Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59196c33-5c65-4d01-9df3-ee3e09b84c28.roa
File: 59196c33-5c65-4d01-9df3-ee3e09b84c28.roa (raw, json)
Hash identifier: 2Vd1s/yykMLRrQIw/xr/IrQ7WJ/y+gYeJrEiiiGR0qc=
Subject key identifier: 25:A8:82:BD:44:F6:63:D1:76:AD:23:64:E9:37:1F:66:78:12:8B:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 353BB1445C6DEAD4729FEB9C725741E32DA8F6BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59196c33-5c65-4d01-9df3-ee3e09b84c28.roa
Signing time: Wed 29 Oct 2025 21:08:35 +0000
ROA not before: Wed 29 Oct 2025 21:08:35 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3b:b1:44:5c:6d:ea:d4:72:9f:eb:9c:72:57:41:e3:2d:a8:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 21:08:35 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=072bf9267cc4e888939e5f3e4199822efc823296a488e8babefc922484762af6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:bf:43:db:b0:56:7b:9f:ee:7c:54:15:3a:
ea:e2:92:cc:55:9b:5b:da:87:77:7b:4c:c1:d7:31:
a5:dc:4e:cf:b9:b7:4c:97:7d:3e:a5:fe:34:21:cf:
61:56:f5:92:82:a5:a2:14:28:b4:8f:a4:98:e5:fb:
fc:53:cf:f1:8a:5f:8e:18:3d:ed:e7:fb:7f:35:06:
a5:c1:59:97:64:be:5b:5b:7e:c7:f8:c9:cf:6b:d4:
0a:be:58:f1:26:08:5f:83:2c:13:5d:83:cb:9d:54:
d6:1f:b9:0d:6e:cb:c2:76:ab:f3:4b:c5:46:22:0c:
6e:15:2e:8a:85:a3:f5:bc:ad:c2:f7:f4:61:02:4e:
a9:79:63:45:9d:62:9f:0f:4c:f9:a1:ce:5c:49:b4:
df:8b:09:4e:a2:b1:e9:5a:c8:7e:5c:cc:c2:5b:8b:
84:dd:4d:93:d4:33:1f:8e:e5:48:77:07:b9:a9:b2:
3a:a7:35:70:a4:55:d1:02:f6:26:01:ae:47:5c:67:
f9:e1:d3:56:f4:cd:a1:1b:b6:28:e9:d1:23:dc:0c:
db:dd:26:15:00:b4:cd:73:7e:1f:83:5c:54:9a:c6:
2d:ba:00:12:a5:20:5a:75:db:0e:b1:b0:d0:57:6a:
67:eb:0f:2c:41:d4:d8:c1:bd:b5:fa:6c:b2:f9:96:
27:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A8:82:BD:44:F6:63:D1:76:AD:23:64:E9:37:1F:66:78:12:8B:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59196c33-5c65-4d01-9df3-ee3e09b84c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:8c:93:8d:6d:30:d6:82:e5:aa:f4:39:3d:ee:95:55:55:70:
c3:ff:13:48:b7:b2:c2:71:2d:b8:79:e2:64:35:d4:ef:d2:57:
70:8d:82:bf:4d:61:38:fa:16:49:91:81:60:ed:67:c1:2c:4c:
a4:04:bc:5f:fd:cb:39:d9:18:c0:f2:e5:5c:b2:10:ce:15:28:
f1:78:97:41:f2:4f:b6:79:01:3a:5b:e5:8b:d5:d4:81:85:77:
f4:2e:ec:fb:8e:ca:c3:98:ad:0f:44:7f:5a:f7:7a:da:6a:06:
d1:f7:ff:1d:68:64:70:0d:8a:cb:84:fc:50:a3:03:7c:53:85:
c1:df:df:b5:7a:31:71:c4:c0:5b:51:2f:91:e9:0f:74:b6:7c:
8d:37:2e:cb:51:4f:98:26:c3:d4:a1:18:61:22:62:81:b3:b1:
4f:b1:82:99:36:ce:77:49:6c:32:33:85:13:42:53:e5:a1:bc:
ef:57:4e:44:08:7f:d9:9c:de:7a:f0:09:68:b0:c4:f0:bc:c8:
e0:3f:20:b1:10:c3:98:de:5d:b9:19:99:b6:fa:07:e3:d3:73:
fe:68:9e:a7:3c:54:3f:47:1e:b8:f2:0f:7c:6e:9c:1a:f7:e4:
7f:5f:1c:24:9b:a6:5d:ad:5b:0a:32:c6:27:d7:7a:7d:c4:39:
9d:b9:0c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:32 2025 by rpki-client