
f6:a2:df:b1:24:49:28:58:de:c1:e4:24:ae:25:99:a5:a1:f1:
af:9f:78:0c:27:ac:83:96:ca:78:e9:ff:b3:a7:43:88:05:5c:
7b:ff:47:29:d5:f4:b1:c3:61:ca:1d:20:6d:3f:b3:20:2a:fe:
fa:c2:1d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:34 2025 by rpki-client