Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa
File: f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa (raw, json)
Hash identifier: IeAKDT1CYhEIJ6eiAjxlQPXejUG38JxAxKc26Efwtg4=
Subject key identifier: F0:F2:EA:57:C0:2E:BE:2E:B4:1B:CE:C9:58:B0:8C:34:46:1E:08:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F614499190C55CF70F0692E722D72A7BD4C4F9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa
Signing time: Tue 28 Oct 2025 00:40:50 +0000
ROA not before: Tue 28 Oct 2025 00:40:50 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:61:44:99:19:0c:55:cf:70:f0:69:2e:72:2d:72:a7:bd:4c:4f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:40:50 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=feff96dc78320b6f5528c144326eaf4311e639c86c266fa3ac8745ea0fdc3bc2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:e3:78:eb:aa:b8:d1:52:5a:05:c6:a1:e6:
f7:ee:9f:b5:0e:10:79:2f:ea:23:14:1d:ac:f6:cc:
db:c8:fb:77:69:0b:6f:fa:a2:28:fa:27:7a:27:7c:
f9:1a:4e:e6:bc:44:e0:3e:27:34:64:03:d3:7a:78:
1a:99:25:16:ef:27:41:82:5d:20:e2:5a:4c:50:fa:
9d:2c:38:12:e6:e4:18:89:0f:37:48:86:fd:17:ab:
ee:0a:b7:e7:d0:93:d6:1c:92:fc:46:67:2e:c5:8e:
7a:3d:d0:22:80:35:a2:f3:36:a7:5f:44:a4:ae:96:
82:96:b8:45:d6:b7:18:15:d8:5f:4b:f0:1d:82:39:
0e:6e:30:e0:53:14:d9:c6:eb:29:6f:29:f1:6a:c9:
02:1b:0a:90:c2:ac:2c:c0:e1:0e:5a:82:3e:f8:5c:
98:45:b7:e6:ce:36:c6:e8:c0:67:af:e1:d7:67:c2:
53:33:36:31:d4:1a:2c:5f:4f:ae:35:05:d2:81:dd:
5a:b9:e2:82:07:2b:1c:8d:ef:9d:0e:cc:e1:43:f2:
d2:a3:2a:cd:f5:c9:52:82:65:d8:23:5d:24:ee:e5:
7b:42:34:81:2b:9d:6e:b9:e2:c3:99:33:bd:03:07:
4f:e7:15:2f:04:37:ca:f1:d6:8b:a6:1c:22:3e:81:
6d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F2:EA:57:C0:2E:BE:2E:B4:1B:CE:C9:58:B0:8C:34:46:1E:08:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f85e01b8-c490-4a13-a34f-3fca5f7dd45f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.149.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c7:13:94:02:9c:de:83:7b:8c:24:fd:f8:3f:d2:f9:6e:08:
22:76:21:18:f7:42:29:dc:db:7a:1b:1a:92:ba:bb:92:bc:e6:
10:13:55:d1:67:22:80:70:01:a8:86:29:e3:bc:04:f5:88:76:
2b:77:64:cc:e3:08:5f:c0:77:76:42:35:e2:f5:5f:74:7a:04:
26:ba:48:55:55:37:94:47:9b:d9:dd:41:56:76:cd:13:42:45:
f5:3f:7b:e8:c7:5f:a2:27:d1:cc:c5:f2:b3:3e:5d:a2:80:5a:
bf:21:81:8e:47:ea:69:08:9c:a5:ae:dc:62:f1:42:0f:a5:9b:
a6:5f:b4:d6:88:1d:8d:60:87:a2:10:ef:46:22:5d:05:ff:ae:
0c:d6:c1:f6:e4:95:ab:86:3c:23:3d:c7:3e:c6:1d:0d:12:1f:
98:af:2d:cd:f0:00:f2:dc:48:31:24:81:66:bb:1e:ff:eb:3d:
b2:dc:db:14:3e:03:c1:1d:bc:55:4c:28:ac:ef:72:7e:aa:0d:
7e:33:d7:f8:63:28:f8:2f:6b:5f:a8:cf:4f:0e:80:6b:87:fb:
e4:19:f2:a1:ac:93:8e:68:46:17:24:61:b5:a1:79:c7:93:42:
51:7f:a3:41:c8:f4:c4:b1:b6:a6:47:52:ab:f1:9b:a1:93:30:
36:c3:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:00 2025 by rpki-client