Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24859a04-191c-4814-81e1-e9c9493f3b75.roa
File: 24859a04-191c-4814-81e1-e9c9493f3b75.roa (raw, json)
Hash identifier: eOkGe5IdIvvJYJwKdeF0N0ZZSJdZCAErHZbvJH7W8EM=
Subject key identifier: FA:63:91:4F:E2:07:4A:8B:7C:1E:FC:AA:0A:A5:DD:15:CA:EB:FC:FD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FFC80A3FC918504C670C5D205CB30D65C9138F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24859a04-191c-4814-81e1-e9c9493f3b75.roa
Signing time: Sat 18 Oct 2025 00:41:51 +0000
ROA not before: Sat 18 Oct 2025 00:41:51 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:fc:80:a3:fc:91:85:04:c6:70:c5:d2:05:cb:30:d6:5c:91:38:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:41:51 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=507892b297520a8a34cbfd3dfd1cc159b064592b808c0f2ab6923c0c97b5b16b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:38:78:ad:42:6a:20:14:e2:e4:df:cd:1c:
8e:41:d8:89:75:02:a2:53:e0:9b:6a:04:28:dd:0a:
a7:74:4f:05:a6:32:16:5e:0b:cc:4c:51:4c:8c:4c:
f4:ec:7e:d7:7c:88:f4:7f:2d:3c:89:08:d5:81:f5:
3f:cd:44:ad:06:a9:96:8f:bf:8e:93:bd:d7:68:43:
e0:28:22:97:91:1b:2e:c4:06:ab:96:d1:40:f2:9b:
5c:40:59:73:b4:f0:4b:f8:0a:e3:0c:46:31:13:ee:
5b:78:73:2f:c8:47:10:ab:54:99:59:12:df:42:35:
9a:0d:cc:53:dd:5a:4f:37:40:ed:58:fe:8a:de:84:
c7:f8:9b:47:ab:24:dc:71:2f:94:e6:e3:6a:7d:86:
59:9d:b1:18:a0:66:cd:74:82:e4:ca:3b:fd:d1:9c:
e2:a2:ea:7b:8e:7f:99:61:c6:a4:e9:c4:56:ca:c1:
12:d2:b7:cc:91:e6:ac:f8:41:1a:3a:f9:9f:b2:69:
87:3d:ea:09:cd:f8:45:ba:d2:f9:cf:10:10:4d:8f:
26:68:84:dc:2f:49:88:d8:eb:e3:df:d7:fd:98:9d:
21:ed:e4:1c:07:99:03:24:b6:4d:c0:45:f2:8c:e5:
a7:2b:ed:23:4f:0f:1a:11:ca:d9:06:34:49:1c:df:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:91:4F:E2:07:4A:8B:7C:1E:FC:AA:0A:A5:DD:15:CA:EB:FC:FD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24859a04-191c-4814-81e1-e9c9493f3b75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.46.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c6:91:8e:5e:4b:1d:f6:0d:81:89:9e:93:e0:8b:24:91:32:
f7:0a:0a:b3:63:b6:37:6f:dc:cf:b4:1a:f2:83:35:d3:ce:78:
d9:7e:32:69:78:ad:5c:d2:10:2c:02:9b:54:5b:7d:a7:d5:d1:
e1:12:b1:1a:c1:c5:2f:d4:69:da:48:86:55:d0:a1:61:b7:da:
3e:67:c5:35:56:03:f8:41:34:49:4e:cc:41:e8:db:72:2b:a4:
72:83:0e:48:a9:7e:79:8c:e0:d4:82:4a:9e:6b:3b:04:29:3d:
be:7c:0e:10:05:7c:54:ef:3a:ea:9c:e1:d7:93:15:0c:b5:66:
0d:e4:ff:2d:84:d4:c4:24:11:19:e1:83:9e:61:01:61:d3:7d:
88:6e:a2:a8:23:60:64:11:9b:a3:c3:3e:80:85:3f:aa:7b:63:
99:14:aa:a6:58:c6:2f:b3:12:a6:b0:98:3f:b6:d8:48:63:ed:
57:7f:42:b4:cf:a3:f7:42:0b:7a:d6:43:85:1c:9d:3e:6f:df:
86:37:87:54:ab:20:e8:ff:92:c0:6e:61:17:5c:36:50:e1:f4:
56:95:41:81:d4:df:90:98:34:c3:3e:b2:2a:cc:d2:52:79:cb:
ce:e8:a1:a7:2a:d1:43:39:bf:4f:7b:3a:10:3f:16:83:18:f8:
36:65:a4:2d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL/yAo/yRhQTGcMXSBcsw1lyROPAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDA0MTUxWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDc4OTJiMjk3NTIwYThhMzRjYmZkM2RmZDFjYzE1OWIw
NjQ1OTJiODA4YzBmMmFiNjkyM2MwYzk3YjViMTZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4ijh4rUJqIBTi5N/NHI5B2Il1AqJT4JtqBCjdCqd0TwWm
MhZeC8xMUUyMTPTsftd8iPR/LTyJCNWB9T/NRK0GqZaPv46TvddoQ+AoIpeRGy7E
BquW0UDym1xAWXO08Ev4CuMMRjET7lt4cy/IRxCrVJlZEt9CNZoNzFPdWk83QO1Y
/orehMf4m0erJNxxL5Tm42p9hlmdsRigZs10guTKO/3RnOKi6nuOf5lhxqTpxFbK
wRLSt8yR5qz4QRo6+Z+yaYc96gnN+EW60vnPEBBNjyZohNwvSYjY6+Pf1/2YnSHt
5BwHmQMktk3ARfKM5acr7SNPDxoRytkGNEkc35ATAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+mORT+IHSot8HvyqCqXdFcrr/P0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI0ODU5YTA0LTE5MWMtNDgxNC04MWUxLWU5Yzk0OTNmM2I3NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCS4wDQYJKoZIhvcNAQELBQADggEBAJbGkY5eSx32DYGJnpPgiySRMvcK
CrNjtjdv3M+0GvKDNdPOeNl+Mml4rVzSECwCm1RbfafV0eESsRrBxS/UadpIhlXQ
oWG32j5nxTVWA/hBNElOzEHo23IrpHKDDkipfnmM4NSCSp5rOwQpPb58DhAFfFTv
Ouqc4deTFQy1Zg3k/y2E1MQkERnhg55hAWHTfYhuoqgjYGQRm6PDPoCFP6p7Y5kU
qqZYxi+zEqawmD+22Ehj7Vd/QrTPo/dCC3rWQ4UcnT5v34Y3h1SrIOj/ksBuYRdc
NlDh9FaVQYHU35CYNMM+sirM0lJ5y87ooacq0UM5v097OhA/FoMY+DZlpC0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:53 2025 by rpki-client