Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74732dc5-a7f5-46f0-b9a9-f93498dea7ff.roa
File: 74732dc5-a7f5-46f0-b9a9-f93498dea7ff.roa (raw, json)
Hash identifier: YT3hsoxZOo7TYGkJcGOyYl3WUFTkre5E8dudbzDpejs=
Subject key identifier: EC:10:86:AD:3B:A4:1B:EF:BA:35:51:81:5B:34:AF:B9:45:47:0D:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 111ECE5A318CEE7A2789F4198813B3556CA35D2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74732dc5-a7f5-46f0-b9a9-f93498dea7ff.roa
Signing time: Sun 02 Nov 2025 00:30:40 +0000
ROA not before: Sun 02 Nov 2025 00:30:40 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.150.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:1e:ce:5a:31:8c:ee:7a:27:89:f4:19:88:13:b3:55:6c:a3:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:30:40 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=1371946ba238651b9166e2fe141f0a6e2c04aafd7c466d12fcc32ddafde721eb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:81:b7:af:a8:f1:27:50:62:9a:78:5c:20:
9b:37:20:96:c0:67:6b:fc:3e:20:ab:9d:14:71:b3:
03:90:40:28:5e:9c:a4:86:7f:da:60:ab:6e:ee:f4:
e3:a1:f6:ae:4c:53:4a:f5:f5:ec:a6:77:ea:11:22:
b8:14:39:d0:e3:5e:19:7d:a5:ec:7c:5f:81:91:27:
06:de:ab:3f:17:9c:26:6c:83:2a:0c:9c:13:dd:00:
a5:83:bf:46:50:a6:aa:2a:53:5f:c9:18:81:be:5f:
8f:d8:31:ef:26:74:a0:f8:4d:75:0e:23:f7:28:0d:
c0:12:7a:18:88:1c:7f:65:54:b1:ab:55:05:ea:01:
42:89:b2:19:66:fa:a3:06:91:af:5e:e7:15:2b:62:
45:fd:00:e3:25:cb:db:a2:f0:b1:d7:48:f5:36:e6:
78:1a:d0:10:de:ae:b6:18:63:63:ac:97:b2:e9:0a:
a7:8a:5c:95:5d:bb:be:c4:a6:50:de:10:78:21:9a:
40:fa:61:53:ac:ea:b4:c4:49:a0:33:42:0b:00:bb:
68:a6:9e:86:c2:c4:65:0b:65:f7:f3:ef:5a:98:84:
f4:78:16:67:da:70:9a:18:a3:30:76:32:ce:99:09:
a0:b0:fd:1c:9a:fb:ff:62:79:34:37:61:ea:76:5f:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:10:86:AD:3B:A4:1B:EF:BA:35:51:81:5B:34:AF:B9:45:47:0D:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74732dc5-a7f5-46f0-b9a9-f93498dea7ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
10:71:ac:2a:2d:d3:f6:a8:2e:7d:2c:29:92:25:40:2b:0b:a0:
f7:78:6d:90:a7:fe:cd:af:2e:a4:85:8d:dd:e2:8d:19:53:3f:
9f:ec:6c:ff:89:4a:64:75:3c:ae:b4:20:c8:bb:33:9b:52:5a:
11:17:55:b5:e3:7a:af:42:17:e6:02:71:2e:75:94:95:9a:e1:
10:46:42:69:53:38:7a:75:bd:98:71:3f:cf:67:73:fd:ab:eb:
3a:9a:6f:d8:e1:fe:13:14:83:1c:ea:a8:41:29:58:af:cd:b9:
25:86:5e:a9:b2:a2:af:fa:03:e7:c8:cf:f1:17:9e:d7:59:09:
c6:0a:c0:e1:5f:2b:90:b2:86:2a:c2:7d:2f:71:ee:de:b5:8f:
10:a9:43:71:93:26:88:b6:66:2a:46:4e:4b:af:bb:b4:7e:56:
0f:9b:88:68:3b:52:98:99:01:2a:b3:d1:aa:4c:6d:05:02:4a:
4c:fb:47:62:92:82:29:81:13:38:b4:c7:e6:c0:24:1e:51:c0:
64:41:88:99:8d:79:92:80:46:80:aa:bd:f3:c6:28:dd:4e:27:
5c:dc:b6:e2:00:30:02:93:13:72:56:12:22:3a:a2:8c:71:71:
ab:e5:ac:bc:1e:d6:2e:d0:aa:51:69:16:e7:1b:44:02:3d:ec:
22:66:7a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:25 2025 by rpki-client