Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa
File: 35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa (raw, json)
Hash identifier: inJm7ZOQBEzWgxsUJCEdeNQKzyGi/3p/8/yA7p1S5DY=
Subject key identifier: 2F:1B:33:3D:63:D9:31:6E:BF:2F:C0:F5:98:CF:7D:6C:EA:92:39:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1465754D26427BF2F9083F2BB5DDDB6D1ECBE516
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa
Signing time: Wed 08 Oct 2025 00:42:15 +0000
ROA not before: Wed 08 Oct 2025 00:42:15 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:65:75:4d:26:42:7b:f2:f9:08:3f:2b:b5:dd:db:6d:1e:cb:e5:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:42:15 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=ba34f52d2b44572f36f946a9821e67798bda1a84874ea14042ddedc4939e5967, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:8a:a9:b0:37:a8:bd:5d:ba:b4:a3:ef:1e:
33:1e:81:f8:ff:a3:72:ed:52:7c:b7:3f:5f:ef:17:
af:24:84:84:03:b6:92:ac:ce:ee:38:52:34:49:e4:
8f:68:73:9b:6d:6a:60:e4:c2:66:15:3d:df:11:d7:
e8:8a:4f:d3:98:f8:b1:d7:7e:93:82:af:e8:47:5c:
36:fc:cc:e1:96:52:1a:bb:d0:82:c8:d6:f1:0f:3e:
42:fc:6c:47:0d:78:12:2a:4a:20:55:9c:0a:77:50:
ff:e6:2e:cc:d9:71:0f:bd:a0:ed:d4:c0:6f:4e:20:
6d:35:5a:f4:34:20:cc:c2:71:ea:4e:3c:14:21:0e:
2a:7b:73:df:19:23:90:53:9b:57:2f:57:49:2b:0c:
87:de:f4:6f:8c:e8:23:bf:67:ae:4b:39:29:4a:48:
00:2e:c7:50:93:df:d2:ac:0b:3f:12:6b:f9:2e:d3:
c9:20:8a:5b:f7:95:ff:d1:2a:8e:a3:91:eb:66:14:
3e:04:63:74:b4:3d:e1:1d:eb:7d:43:3c:af:7f:86:
59:8d:b2:ce:98:cb:88:2c:5a:bd:bd:6b:eb:b2:62:
76:0e:91:a8:b6:9b:b6:f9:bf:41:06:c0:a1:eb:4a:
e5:31:71:d3:d4:c7:98:0c:07:13:b3:d1:59:8a:5b:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:33:3D:63:D9:31:6E:BF:2F:C0:F5:98:CF:7D:6C:EA:92:39:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/35d2d5b9-3e22-4ea3-834b-5942aa3af0d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.178.0/24
Signature Algorithm: sha256WithRSAEncryption
69:19:f1:b9:1d:68:05:4e:72:86:06:73:a4:85:36:a4:08:63:
a4:12:14:e6:44:76:82:25:32:c7:d0:45:10:ea:e2:83:bb:a5:
05:e3:bb:1f:bd:71:37:dc:06:5d:82:87:3c:b8:e2:bb:36:47:
01:86:5c:4a:8a:41:9e:ba:76:0b:51:9e:01:bd:27:4c:7c:c2:
af:99:d9:98:05:0f:da:f8:54:44:8d:7b:ec:e7:02:01:4f:19:
c9:c6:71:ee:3d:26:07:e2:b6:23:c3:26:12:30:01:5f:82:7a:
17:62:3a:fe:a9:09:b5:52:7b:3f:45:b5:36:4c:68:9e:13:46:
23:46:33:62:44:83:47:f7:ec:44:2d:60:0f:d1:92:17:58:22:
f2:92:e9:c8:dd:97:cf:be:84:fa:ac:07:4e:1a:7c:e2:64:11:
52:e3:4b:49:bd:45:e5:89:5b:b6:9a:26:b8:68:fc:96:fa:19:
4b:52:11:db:9b:82:f3:cf:db:56:8e:89:ec:64:ee:61:65:d7:
67:83:73:07:12:bb:e0:86:2c:b5:9a:d7:33:50:3f:d2:63:98:
a1:c2:e9:2d:f8:3e:c7:d6:19:ea:2c:16:46:91:2f:14:ee:fc:
80:2f:34:4c:4c:bf:b3:16:ff:d9:96:52:37:09:d8:5a:2c:34:
2c:be:1e:52
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFGV1TSZCe/L5CD8rtd3bbR7L5RYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDA0MjE1WhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYTM0ZjUyZDJiNDQ1NzJmMzZmOTQ2YTk4MjFlNjc3OThi
ZGExYTg0ODc0ZWExNDA0MmRkZWRjNDkzOWU1OTY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbK4qpsDeovV26tKPvHjMegfj/o3LtUny3P1/vF68khIQD
tpKszu44UjRJ5I9oc5ttamDkwmYVPd8R1+iKT9OY+LHXfpOCr+hHXDb8zOGWUhq7
0ILI1vEPPkL8bEcNeBIqSiBVnAp3UP/mLszZcQ+9oO3UwG9OIG01WvQ0IMzCcepO
PBQhDip7c98ZI5BTm1cvV0krDIfe9G+M6CO/Z65LOSlKSAAux1CT39KsCz8Sa/ku
08kgilv3lf/RKo6jketmFD4EY3S0PeEd631DPK9/hlmNss6Yy4gsWr29a+uyYnYO
kai2m7b5v0EGwKHrSuUxcdPUx5gMBxOz0VmKW7ixAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULxszPWPZMW6/L8D1mM99bOqSOdkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1ZDJkNWI5LTNlMjItNGVhMy04MzRiLTU5NDJhYTNhZjBkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjl7IwDQYJKoZIhvcNAQELBQADggEBAGkZ8bkdaAVOcoYGc6SFNqQIY6QS
FOZEdoIlMsfQRRDq4oO7pQXjux+9cTfcBl2Chzy44rs2RwGGXEqKQZ66dgtRngG9
J0x8wq+Z2ZgFD9r4VESNe+znAgFPGcnGce49JgfitiPDJhIwAV+CehdiOv6pCbVS
ez9FtTZMaJ4TRiNGM2JEg0f37EQtYA/RkhdYIvKS6cjdl8++hPqsB04afOJkEVLj
S0m9ReWJW7aaJrho/Jb6GUtSEdubgvPP21aOiexk7mFl12eDcwcSu+CGLLWa1zNQ
P9JjmKHC6S34PsfWGeosFkaRLxTu/IAvNExMv7MW/9mWUjcJ2FosNCy+HlI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:52 2025 by rpki-client