Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20fdecee-f07b-4abb-a505-c7637d88d00c.roa
File: 20fdecee-f07b-4abb-a505-c7637d88d00c.roa (raw, json)
Hash identifier: dKdPCdWFr58NJEIgtBIkxBJyzcpllDfAKQVMbcL3Txc=
Subject key identifier: EA:47:98:0E:6D:17:85:25:A4:91:B3:DB:C9:32:A8:C6:F7:C5:AB:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 610AE6766BD99F2A004BAB26621C0628B702B13E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20fdecee-f07b-4abb-a505-c7637d88d00c.roa
Signing time: Tue 14 Oct 2025 22:40:21 +0000
ROA not before: Tue 14 Oct 2025 22:40:21 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:0a:e6:76:6b:d9:9f:2a:00:4b:ab:26:62:1c:06:28:b7:02:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:40:21 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b7c0e5a4dae42c8fd031fe30fc121de10d3547308bd06b1f60b2fabd0f9dd1cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:ca:86:43:2c:9c:98:05:f8:c7:7a:7b:67:
62:7a:25:eb:f1:b9:fd:d7:17:1e:c2:c8:bc:6b:cc:
b7:cb:d7:21:48:d0:dc:69:4d:c8:f5:77:5a:cb:f4:
9b:3d:62:3d:75:40:7f:58:a3:cd:47:4a:2e:af:45:
a5:b9:a2:c0:0f:e1:bd:5a:57:06:60:5a:f1:78:ef:
0d:e9:17:26:80:89:e0:94:7b:c5:1c:fd:2d:6b:95:
cf:d5:e4:17:c3:f8:16:73:fa:55:53:a4:7a:ce:60:
33:32:8b:b6:0b:69:af:eb:41:8a:bc:79:a5:9e:22:
ea:93:cc:63:49:b2:ac:49:e8:03:68:61:32:81:50:
0a:4a:66:6c:ed:88:8d:01:f5:48:22:2f:55:b6:87:
30:2c:65:b1:c4:36:0e:57:a6:7d:2d:02:f8:cb:30:
68:72:87:93:a1:36:67:75:ad:58:0e:3b:2c:97:aa:
e0:03:76:5b:69:b3:cc:f6:76:8e:13:5b:f5:a4:2d:
d9:5d:e7:1b:e4:95:ca:18:f6:1a:05:01:ab:51:8d:
c9:1d:ac:62:92:51:8b:ab:c0:00:a7:41:73:be:e9:
4a:3b:38:e8:42:59:08:21:07:97:51:b8:98:ff:f0:
2d:96:1d:7e:37:2d:07:51:5a:39:94:77:5b:e7:6c:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:47:98:0E:6D:17:85:25:A4:91:B3:DB:C9:32:A8:C6:F7:C5:AB:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20fdecee-f07b-4abb-a505-c7637d88d00c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.152.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:23:03:a6:be:64:52:7f:aa:8b:29:64:09:3c:22:b5:d5:cc:
ba:0e:5c:78:11:03:ef:ca:d1:ae:58:d2:df:07:2f:db:25:d7:
ae:a9:e0:40:fc:d4:bf:a5:82:17:57:7b:53:0f:5f:a6:75:ad:
4e:6c:b0:01:1e:3e:98:ae:02:2a:94:d9:e8:28:3d:3d:32:1b:
61:25:ae:2b:d4:7f:48:ff:c6:1a:1f:c4:ed:5c:89:27:3d:fe:
1d:d9:3e:6d:77:ac:ad:0d:32:16:88:ee:00:2c:73:0b:8d:8d:
eb:b4:cc:da:78:0b:2e:54:ab:c7:00:74:f7:8a:d5:64:e7:59:
96:cd:f0:0d:34:d9:79:d0:21:08:d6:ea:fc:f3:98:18:a2:75:
b2:09:0e:18:e8:35:85:a0:9d:12:f2:9e:8b:b5:44:49:b5:38:
e5:48:be:94:2c:27:13:61:d4:f8:8c:b4:e3:13:30:09:94:95:
bd:d3:23:7f:fd:e8:ac:29:cd:b9:4e:ba:23:6f:1c:90:b2:f9:
a4:45:1c:fe:1d:14:97:66:c6:c8:1c:8d:88:c4:f6:9a:e3:8d:
76:26:a3:b5:17:26:ab:da:f6:c1:77:24:b6:5f:1d:67:f5:e0:
ae:36:8f:45:d8:70:9b:3c:8e:44:3f:d0:de:b7:a3:7f:3f:64:
38:ad:ab:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYQrmdmvZnyoAS6smYhwGKLcCsT4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjI0MDIxWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiN2MwZTVhNGRhZTQyYzhmZDAzMWZlMzBmYzEyMWRlMTBk
MzU0NzMwOGJkMDZiMWY2MGIyZmFiZDBmOWRkMWNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsO8qGQyycmAX4x3p7Z2J6Jevxuf3XFx7CyLxrzLfL1yFI
0NxpTcj1d1rL9Js9Yj11QH9Yo81HSi6vRaW5osAP4b1aVwZgWvF47w3pFyaAieCU
e8Uc/S1rlc/V5BfD+BZz+lVTpHrOYDMyi7YLaa/rQYq8eaWeIuqTzGNJsqxJ6ANo
YTKBUApKZmztiI0B9UgiL1W2hzAsZbHENg5Xpn0tAvjLMGhyh5OhNmd1rVgOOyyX
quADdltps8z2do4TW/WkLdld5xvklcoY9hoFAatRjckdrGKSUYurwACnQXO+6Uo7
OOhCWQghB5dRuJj/8C2WHX43LQdRWjmUd1vnbAMxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6keYDm0XhSWkkbPbyTKoxvfFq8owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwZmRlY2VlLWYwN2ItNGFiYi1hNTA1LWM3NjM3ZDg4ZDAwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVJgwDQYJKoZIhvcNAQELBQADggEBADojA6a+ZFJ/qospZAk8IrXVzLoO
XHgRA+/K0a5Y0t8HL9sl166p4ED81L+lghdXe1MPX6Z1rU5ssAEePpiuAiqU2ego
PT0yG2ElrivUf0j/xhofxO1ciSc9/h3ZPm13rK0NMhaI7gAscwuNjeu0zNp4Cy5U
q8cAdPeK1WTnWZbN8A002XnQIQjW6vzzmBiidbIJDhjoNYWgnRLynou1REm1OOVI
vpQsJxNh1PiMtOMTMAmUlb3TI3/96KwpzblOuiNvHJCy+aRFHP4dFJdmxsgcjYjE
9prjjXYmo7UXJqva9sF3JLZfHWf14K42j0XYcJs8jkQ/0N63o38/ZDitq8I=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:50 2025 by rpki-client