Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953c69de-561a-4b58-b97f-351e4f067bef.roa
File: 953c69de-561a-4b58-b97f-351e4f067bef.roa (raw, json)
Hash identifier: Wn39NG1HIzu6jErgUI44LclpZJEixtEiYeQhFuRxxho=
Subject key identifier: 97:65:82:04:A4:F0:F9:98:DA:C6:63:D3:FD:79:3C:45:04:6E:6E:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37944E7844828EEBC462452541A5B49E3C62AE29
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953c69de-561a-4b58-b97f-351e4f067bef.roa
Signing time: Tue 28 Oct 2025 00:40:51 +0000
ROA not before: Tue 28 Oct 2025 00:40:51 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:94:4e:78:44:82:8e:eb:c4:62:45:25:41:a5:b4:9e:3c:62:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:40:51 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=6534f4e0abf7112ba61e574730b7663e8eddce36543b1556927a00d4087c47aa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:cc:a1:20:0d:fa:d9:09:9b:ae:b3:e7:27:
81:57:8c:48:f5:3b:0f:b9:62:25:51:bf:23:0c:99:
98:e9:d7:d4:1a:99:87:f1:4f:6d:63:ce:27:fc:4a:
91:38:0c:5a:95:ce:d3:87:4a:94:df:3d:53:e9:0f:
e0:ef:26:c8:f1:3c:50:60:59:21:58:ae:bb:ce:ae:
29:94:6e:54:79:d2:28:83:88:0a:d0:e6:85:6a:b0:
e6:ca:43:94:95:2b:21:46:51:1a:69:01:8a:3c:47:
c2:0e:64:45:58:60:11:04:72:86:51:16:7d:1f:c9:
d6:80:9e:de:d4:af:44:35:ed:45:29:47:54:58:d6:
4c:41:26:d8:ba:08:47:f5:d2:67:cf:a1:74:85:36:
b2:23:a4:32:06:5e:0f:d2:dc:a6:52:bc:1b:b4:25:
a5:36:f2:16:da:59:43:94:c6:67:ba:65:f4:53:dc:
3f:e9:36:a0:7b:b2:6d:d2:ac:32:b5:a6:02:19:34:
cb:ed:a9:08:ed:1d:f4:59:be:d3:d1:b2:4b:58:49:
48:c3:f3:bd:98:9d:81:f2:22:74:52:ce:ea:4e:81:
0b:b0:39:a5:b6:dc:9e:fc:32:17:cc:48:bd:15:3b:
aa:76:c3:b5:f6:96:20:1c:1c:66:5b:c8:8e:72:9e:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:65:82:04:A4:F0:F9:98:DA:C6:63:D3:FD:79:3C:45:04:6E:6E:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/953c69de-561a-4b58-b97f-351e4f067bef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.160.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ca:96:9a:9a:0f:74:c9:2b:bb:da:1d:49:ea:37:2a:60:ce:
3d:74:cb:a1:3f:3e:da:cd:70:f7:7d:c3:a7:9e:05:6a:1d:e4:
0b:7c:05:d8:07:38:ec:f4:0e:70:91:8e:84:e3:27:93:9d:c5:
81:4b:05:dc:67:6c:85:54:ec:8d:cb:e5:3d:d0:1c:e6:2a:3a:
b6:a0:49:f0:5c:e6:3e:84:53:43:f2:1e:24:d7:a4:29:ff:74:
52:4c:d0:e8:5b:22:d7:d2:3b:8d:e3:16:06:1b:24:2f:e0:1d:
b0:ae:0e:33:7f:28:2a:6b:7c:70:ab:0d:e4:9e:7c:33:0d:ad:
58:d5:a6:32:3b:c8:3f:33:75:bf:20:e7:4a:a5:c5:e6:d4:56:
8b:49:ca:9b:cd:55:73:97:ba:8d:cc:8d:24:50:47:88:ba:41:
91:47:b4:bc:e3:be:ef:a4:24:e7:7a:99:b8:9e:9a:7a:56:13:
44:22:87:b1:14:5c:32:36:f1:ee:b0:1c:92:64:96:00:13:d7:
eb:cf:e8:b2:51:de:db:dd:66:08:23:2e:fd:e6:4a:57:09:45:
f6:4c:1a:e5:5c:dd:f9:aa:39:31:12:65:7a:0d:a1:e1:60:9d:
de:2a:14:b2:01:b8:6d:36:4e:81:45:68:11:69:c7:40:c2:fe:
d9:05:a2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:39 2025 by rpki-client