Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10a345df-ede3-4952-9bec-554f813292ba.roa
File: 10a345df-ede3-4952-9bec-554f813292ba.roa (raw, json)
Hash identifier: KzKuKnomiu77gZ/n94JgghqFEU8WRWtN4ePpixTpRY0=
Subject key identifier: 57:90:B7:27:3B:DA:57:54:86:40:8E:BB:1A:B3:1C:C0:3C:3E:B2:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2018107D64DE068D908F350DCA8C5DAA862B3D45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10a345df-ede3-4952-9bec-554f813292ba.roa
Signing time: Tue 14 Oct 2025 17:21:54 +0000
ROA not before: Tue 14 Oct 2025 17:21:54 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:18:10:7d:64:de:06:8d:90:8f:35:0d:ca:8c:5d:aa:86:2b:3d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:21:54 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a9cc04dbf28eaed78ffdeccd5d350541ed26650a2fb05aa8fc9f93f3cfe07554, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:33:ce:19:55:50:fa:6b:b0:eb:d7:7d:d1:e3:
bf:e4:fe:e5:b8:e2:26:db:8d:33:7c:69:18:de:66:
5c:50:e4:d8:25:a5:e4:26:66:cd:ed:c1:42:09:d2:
89:6d:d8:fa:fa:36:54:17:c4:1a:47:ae:7c:67:7d:
02:26:05:7e:83:65:e3:99:ee:6a:7b:a3:9a:2e:2d:
0e:35:1a:fb:bb:e5:a2:eb:09:1e:e2:83:53:ba:50:
46:d0:77:36:9f:2e:cf:60:25:83:80:95:d4:fb:74:
a3:cf:4b:64:29:44:9b:06:40:d1:01:5d:58:33:a1:
50:d5:cc:0c:57:c5:1c:16:1f:60:04:75:c7:ab:10:
dc:9a:ee:1b:fd:69:c3:12:88:51:9a:cc:c2:2d:35:
ff:e4:cf:83:11:e1:54:e9:47:ce:28:f8:a5:cd:75:
16:60:fa:a6:30:75:f3:68:3e:77:07:1a:04:a6:2a:
e6:50:4b:80:fc:84:b7:ef:43:f6:82:aa:64:48:74:
08:42:be:29:78:18:fe:cf:ed:79:75:88:18:ea:96:
07:c3:14:48:ec:43:84:ae:dd:96:77:10:24:b9:99:
36:bb:b4:b2:c1:44:01:9e:fa:84:56:22:de:a0:d2:
c6:29:a8:47:e6:a9:8c:e6:00:1a:ed:9a:c1:b4:c7:
a2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:B7:27:3B:DA:57:54:86:40:8E:BB:1A:B3:1C:C0:3C:3E:B2:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/10a345df-ede3-4952-9bec-554f813292ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ea:b7:0f:0b:95:5b:e2:56:d4:13:2d:4f:55:e5:da:52:5f:
77:54:14:c5:0c:34:65:34:dc:e1:f2:8a:00:b0:ae:ac:40:47:
cd:17:77:c6:de:eb:3e:25:25:e7:2b:02:17:5b:ad:c9:f2:30:
eb:35:84:17:f2:16:60:27:65:0c:47:65:00:89:83:4c:6a:bb:
bb:3f:e5:cc:55:44:58:26:93:ad:2d:0e:b5:fa:bd:3f:8d:46:
4f:0c:3c:68:1f:76:de:3b:c7:32:55:42:c2:c3:60:c3:91:6c:
66:fb:11:f4:b1:7a:f1:c2:50:36:a5:29:e1:56:99:56:e3:8b:
70:1b:78:ec:8d:5a:2d:f7:6c:8c:e5:e1:b2:0e:2a:45:be:b0:
5d:89:db:94:d8:f1:de:e2:0f:2f:41:90:06:8f:3c:92:74:54:
4b:f4:12:b3:51:71:d3:b9:62:53:d2:76:90:de:c1:97:7a:b5:
3c:3e:9d:3e:8f:6a:ca:2b:1b:34:85:94:5c:b3:fa:78:7d:8c:
6b:70:57:50:d0:23:f7:49:f5:f5:e2:c2:c3:0b:f4:f9:d6:48:
dc:e4:af:f4:41:af:95:7d:4e:27:53:ea:30:4a:51:20:28:b1:
38:52:f9:31:76:e9:90:8c:d0:07:76:8b:85:0b:06:ba:7a:b8:
a3:5f:04:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIBgQfWTeBo2QjzUNyoxdqoYrPUUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTcyMTU0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOWNjMDRkYmYyOGVhZWQ3OGZmZGVjY2Q1ZDM1MDU0MWVk
MjY2NTBhMmZiMDVhYThmYzlmOTNmM2NmZTA3NTU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCOM84ZVVD6a7Dr133R47/k/uW44ibbjTN8aRjeZlxQ5Ngl
peQmZs3twUIJ0olt2Pr6NlQXxBpHrnxnfQImBX6DZeOZ7mp7o5ouLQ41Gvu75aLr
CR7ig1O6UEbQdzafLs9gJYOAldT7dKPPS2QpRJsGQNEBXVgzoVDVzAxXxRwWH2AE
dcerENya7hv9acMSiFGazMItNf/kz4MR4VTpR84o+KXNdRZg+qYwdfNoPncHGgSm
KuZQS4D8hLfvQ/aCqmRIdAhCvil4GP7P7Xl1iBjqlgfDFEjsQ4Su3ZZ3ECS5mTa7
tLLBRAGe+oRWIt6g0sYpqEfmqYzmABrtmsG0x6LlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUV5C3JzvaV1SGQI67GrMcwDw+ssEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEwYTM0NWRmLWVkZTMtNDk1Mi05YmVjLTU1NGY4MTMyOTJiYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGhCgwDQYJKoZIhvcNAQELBQADggEBAKnqtw8LlVviVtQTLU9V5dpSX3dU
FMUMNGU03OHyigCwrqxAR80Xd8be6z4lJecrAhdbrcnyMOs1hBfyFmAnZQxHZQCJ
g0xqu7s/5cxVRFgmk60tDrX6vT+NRk8MPGgfdt47xzJVQsLDYMORbGb7EfSxevHC
UDalKeFWmVbji3AbeOyNWi33bIzl4bIOKkW+sF2J25TY8d7iDy9BkAaPPJJ0VEv0
ErNRcdO5YlPSdpDewZd6tTw+nT6PasorGzSFlFyz+nh9jGtwV1DQI/dJ9fXiwsML
9PnWSNzkr/RBr5V9TidT6jBKUSAosThS+TF26ZCM0Ad2i4ULBrp6uKNfBCk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:50 2025 by rpki-client