Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
File: 7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa (raw, json)
Hash identifier: yhdNng/dMyG4mCNsk0wA3RB3qE+d3ENkUa8CunpgqwI=
Subject key identifier: 78:A1:87:1F:43:9B:FA:5F:22:ED:A3:9F:DB:CE:BC:A3:C1:5C:31:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 20408A8A79D684EEA67859D25C5342EE1E1ECCFE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
Signing time: Tue 28 Oct 2025 00:41:29 +0000
ROA not before: Tue 28 Oct 2025 00:41:29 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.77.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:40:8a:8a:79:d6:84:ee:a6:78:59:d2:5c:53:42:ee:1e:1e:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:41:29 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=d6fa67e81468ef3f20a9503fc653d9172eba81e7a230df1a757d4ba38d8327ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:36:93:bd:0f:51:e7:3a:09:80:ef:a6:5f:
8e:42:de:23:1f:fb:f9:07:0c:ad:00:93:26:ab:c0:
58:19:b6:1a:d7:50:0c:9b:64:42:3e:3f:12:f1:38:
98:64:3b:03:09:ea:21:99:ec:4e:d7:92:3a:4c:14:
80:53:4e:30:84:bc:8f:5e:a7:91:87:ee:8a:24:12:
2c:93:76:35:f4:1d:bf:f5:c1:51:37:d4:f0:b3:ba:
fa:d8:97:90:c2:51:67:c5:7b:12:b3:de:51:4b:62:
4d:a3:a8:b8:de:43:3f:63:f6:1a:07:f6:71:70:f7:
db:16:f5:7e:45:92:16:35:29:88:5a:da:13:d0:4a:
b5:ba:f1:69:9d:c0:3d:41:c5:a0:db:55:05:6b:c7:
8b:bc:25:0e:31:0b:c9:7a:c6:49:47:5c:b1:50:a8:
63:92:cb:d0:6f:32:48:6f:a1:8b:16:23:df:5c:e1:
05:51:63:50:19:27:4f:8c:05:46:4b:a8:da:41:60:
44:cc:21:3f:ca:54:7e:fc:9d:56:b5:d5:ca:d9:b1:
7a:b8:8f:f9:0f:0d:d7:be:73:94:46:d5:c0:3c:bc:
1d:11:db:d8:27:bf:70:1f:76:dd:0e:81:a3:48:4a:
7a:e1:6e:78:73:bf:b2:20:16:88:5e:fb:c3:1e:67:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A1:87:1F:43:9B:FA:5F:22:ED:A3:9F:DB:CE:BC:A3:C1:5C:31:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.128.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:38:50:c3:44:f9:4b:68:cf:57:8e:5d:ff:29:e3:e7:15:62:
92:d7:a5:a5:39:3c:8b:3e:74:f8:7c:6b:33:e0:a1:97:25:27:
01:89:b1:10:ab:d3:fe:a7:0a:53:85:f5:81:93:9d:bc:73:25:
d2:78:de:c1:42:71:98:90:53:e4:a6:36:8e:cf:3e:0a:08:ac:
4b:41:a9:0c:e3:3b:ec:8c:94:3a:a4:ac:8c:25:99:8b:6b:ce:
fb:8a:c0:f3:17:75:e9:48:21:27:2d:e9:60:2c:1d:cd:d7:03:
58:0d:66:05:94:b2:a6:a7:6e:54:cd:04:45:a9:87:d3:be:1b:
e3:5a:a3:f2:18:e6:30:dc:c2:52:ec:af:ac:4f:ca:b8:31:4b:
49:43:f7:a0:f5:8b:1f:ee:5c:4e:e5:52:bc:fa:87:d5:a6:56:
d8:64:87:5f:bd:64:b7:a3:01:d4:b3:32:96:ee:e2:22:0a:b3:
0e:9c:77:99:5d:73:30:63:aa:83:dd:8d:fd:e7:1a:22:46:7a:
99:e1:ee:27:ab:e7:a7:25:fc:fc:dd:08:9a:cf:29:bc:9f:7b:
5e:9a:b9:0c:ce:37:96:b3:c9:6d:80:89:a0:94:8a:c3:e4:17:
2c:32:21:5f:a0:88:66:3b:1f:53:a1:a7:71:d7:57:b4:79:99:
96:04:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:30 2025 by rpki-client