Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3835ac1-1baf-480e-b15c-1978ec8cd4bc.roa
File: d3835ac1-1baf-480e-b15c-1978ec8cd4bc.roa (raw, json)
Hash identifier: q7mFjYSehfrpLkEhbeI+SvbH2WQ+7NN+VQ082b+0b2k=
Subject key identifier: C4:81:9D:FE:E1:AA:E5:7A:4F:BC:03:F3:63:8B:E3:A1:E8:89:29:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B008E3E51CDDF37676D05D9DA64AB9AF080B38A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3835ac1-1baf-480e-b15c-1978ec8cd4bc.roa
Signing time: Fri 31 Oct 2025 21:24:50 +0000
ROA not before: Fri 31 Oct 2025 21:24:50 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:00:8e:3e:51:cd:df:37:67:6d:05:d9:da:64:ab:9a:f0:80:b3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 21:24:50 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=a78569f4ed06713d197b92747c0014e04bcf8bc449dc8c1d76ff4a30f2286747, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:63:7e:8b:8d:b3:39:a7:7d:ad:07:d5:34:62:
9a:0a:df:08:35:87:eb:06:94:2d:7e:21:b7:5f:68:
f2:b0:aa:9a:9b:6b:d8:e9:1b:df:0f:8b:b9:ec:1a:
9f:c4:15:f7:d3:d5:34:0f:65:b0:e6:85:7c:01:6d:
67:ea:19:38:ed:6a:c1:d1:6c:36:56:3e:b9:95:86:
de:c8:8d:2e:69:32:d2:4e:74:20:3c:d9:f8:9d:7b:
76:5d:e7:13:cf:d3:a6:2a:a9:fb:33:fe:1f:63:df:
76:20:ed:57:95:ed:3a:dd:f1:e7:8d:83:31:d0:6d:
a6:e1:9e:9a:0f:3e:3f:9c:af:64:74:87:17:d5:1f:
bb:2d:20:a6:5f:73:47:af:ad:28:a9:ed:3a:cb:1f:
0b:0d:a9:9c:84:74:4c:15:9f:3e:47:10:0d:b2:45:
5f:bd:17:34:8b:cd:96:c1:26:bb:38:4c:df:87:63:
e4:73:6c:eb:89:45:6a:0a:a9:3b:df:d3:12:f9:49:
b6:1a:8e:8c:23:ec:02:c0:6d:c7:1e:81:83:5c:af:
42:23:e5:a6:11:7e:ee:37:57:ab:b0:e8:74:a1:b4:
b6:65:92:62:30:76:33:ee:54:52:75:6a:fa:91:f2:
e2:b5:7c:30:41:35:bb:76:22:f6:a8:39:3f:63:7c:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:9D:FE:E1:AA:E5:7A:4F:BC:03:F3:63:8B:E3:A1:E8:89:29:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d3835ac1-1baf-480e-b15c-1978ec8cd4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.184.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:e0:9b:a7:ff:67:a3:78:d8:87:2d:c5:1c:16:e8:02:cf:20:
fe:67:2e:1b:92:36:f4:f4:ff:b0:56:29:54:73:93:b6:65:ce:
66:3f:bf:4f:98:63:c5:2e:d4:5b:ef:00:fb:fa:e3:bc:6c:d3:
2a:d8:8c:3c:81:ee:6d:61:61:64:62:14:97:fb:5a:7b:7b:c2:
86:b9:a6:89:81:3e:eb:59:ee:63:a8:31:32:70:f6:96:85:02:
ea:1a:60:98:49:0d:59:53:37:c0:bc:90:4b:34:b3:97:f8:32:
f1:56:89:05:e2:7e:fd:30:e1:a7:67:e6:08:5f:49:2f:6e:3a:
e0:f8:4e:c8:6e:ff:62:21:72:df:62:42:ef:26:06:13:74:9e:
bd:46:32:7a:d3:b1:fa:b2:88:c3:d7:28:d2:09:20:e3:13:90:
9f:c5:16:11:1a:cd:3c:44:04:3f:34:4b:bd:e7:a2:11:69:d5:
79:16:58:66:f1:25:31:a3:43:dc:88:47:f6:9e:f1:5a:37:56:
e5:6b:a8:5a:78:04:36:0e:d9:7d:54:3f:a0:91:e3:12:a2:8b:
6c:d7:f4:e5:87:66:1d:a6:04:7b:3a:c7:be:a5:eb:66:db:aa:
29:cf:a9:c2:46:da:4f:f4:a7:48:60:34:9d:88:5c:83:d3:b2:
19:08:f6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:30:32 2025 by rpki-client