Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
File: eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa (raw, json)
Hash identifier: la9nD4E8ICVk6snJbVvROjhxXKSaYFTwM1Fijia95uA=
Subject key identifier: CD:D0:F4:CF:F6:2C:84:0C:49:1F:34:C0:E6:1F:71:DF:D4:94:8B:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2ECB1D7D1D5F547D5E5C0C147D5B2FEDC63F39F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
Signing time: Tue 28 Oct 2025 00:20:12 +0000
ROA not before: Tue 28 Oct 2025 00:20:12 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:cb:1d:7d:1d:5f:54:7d:5e:5c:0c:14:7d:5b:2f:ed:c6:3f:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:20:12 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=877bad9169d0d1c8084b528fea6f046eadc7b84079e79eaf29b6703a44671085, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:9d:d5:87:28:72:13:f2:50:fe:ab:4a:1a:
14:ec:9a:22:07:5f:37:f7:42:45:19:cc:35:c8:34:
b6:d8:bd:8d:4b:10:c5:50:c2:d0:8d:df:ad:03:e1:
ee:d8:90:f0:64:46:11:61:bb:0c:48:66:67:59:41:
87:60:84:22:58:24:20:79:5a:d8:6b:84:58:49:59:
0f:fb:3b:ad:8a:2d:bb:05:1d:9b:22:1d:32:03:04:
58:4a:d9:9a:9c:01:d5:b5:97:9f:89:26:bf:33:f8:
02:99:f2:6c:da:2e:37:24:a2:b3:ae:4f:3d:3d:26:
9d:1d:7a:7c:56:2e:c7:ec:a1:0d:2c:fe:f6:23:d3:
5e:a2:fd:9b:fb:b0:89:b8:65:9c:1c:59:c1:a7:67:
30:a0:71:5e:6a:57:3f:45:0b:4e:89:34:df:5b:5f:
c7:dd:88:ec:04:15:f2:97:c7:fa:ef:d0:2e:8b:a6:
f6:85:68:14:8e:2f:1b:02:46:b5:98:e0:3a:84:7d:
97:90:9e:51:60:ac:1c:04:27:df:bf:d0:2e:9b:a3:
8f:4d:a6:19:a2:c6:43:b1:c6:c0:e7:3d:75:63:5a:
aa:11:04:f8:f9:56:19:3b:76:8e:ed:15:45:c0:d3:
4a:3d:82:65:a3:e5:ab:09:39:b7:1a:52:6e:1a:14:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D0:F4:CF:F6:2C:84:0C:49:1F:34:C0:E6:1F:71:DF:D4:94:8B:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:97:e9:85:87:ca:42:a8:3a:68:51:9c:a2:9e:96:50:ea:29:
19:52:94:38:d3:aa:4a:a7:64:7a:60:09:5a:43:93:26:bf:ac:
85:5a:dd:93:52:31:e6:c8:d0:d1:0a:ea:25:df:ff:d3:69:b7:
0c:f8:d5:e4:88:a1:a1:9f:2d:9f:7c:44:90:5f:45:71:d0:d3:
f6:d7:65:ef:42:ea:6d:41:d3:7b:fe:31:67:f2:e6:98:f0:7a:
30:58:3c:2e:42:ac:d1:5b:22:03:69:d5:6f:1c:b4:bf:6e:48:
bc:04:aa:c2:f4:fd:7a:dc:db:f7:3b:2e:62:5d:73:66:ee:71:
b4:2a:18:55:46:59:4f:ca:7a:36:f3:f2:b1:43:34:9f:85:bf:
00:63:1a:a5:01:1f:42:77:39:d8:aa:be:67:c1:a8:6c:d9:68:
a3:4f:a5:e2:40:cf:02:06:3e:7a:a7:29:8b:ca:92:5c:c9:af:
9c:fb:c9:d9:c2:fb:27:0a:a8:c5:4f:91:17:b5:86:91:6f:3c:
51:e9:a5:99:3a:04:ce:43:2d:d1:b7:c5:5a:f7:3c:b9:8e:97:
c7:63:67:cd:79:77:a8:97:45:ce:22:6a:25:a8:b2:c8:05:df:
1d:2a:e7:ee:15:10:19:38:ec:a5:a7:31:93:b6:6b:f6:08:d9:
80:d6:ab:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:48 2025 by rpki-client