Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa
File: e87e4908-56e8-4607-9eaa-66bc2b561735.roa (raw, json)
Hash identifier: 4c0Tfk0J+SluGavmdI86COls2d2OjfeCL5cgEzvK4rA=
Subject key identifier: 0B:E0:F5:B7:04:9A:80:EB:64:EB:AE:39:1A:69:AD:32:AB:DE:42:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B3C5DACB721D891B60E700F31450F47FBDC1DAC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa
Signing time: Tue 28 Oct 2025 00:41:30 +0000
ROA not before: Tue 28 Oct 2025 00:41:30 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3c:5d:ac:b7:21:d8:91:b6:0e:70:0f:31:45:0f:47:fb:dc:1d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:41:30 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=468ceb200336f4d956b500aad7182c625eddd75d6b6b901dac2fbe899afc08ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:2e:66:f1:44:95:c9:88:a1:a4:6f:c3:b4:
c9:f8:81:13:32:5a:44:b2:57:e2:7f:db:5e:b7:d6:
fa:45:da:ff:2e:1e:a0:7c:26:5c:bc:eb:3d:dd:60:
27:ab:3c:7a:80:91:f5:7c:b1:a7:1a:43:5e:ef:9f:
5f:cf:98:45:6e:11:0c:bb:df:41:7d:3a:3b:89:e3:
61:a9:7a:52:2d:68:4b:82:60:a5:af:29:c9:d9:6b:
d0:92:ac:ac:81:ba:c1:db:77:38:2c:fa:90:ff:af:
df:40:03:5a:85:f1:82:84:9a:d5:3d:da:69:7e:da:
10:a2:37:aa:45:1e:3b:ca:84:85:65:91:57:fd:f6:
55:71:6f:51:6c:e7:a1:cf:ff:5d:df:f2:18:ae:79:
6b:1c:8c:45:7b:51:d9:9b:76:58:97:15:66:bf:c0:
05:b4:5d:62:40:77:48:06:a7:4f:cc:ea:6a:67:3b:
88:90:7d:a5:31:71:29:1e:52:51:2b:cf:04:7e:72:
95:49:a6:2f:87:87:bd:8d:87:af:af:67:3e:3b:c8:
df:fc:95:25:25:0b:67:ac:58:c7:3a:96:8a:87:05:
d3:ed:d8:7a:19:b0:da:0f:11:09:5b:dc:ba:ac:f4:
c8:e2:57:64:b2:df:2b:1c:f9:45:13:5d:6f:d0:f8:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:F5:B7:04:9A:80:EB:64:EB:AE:39:1A:69:AD:32:AB:DE:42:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e87e4908-56e8-4607-9eaa-66bc2b561735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.128.0/24
Signature Algorithm: sha256WithRSAEncryption
98:99:b2:db:4f:9b:a9:92:5e:35:4e:16:98:19:a1:cf:68:93:
b2:88:01:3a:61:9a:8b:1b:16:62:51:74:c9:06:24:ae:2d:bd:
42:a9:3e:dd:cd:1b:70:a7:9b:11:7a:a6:66:7d:1b:15:8e:06:
59:47:58:2e:bf:b4:59:55:71:07:6f:8a:f2:c2:8e:3e:5c:68:
ae:27:80:76:d6:eb:63:c5:13:6d:f9:14:d2:cc:bd:3f:b3:48:
88:db:80:23:16:20:19:40:77:b4:47:71:aa:93:2f:e5:0c:65:
31:cb:4c:05:2a:b8:c1:21:b8:34:3c:53:1e:92:2e:67:1b:d0:
74:19:1f:84:76:a3:a8:1b:87:19:f6:16:0c:9f:8a:e8:1d:14:
6b:69:78:d1:93:87:69:6d:ce:1a:1a:18:a6:2e:f5:43:fc:16:
cd:f1:e7:a7:1f:b1:d9:ef:b5:e8:c6:e7:44:67:3b:ad:92:2f:
c4:6e:7d:b9:64:02:7c:ea:96:6f:12:ee:8f:6d:e1:0f:f3:29:
ab:c7:3c:3f:bd:fd:84:0b:30:23:b0:c0:27:93:32:a7:55:5e:
92:59:4f:9c:93:6c:9c:89:97:dc:d7:99:6b:5a:14:96:e2:99:
c6:7e:d1:26:d1:c5:19:de:53:20:3f:7d:13:da:2d:6a:14:e6:
c7:b6:ba:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:39 2025 by rpki-client