Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0627a301-f8f7-498b-9ea8-b8e901cadd55.roa
File: 0627a301-f8f7-498b-9ea8-b8e901cadd55.roa (raw, json)
Hash identifier: 7nZ12eU0Z0yZbeGvazOaPPx2Af4PlxIY16CFmWXUbkQ=
Subject key identifier: D9:A7:FF:9C:83:A1:EF:08:0D:28:77:56:7F:FA:5E:B4:87:90:CE:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48D623BCE46F4287BDAF4A58363BBBF1E0F2152E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0627a301-f8f7-498b-9ea8-b8e901cadd55.roa
Signing time: Sat 18 Oct 2025 02:51:33 +0000
ROA not before: Sat 18 Oct 2025 02:51:33 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:d6:23:bc:e4:6f:42:87:bd:af:4a:58:36:3b:bb:f1:e0:f2:15:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:51:33 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3d03154c97300aef56b9f2f6b077aa43c5f18a797c6a01b6649b5b1e5dd0ec8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:41:8f:a9:a2:64:ac:47:89:82:d9:c5:27:
47:d3:95:e3:02:c6:a2:a9:4a:24:13:60:8d:21:8d:
d8:3f:e9:3a:da:ca:e1:c1:a7:18:6b:88:9c:ee:58:
aa:53:aa:2f:8c:13:62:90:6b:41:30:3b:df:1b:6c:
f5:cb:e1:85:04:19:55:1d:54:87:60:7b:26:a1:97:
73:a6:6e:e0:29:83:6e:f7:dc:d2:ef:cc:b1:2f:a2:
b1:ba:a2:45:fb:7d:c3:10:b3:71:46:2e:14:57:2f:
92:cd:04:d5:22:61:7b:36:28:b2:73:36:5e:82:41:
af:c4:dd:cb:df:3e:9d:58:ac:99:6f:96:e8:ac:ad:
db:49:ce:f9:8e:0d:aa:52:cc:d5:d6:d7:89:c2:42:
c9:53:53:6b:56:3e:a3:28:89:e9:f8:eb:1b:94:1d:
36:f9:1e:0b:8d:de:d2:99:27:0c:6f:3f:d1:06:4a:
3d:ea:63:0c:b0:51:0a:b5:29:c1:f2:fd:53:18:2b:
18:f3:cf:4f:8d:44:48:22:13:52:f9:e6:ac:95:e6:
84:8c:b7:78:d3:9f:43:b5:3e:04:34:40:ef:06:b9:
1e:51:20:2c:fe:57:4a:1a:5e:90:58:2a:45:23:e1:
d1:fa:3b:51:f3:f7:f4:3b:1b:62:be:a9:34:f2:44:
b2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:FF:9C:83:A1:EF:08:0D:28:77:56:7F:FA:5E:B4:87:90:CE:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0627a301-f8f7-498b-9ea8-b8e901cadd55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.50.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:aa:f4:ec:5b:34:50:8d:ba:d7:31:47:47:55:a7:cb:66:5f:
63:c1:bc:d3:01:87:fd:c2:30:d9:90:14:ac:99:d0:16:4e:95:
ef:f3:09:4a:eb:b6:e2:d3:b0:22:62:f9:df:21:15:36:92:77:
80:7c:d9:57:72:5e:87:ea:ac:e6:29:25:8d:4f:4d:f9:fe:47:
64:cc:59:5a:69:df:77:75:8d:75:4e:40:fb:63:05:bd:45:bc:
88:00:9f:9f:fd:e9:b1:8c:7d:c9:54:e1:fb:41:06:eb:7e:d6:
f0:e9:bf:b9:64:60:f4:8f:c8:d0:35:0b:11:24:f2:72:0f:16:
40:66:2c:06:68:f4:c9:9e:21:e8:2b:07:9e:87:17:cd:cb:77:
4e:f9:c3:79:ab:64:c9:36:22:db:c4:c2:f0:30:3b:a1:cb:5f:
1f:d9:dd:36:58:4b:8b:35:8e:61:0d:3a:2e:ac:8a:c4:29:f0:
e1:90:64:65:61:ef:90:03:b0:f5:33:1b:71:ab:03:1a:24:69:
f4:a0:f0:19:9a:42:52:6e:34:3e:47:48:a3:fd:b4:49:0e:b8:
50:1f:50:0c:25:d0:79:68:77:28:5d:ef:16:ee:bb:81:31:57:
10:ff:ee:2d:db:cb:81:05:c6:24:32:f1:86:2a:04:c3:b8:29:
08:5c:b9:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSNYjvORvQoe9r0pYNju78eDyFS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDI1MTMzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDAzMTU0Yzk3MzAwYWVmNTZiOWYyZjZiMDc3YWE0M2M1
ZjE4YTc5N2M2YTAxYjY2NDliNWIxZTVkZDBlYzhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDVYUGPqaJkrEeJgtnFJ0fTleMCxqKpSiQTYI0hjdg/6Tra
yuHBpxhriJzuWKpTqi+ME2KQa0EwO98bbPXL4YUEGVUdVIdgeyahl3OmbuApg273
3NLvzLEvorG6okX7fcMQs3FGLhRXL5LNBNUiYXs2KLJzNl6CQa/E3cvfPp1YrJlv
luisrdtJzvmODapSzNXW14nCQslTU2tWPqMoien46xuUHTb5HguN3tKZJwxvP9EG
Sj3qYwywUQq1KcHy/VMYKxjzz0+NREgiE1L55qyV5oSMt3jTn0O1PgQ0QO8GuR5R
ICz+V0oaXpBYKkUj4dH6O1Hz9/Q7G2K+qTTyRLIdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2af/nIOh7wgNKHdWf/petIeQzjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2MjdhMzAxLWY4ZjctNDk4Yi05ZWE4LWI4ZTkwMWNhZGQ1NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCTIwDQYJKoZIhvcNAQELBQADggEBAMKq9OxbNFCNutcxR0dVp8tmX2PB
vNMBh/3CMNmQFKyZ0BZOle/zCUrrtuLTsCJi+d8hFTaSd4B82VdyXofqrOYpJY1P
Tfn+R2TMWVpp33d1jXVOQPtjBb1FvIgAn5/96bGMfclU4ftBBut+1vDpv7lkYPSP
yNA1CxEk8nIPFkBmLAZo9MmeIegrB56HF83Ld075w3mrZMk2ItvEwvAwO6HLXx/Z
3TZYS4s1jmENOi6sisQp8OGQZGVh75ADsPUzG3GrAxokafSg8BmaQlJuND5HSKP9
tEkOuFAfUAwl0Hlodyhd7xbuu4ExVxD/7i3by4EFxiQy8YYqBMO4KQhcuUM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:32 2025 by rpki-client