Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
File: dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa (raw, json)
Hash identifier: /nFVkxzkfiMMdX57NgLIXxG+nNzpupqcI5ejXbywBa0=
Subject key identifier: AB:ED:58:4A:C4:2F:AC:F0:73:C5:DB:51:0F:A8:11:BF:B0:90:EF:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1554E4E3609F012A5CD939B0C13781F62BB0924A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
Signing time: Tue 28 Oct 2025 00:00:16 +0000
ROA not before: Tue 28 Oct 2025 00:00:16 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.83.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:54:e4:e3:60:9f:01:2a:5c:d9:39:b0:c1:37:81:f6:2b:b0:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:00:16 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=8f307874965d3d5f8c87f08834b8873231a2478d42e94add352a1bdb7852d5a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:9d:23:d9:0a:7c:29:61:7d:91:eb:dc:d8:
aa:97:75:c1:98:a1:63:8a:fc:4a:57:ce:e4:94:12:
6e:34:94:a1:88:dd:1f:52:ce:62:0c:e3:bb:20:5e:
62:f0:2e:bd:6b:02:dc:d8:aa:bf:f2:54:42:5c:0d:
56:9e:6a:9a:8d:8b:fd:c2:43:d2:67:68:a1:8d:d9:
35:fc:30:15:da:c0:ee:0a:f6:c8:ff:68:1d:ea:f7:
c8:c3:ad:9b:3c:6d:ed:e3:ce:72:51:56:4d:de:b2:
ba:5b:4e:f6:2f:db:ac:60:e4:24:e1:cc:0c:00:f0:
79:63:f0:8b:ff:00:62:e4:29:72:67:d5:c4:b3:12:
7b:8e:97:2b:b6:22:67:69:53:60:f1:a3:cb:72:8e:
f4:b1:78:b1:fb:92:b6:b0:41:6a:26:b7:1d:f6:42:
4f:25:1d:f5:88:c4:b4:6f:49:45:fb:9b:ae:bd:e6:
c6:98:7a:4f:20:ab:a2:73:3a:0d:34:10:3e:8e:aa:
d2:11:0b:e0:63:e1:f6:0e:15:df:2f:5c:d2:b5:ae:
ca:11:57:d0:be:63:5f:f4:01:64:bf:3f:19:79:da:
1b:a7:83:a8:41:cb:c2:27:2f:10:58:73:36:cb:83:
20:35:2f:05:2b:e2:47:bc:cf:ba:4d:6c:f8:45:c3:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:ED:58:4A:C4:2F:AC:F0:73:C5:DB:51:0F:A8:11:BF:B0:90:EF:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dafad788-f823-40c4-a65f-5cf6ecf7c9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.83.101.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9e:b6:13:f1:f2:6d:da:b6:75:61:e1:14:94:5c:f8:a8:76:
db:38:c2:63:7b:8d:22:ef:f2:40:52:e2:78:3d:1f:2e:1d:f7:
fb:37:c5:b7:1f:5e:e1:a3:ec:e4:2c:ec:96:0b:30:76:87:68:
8e:89:ac:fc:f0:15:ef:16:c5:a7:b0:48:ee:32:32:fe:fb:4c:
30:be:10:18:ba:cd:09:41:76:78:65:ca:c1:62:7a:20:2c:19:
6c:18:cc:0d:6b:68:c3:5b:4c:7c:ad:3d:18:e0:ff:e8:a0:0a:
48:4c:d3:eb:53:e1:83:30:8f:20:66:c9:c8:98:f1:d5:fc:b6:
2f:95:98:f1:29:f8:1b:04:6e:74:eb:23:8e:a3:b8:fd:be:e5:
bb:19:ee:dd:f8:fd:5f:86:e6:1a:9b:9e:e7:1f:dc:fa:16:40:
7d:d9:7e:5b:b3:7d:05:f5:3f:70:e4:b8:c3:e5:a5:80:b6:6f:
28:82:71:57:4c:a9:dd:5d:7b:be:8e:30:d5:d0:a7:b6:5b:ac:
fd:1d:2c:bd:fb:84:a5:eb:70:96:e7:fb:a3:b1:0a:d2:6f:6e:
5b:d8:72:4f:2b:c1:d9:01:76:5e:dd:b0:7d:5b:61:72:93:33:
41:a0:49:4d:34:a4:79:46:e8:7a:d2:0a:be:1f:21:56:95:c7:
f2:0e:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:18 2025 by rpki-client