Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
File: da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa (raw, json)
Hash identifier: ic5LIkhdO7uiWJaNWAxuklZAH8bE5XIK2gZWfLmw7ts=
Subject key identifier: 93:49:34:1C:24:CA:26:9B:01:B2:7A:5B:B4:B7:55:D3:79:6A:08:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F03DA730F5C93179FDEC6ED75B1872B060FBD65
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
Signing time: Tue 28 Oct 2025 00:10:59 +0000
ROA not before: Tue 28 Oct 2025 00:10:59 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.82.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:03:da:73:0f:5c:93:17:9f:de:c6:ed:75:b1:87:2b:06:0f:bd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:10:59 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=7187506bc5280828c19188303dfa932c9189f5ed1fc0a467d8976fef60f2e8c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:0c:c9:be:12:49:0f:f5:bc:30:2b:16:70:
f3:fa:25:e8:6b:c0:ef:d5:38:44:30:d8:47:00:1c:
4b:03:85:e8:db:10:84:2f:99:88:f6:2b:f4:64:7a:
ec:20:f7:6f:6c:3f:69:ef:3f:78:cf:a7:d7:c7:19:
51:51:54:88:e9:c4:c2:5c:a8:29:18:08:1e:e0:8b:
ba:bd:36:74:2a:55:cd:d1:ff:14:b3:83:91:75:51:
a3:f6:e7:dd:06:d7:0c:70:8a:b0:27:b3:17:b4:c0:
94:d9:20:87:84:76:fe:78:5c:db:f3:be:09:03:c5:
05:d4:6d:2e:2b:f4:63:a8:45:82:a2:77:80:d0:e0:
29:54:29:59:fc:2f:db:47:70:a6:95:f4:d7:ee:5e:
ac:60:be:40:d5:f3:7f:f0:ae:ba:a3:f0:dc:92:5a:
d6:0e:05:97:04:2c:a7:88:87:5e:76:00:80:a6:4f:
e8:56:8c:7f:df:d3:ea:de:bc:6d:0a:50:ab:ca:e1:
db:4a:f8:c6:e7:db:65:e2:73:53:d4:1a:6a:64:2c:
bf:51:38:52:75:0c:82:b7:f0:7a:8d:a6:92:ef:e7:
11:8e:19:97:e6:b4:f9:7c:9e:3c:60:1d:f9:a6:cc:
9a:66:4e:82:59:5a:3b:d1:26:60:e3:a4:4f:24:20:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:49:34:1C:24:CA:26:9B:01:B2:7A:5B:B4:B7:55:D3:79:6A:08:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.188.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:d8:df:04:94:ab:49:93:fa:e1:bf:68:5b:b4:0b:84:b7:d7:
0d:a2:f8:92:00:01:97:b3:36:7d:3b:87:1a:ff:92:fb:9e:11:
6e:08:09:3c:aa:5f:df:4f:c2:62:83:66:41:3a:a1:11:31:f1:
af:03:67:54:cb:24:50:a3:60:da:6d:85:07:99:17:05:d1:71:
42:bb:ce:8e:99:f6:98:db:10:ca:9e:54:52:b6:71:44:18:74:
89:ee:af:d4:c2:8c:76:ed:d2:63:41:47:f8:a2:1a:f6:bd:77:
19:eb:9e:8c:af:59:28:09:c1:87:e6:e1:c8:6c:de:dc:fb:2e:
8a:31:ac:d6:b1:69:be:3d:3c:ff:69:98:ea:76:35:a6:10:04:
28:8a:ef:fe:72:f2:5a:7d:c8:d2:59:04:9c:e9:5b:eb:1e:68:
86:1d:7a:d4:e9:14:b5:85:81:96:ff:64:23:a5:0f:11:ee:56:
69:42:c2:5c:4b:f4:48:9f:ba:a2:31:02:bb:96:d2:d9:c4:a4:
6b:58:f5:e1:89:58:a0:ca:78:ec:b4:52:14:12:d9:95:fe:91:
9a:36:e1:62:b5:25:05:18:f3:eb:5c:bb:3d:0d:66:ab:37:86:
2c:bf:71:aa:41:03:f5:95:5c:98:10:69:52:48:85:fd:bd:0b:
ed:86:a6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:13 2025 by rpki-client