Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036726f8-6073-4bf5-902d-0e3310abf517.roa
File: 036726f8-6073-4bf5-902d-0e3310abf517.roa (raw, json)
Hash identifier: 1c4tZKq4mg78rYe9K8ERudNsMVS9OwN8gc6Ptg0hZXk=
Subject key identifier: 5F:DE:18:FD:43:17:E5:F2:6E:F0:83:4A:EE:32:C4:D8:E5:CF:AF:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AC44DF1BBBA3407752D57F8B7A8A751443EFA88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036726f8-6073-4bf5-902d-0e3310abf517.roa
Signing time: Tue 14 Oct 2025 23:40:25 +0000
ROA not before: Tue 14 Oct 2025 23:40:25 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c4:4d:f1:bb:ba:34:07:75:2d:57:f8:b7:a8:a7:51:44:3e:fa:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:40:25 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bae312be20bd862629700b1daf14996fdb02847223b7cc96ffa3718adb405c51, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:ee:d5:24:50:d7:40:06:1c:aa:ad:07:8e:
01:c9:67:a0:0d:a0:6a:2b:0f:d7:69:99:09:c1:79:
71:f1:67:90:8c:53:85:85:f5:96:6e:c6:75:58:e9:
0f:2a:60:d4:fb:dd:43:db:e6:e0:88:a8:39:0a:2e:
c7:a7:86:ce:81:5f:ee:03:e6:1a:41:0a:76:84:f8:
45:6d:3c:dd:c6:3b:7c:d0:cd:7b:40:48:66:b1:30:
c9:ac:58:6c:fe:c1:82:7d:56:3e:45:6e:03:d3:f8:
5b:d6:aa:d6:79:d8:3e:87:9a:95:58:8e:a8:6d:0a:
46:00:33:59:3a:9c:8f:27:c9:cc:69:bb:10:78:73:
af:42:b1:7d:c3:e4:18:ec:06:ca:74:c7:0d:f0:a0:
8b:49:73:bc:88:d7:f0:c3:cb:b5:17:4c:e1:4c:00:
39:0d:68:f7:9c:34:70:d1:5e:d9:0c:e4:3e:b2:47:
f4:44:87:d9:8e:10:08:dc:a1:4c:24:df:d3:93:df:
2e:46:82:dc:60:9d:82:6a:79:22:16:42:a0:ee:dd:
4e:49:f1:48:80:62:4f:d9:70:3f:47:3c:8c:42:ed:
bb:f2:26:90:22:0d:4d:09:a7:0d:c5:25:7f:d2:31:
dd:3a:c9:9e:85:1d:7a:54:20:24:0e:54:5b:9b:9d:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:18:FD:43:17:E5:F2:6E:F0:83:4A:EE:32:C4:D8:E5:CF:AF:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/036726f8-6073-4bf5-902d-0e3310abf517.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.33.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0b:e4:e5:61:23:e7:c5:90:62:13:11:30:48:56:91:b2:80:
db:56:01:9a:ac:3e:71:40:c7:45:35:43:c4:9e:0b:46:a4:89:
b1:ee:47:5b:58:98:65:6e:34:ff:fb:ce:2a:1a:ad:1b:6d:c0:
62:fc:1f:a9:59:59:99:c0:39:3e:ed:ff:dd:fb:b0:b4:28:1c:
b6:2b:ba:02:5a:84:84:cf:53:4c:30:f2:90:b6:33:06:9d:1d:
33:45:05:1b:52:1c:a8:26:d7:d5:75:27:2e:fd:9f:01:d5:be:
22:a7:10:e2:8b:33:4b:c3:45:53:e1:c4:2c:92:32:87:20:81:
82:3a:85:d1:ab:4b:d6:6e:2e:f3:95:a6:a0:cb:f7:ba:1b:4a:
21:31:0c:68:05:4f:e5:9a:df:6e:38:36:41:1d:1f:b8:b8:96:
64:f1:d0:ac:06:4f:c1:8a:44:09:8f:60:34:3d:5e:9f:e8:eb:
c7:6e:a4:29:58:45:f3:8a:a3:85:16:d6:4d:2a:82:3d:88:a0:
7c:4d:f1:5f:d3:58:92:24:18:a7:65:fa:a4:1a:7a:1a:1c:ad:
81:83:6c:d2:6c:95:92:73:0e:5c:24:99:f7:87:92:32:44:48:
d7:fc:f8:be:cd:5d:58:06:47:19:54:e0:26:21:d7:3c:5d:dd:
72:23:cf:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOsRN8bu6NAd1LVf4t6inUUQ++ogwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjM0MDI1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYWUzMTJiZTIwYmQ4NjI2Mjk3MDBiMWRhZjE0OTk2ZmRi
MDI4NDcyMjNiN2NjOTZmZmEzNzE4YWRiNDA1YzUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5mu7VJFDXQAYcqq0HjgHJZ6ANoGorD9dpmQnBeXHxZ5CM
U4WF9ZZuxnVY6Q8qYNT73UPb5uCIqDkKLsenhs6BX+4D5hpBCnaE+EVtPN3GO3zQ
zXtASGaxMMmsWGz+wYJ9Vj5FbgPT+FvWqtZ52D6HmpVYjqhtCkYAM1k6nI8nycxp
uxB4c69CsX3D5BjsBsp0xw3woItJc7yI1/DDy7UXTOFMADkNaPecNHDRXtkM5D6y
R/REh9mOEAjcoUwk39OT3y5GgtxgnYJqeSIWQqDu3U5J8UiAYk/ZcD9HPIxC7bvy
JpAiDU0Jpw3FJX/SMd06yZ6FHXpUICQOVFubnXTvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUX94Y/UMX5fJu8INK7jLE2OXPr/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAzNjcyNmY4LTYwNzMtNGJmNS05MDJkLTBlMzMxMGFiZjUxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjViEwDQYJKoZIhvcNAQELBQADggEBADIL5OVhI+fFkGITETBIVpGygNtW
AZqsPnFAx0U1Q8SeC0akibHuR1tYmGVuNP/7zioarRttwGL8H6lZWZnAOT7t/937
sLQoHLYrugJahITPU0ww8pC2MwadHTNFBRtSHKgm19V1Jy79nwHVviKnEOKLM0vD
RVPhxCySMocggYI6hdGrS9ZuLvOVpqDL97obSiExDGgFT+Wa3244NkEdH7i4lmTx
0KwGT8GKRAmPYDQ9Xp/o68dupClYRfOKo4UW1k0qgj2IoHxN8V/TWJIkGKdl+qQa
ehocrYGDbNJslZJzDlwkmfeHkjJESNf8+L7NXVgGRxlU4CYh1zxd3XIjz9w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:58 2025 by rpki-client