Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa
File: 9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa (raw, json)
Hash identifier: vqK5vr0dnsrfIaKHLG1cFJbLFTyuDMUN/Bk1PVUnB/M=
Subject key identifier: 20:C9:FE:4F:7D:BA:11:A7:D5:EC:4E:79:54:6B:03:6C:3C:E4:8B:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 543E6C04590F2B48270F09D88E284A875C170739
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa
Signing time: Wed 22 Oct 2025 00:11:00 +0000
ROA not before: Wed 22 Oct 2025 00:11:00 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3e:6c:04:59:0f:2b:48:27:0f:09:d8:8e:28:4a:87:5c:17:07:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:11:00 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=2da4cba34a24b9710fe1c9acc5550c2f83b6b7d282a0e7fe43390d395a4de4c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:aa:32:6f:f6:01:8f:0e:93:f9:3b:43:8c:
ff:a4:5c:e9:6b:72:7b:f4:5d:08:61:09:6b:11:fa:
c4:e7:cc:c9:d4:2f:e3:c0:f3:02:41:30:64:e4:97:
34:2b:53:46:58:85:14:67:84:bb:ff:48:86:87:db:
b3:86:41:a3:a2:6e:9c:87:fa:cc:bb:99:ee:1e:0e:
04:00:66:18:50:0f:ce:c0:32:e2:bc:71:d2:17:9a:
5a:5c:26:90:44:a2:68:3f:17:20:7b:93:88:64:0c:
8f:ed:e2:4d:1b:10:07:f3:ef:c8:55:11:a5:0e:ec:
c9:fa:4f:d6:fa:7e:5f:51:96:9e:26:61:43:87:ca:
76:02:e7:ab:37:ff:ad:2b:d9:d1:f3:a3:bb:c1:56:
2f:f9:81:b0:34:9a:ca:18:f9:c6:78:92:8e:f6:20:
ea:75:4e:65:e2:55:da:eb:ac:6a:52:39:47:d5:5c:
ee:f5:b4:f3:a0:5e:a5:60:9a:68:7c:a8:be:7d:f2:
00:cb:4c:71:18:b2:0a:ba:0b:0d:37:0d:4f:9a:51:
cd:ed:f1:e6:87:f5:b6:6e:6f:85:6a:ad:57:22:91:
98:bf:b4:38:c6:0f:14:9a:6f:1c:48:71:ca:d2:fc:
db:48:e9:8e:39:40:7b:1a:b9:51:2f:01:0a:37:d3:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:FE:4F:7D:BA:11:A7:D5:EC:4E:79:54:6B:03:6C:3C:E4:8B:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d023a52-54e3-44dc-bba9-27b3b31c1f3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.137.0/24
Signature Algorithm: sha256WithRSAEncryption
22:78:27:0a:7f:bf:d4:be:14:e1:ec:91:ff:b5:30:cc:2c:77:
97:6c:67:40:ac:71:38:73:32:0a:c7:a0:6c:77:22:80:9f:b1:
b2:31:05:84:43:01:7d:62:e6:b7:86:90:b2:6e:25:9a:32:6f:
f3:91:0e:de:b8:cc:37:b9:0a:89:cb:26:9b:cb:0a:80:76:75:
31:5c:f8:70:ad:07:98:90:0d:8f:9e:e7:e1:d3:33:ba:ad:08:
02:9e:03:d4:41:6b:1b:28:f6:f2:10:34:ed:6d:f6:21:96:c6:
1e:92:ae:df:96:64:9f:bf:81:25:73:fc:fb:2e:f6:1e:0f:29:
76:16:bb:ef:9f:b5:ff:b7:79:40:d1:09:33:38:ab:1b:0e:70:
c1:c4:dd:fa:92:2d:26:ce:86:9e:ef:cc:1a:60:0b:a8:b2:ca:
fd:cb:50:ff:37:82:7e:f0:20:7f:da:09:69:93:6c:54:eb:f1:
b8:ae:40:32:b5:ab:bd:fc:3d:9f:ae:a2:19:19:be:24:70:ab:
ac:35:41:ba:7b:71:6c:48:1b:54:a0:aa:07:0b:d1:f7:ed:db:
b0:2d:f0:e5:d1:3c:f6:97:2a:48:c9:61:1d:25:b8:c1:cc:d6:
5c:99:14:5b:4a:1a:77:bf:a6:c5:46:93:73:9f:05:41:16:0f:
59:eb:d9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:49:14 2025 by rpki-client