Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26855cd2-a1d7-49c1-957e-f0646653d0e0.roa
File: 26855cd2-a1d7-49c1-957e-f0646653d0e0.roa (raw, json)
Hash identifier: c3ZMBSk+rbumDUhDRDBm5fAaEbgSFuD4Z18DzGhkJc0=
Subject key identifier: 65:BD:6A:29:68:4B:AF:B6:A7:DC:0E:9E:62:0E:14:42:C7:33:D6:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7993516EEEDEE0C003F7EEA11BECB8D867E463B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26855cd2-a1d7-49c1-957e-f0646653d0e0.roa
Signing time: Tue 14 Oct 2025 22:51:07 +0000
ROA not before: Tue 14 Oct 2025 22:51:07 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:93:51:6e:ee:de:e0:c0:03:f7:ee:a1:1b:ec:b8:d8:67:e4:63:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:51:07 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4c082518f623a6c4b56870c94b4ad3ab3d99ba41056dc3a6e04f5cccc076b1cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:03:d8:56:84:42:12:53:e8:3a:ec:f0:ec:
f5:80:5d:58:80:22:e5:c2:3d:ef:f0:5b:6c:57:c1:
c3:73:d8:54:3a:02:22:a1:45:ac:30:1c:05:10:69:
1c:20:63:71:08:64:07:84:14:57:90:30:81:a9:32:
9e:d2:3e:ec:ee:f6:b2:50:2a:7a:32:4c:56:87:c3:
c7:2b:e6:a3:5f:b5:f9:d0:dc:eb:6c:a3:f5:c1:5c:
31:f2:a0:c7:34:80:2e:25:fe:5d:80:73:bf:54:27:
2e:2f:91:b7:25:0d:6c:b7:a0:fd:a5:2b:3d:44:9c:
37:20:ac:c0:eb:e2:27:35:13:45:e2:7e:f7:e7:7a:
75:46:bc:35:33:07:e9:39:3a:b3:7d:05:4e:02:91:
a0:5e:24:d4:c5:69:3e:5f:40:a9:9e:2d:a5:bf:ea:
b4:38:96:19:a3:d4:39:15:15:00:0f:dd:cc:30:6b:
85:6a:b0:3f:b6:cf:50:01:5c:40:33:05:9e:b3:02:
a1:59:18:f2:c9:5b:06:77:79:e9:aa:5f:32:e7:c6:
35:c4:24:9f:7c:39:61:87:00:9f:59:e2:af:04:e8:
33:2d:6c:64:c4:49:1c:4a:c6:43:5a:80:ff:7c:75:
d9:b6:66:d7:d4:12:32:1c:f0:ac:bb:8c:65:f7:a7:
50:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BD:6A:29:68:4B:AF:B6:A7:DC:0E:9E:62:0E:14:42:C7:33:D6:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26855cd2-a1d7-49c1-957e-f0646653d0e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.145.0/24
Signature Algorithm: sha256WithRSAEncryption
42:d3:f7:1a:b2:36:d9:1a:a7:4d:a3:e6:6a:64:cc:78:c8:f2:
e4:86:65:05:2e:0c:09:23:dd:93:23:25:eb:01:81:7b:7f:57:
47:ac:15:eb:a6:c5:d7:3f:77:c4:ca:2d:da:40:bf:e1:83:35:
03:92:07:dd:39:4f:e0:5e:99:65:f7:9e:e2:2c:af:6d:54:c4:
b9:b3:65:87:28:49:2c:2a:5e:0a:d2:d2:cf:3c:02:f1:80:7d:
81:c7:9d:f1:53:60:7b:f7:72:ea:74:1c:a5:49:b1:ab:93:7f:
8a:50:8c:f0:a5:4d:7a:bd:7f:2c:9f:47:f0:5e:a4:5f:e8:73:
e4:76:e8:90:c7:f2:0a:20:61:a7:cb:76:0e:55:d8:83:8c:97:
b6:e1:83:43:70:41:5b:2a:97:c9:80:58:57:bc:27:88:5b:de:
31:ac:e0:ec:39:30:51:5c:b3:fc:05:c0:dc:0f:3e:79:f8:9b:
19:2d:2e:fa:17:0f:ae:83:e6:72:56:6e:cb:00:ed:ce:30:43:
e0:5b:a1:6c:81:63:2e:43:d7:02:49:72:bf:63:b5:4f:98:48:
cc:22:79:62:57:c8:b0:77:be:de:3a:16:4a:ef:37:b7:67:0d:
1a:f9:1c:8c:cd:37:d9:26:d8:e9:fa:b1:27:37:6b:f8:67:22:
eb:e2:d5:e9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeZNRbu7e4MAD9+6hG+y42GfkY7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjI1MTA3WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YzA4MjUxOGY2MjNhNmM0YjU2ODcwYzk0YjRhZDNhYjNk
OTliYTQxMDU2ZGMzYTZlMDRmNWNjY2MwNzZiMWNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGkAPYVoRCElPoOuzw7PWAXViAIuXCPe/wW2xXwcNz2FQ6
AiKhRawwHAUQaRwgY3EIZAeEFFeQMIGpMp7SPuzu9rJQKnoyTFaHw8cr5qNftfnQ
3Otso/XBXDHyoMc0gC4l/l2Ac79UJy4vkbclDWy3oP2lKz1EnDcgrMDr4ic1E0Xi
fvfnenVGvDUzB+k5OrN9BU4CkaBeJNTFaT5fQKmeLaW/6rQ4lhmj1DkVFQAP3cww
a4VqsD+2z1ABXEAzBZ6zAqFZGPLJWwZ3eemqXzLnxjXEJJ98OWGHAJ9Z4q8E6DMt
bGTESRxKxkNagP98ddm2ZtfUEjIc8Ky7jGX3p1DZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZb1qKWhLr7an3A6eYg4UQscz1sQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2ODU1Y2QyLWExZDctNDljMS05NTdlLWYwNjQ2NjUzZDBlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVpEwDQYJKoZIhvcNAQELBQADggEBAELT9xqyNtkap02j5mpkzHjI8uSG
ZQUuDAkj3ZMjJesBgXt/V0esFeumxdc/d8TKLdpAv+GDNQOSB905T+BemWX3nuIs
r21UxLmzZYcoSSwqXgrS0s88AvGAfYHHnfFTYHv3cup0HKVJsauTf4pQjPClTXq9
fyyfR/BepF/oc+R26JDH8gogYafLdg5V2IOMl7bhg0NwQVsql8mAWFe8J4hb3jGs
4Ow5MFFcs/wFwNwPPnn4mxktLvoXD66D5nJWbssA7c4wQ+BboWyBYy5D1wJJcr9j
tU+YSMwieWJXyLB3vt46FkrvN7dnDRr5HIzNN9km2On6sSc3a/hnIuvi1ek=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:27 2025 by rpki-client