Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae8972e-d144-4d88-abae-e1a14fbf8781.roa
File: 3ae8972e-d144-4d88-abae-e1a14fbf8781.roa (raw, json)
Hash identifier: SvUdiXZ9PJD69OkwD3wIcUkqeHDjcv+oRbMTq378nck=
Subject key identifier: 95:16:DC:40:3D:18:93:A9:2A:4A:5F:6E:58:86:D7:C6:88:12:58:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D52E9C60EBFE25E5B9972ADFB7456A6B2B48C9E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae8972e-d144-4d88-abae-e1a14fbf8781.roa
Signing time: Sat 18 Oct 2025 04:21:33 +0000
ROA not before: Sat 18 Oct 2025 04:21:33 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:52:e9:c6:0e:bf:e2:5e:5b:99:72:ad:fb:74:56:a6:b2:b4:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:21:33 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=70c4bddc4ed474daadc5cb65743a635f0661a2e144a31cea93d60a40996a6f9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:92:a1:29:0a:5f:34:41:da:af:18:47:c5:b3:
71:27:b3:93:26:af:e2:5b:4a:4f:33:c6:33:78:23:
4a:0c:07:b7:0f:d4:f8:21:a3:ee:62:0e:b9:2b:ba:
bf:87:5e:95:2c:c7:c2:71:3b:0f:89:f0:0a:0e:89:
9f:46:fb:d8:de:5d:15:8b:6b:b6:50:e4:fa:23:7e:
58:11:a2:9a:32:29:c6:f0:ea:69:f3:d1:ac:4c:0b:
ad:e2:8b:2b:97:ba:07:14:47:14:05:b3:0f:88:ae:
b1:b3:29:ff:77:98:f0:07:84:73:ce:7b:4a:34:2d:
6c:63:d5:fd:28:d2:16:6f:d1:3a:bd:03:32:41:1c:
e3:46:2f:52:2d:82:07:88:a9:aa:c7:96:86:94:1b:
3f:32:dc:0c:24:6e:b6:6a:aa:73:f1:86:cf:4b:ea:
47:e8:93:e6:37:d7:cf:8b:c5:b5:92:b7:41:8a:f8:
d5:ad:2a:40:c1:bf:9a:88:f4:58:34:97:60:d8:4b:
dc:a3:09:d6:d9:ac:8d:3e:c4:24:d3:04:e7:b6:7f:
39:c9:31:72:55:be:56:a2:f4:e3:a1:05:a2:2a:70:
b5:63:3b:9c:85:fb:0e:c6:44:23:f0:ad:5e:9e:f7:
af:0d:12:7f:77:b2:df:4d:13:02:65:63:30:5d:40:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:DC:40:3D:18:93:A9:2A:4A:5F:6E:58:86:D7:C6:88:12:58:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ae8972e-d144-4d88-abae-e1a14fbf8781.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.252.0/24
Signature Algorithm: sha256WithRSAEncryption
41:69:97:2e:03:cb:44:fd:81:18:b8:cd:6d:93:87:5f:fd:c5:
2c:68:5e:48:f4:c3:c8:b2:ac:62:9b:21:2c:6d:b6:dd:3d:58:
bc:38:9b:3f:dd:eb:46:e1:8d:bc:7f:c1:60:32:a1:1e:94:6f:
4f:f5:a9:29:e9:9a:24:40:1a:4b:a8:67:f5:a5:30:90:69:d5:
8e:29:4e:31:a0:d0:dc:b6:23:4b:65:55:6c:07:53:0f:88:6b:
58:cd:76:1c:c3:4f:ef:04:55:7d:cc:01:b3:f9:1d:87:fc:85:
52:50:ae:c1:6c:e4:e4:38:b0:1d:2e:09:8c:88:00:2d:4c:9e:
66:40:51:b4:64:2f:65:01:94:cd:ae:90:9b:b0:e5:c2:64:97:
34:b7:68:12:80:1e:dc:f9:20:91:47:67:c3:ec:0b:1d:20:80:
f5:d9:f3:14:e5:ad:d0:bb:7d:fd:a2:d6:5c:8e:09:ec:25:0a:
1d:46:14:8d:8f:87:97:5b:18:22:f7:45:22:df:ec:4d:ff:8b:
b0:ea:c8:69:fc:36:87:26:72:1c:13:5a:0d:c6:69:90:fe:d4:
09:eb:8f:79:dc:44:06:87:85:cc:a2:3c:42:cf:d6:8c:b3:88:
fa:e9:4f:31:d5:35:53:37:1b:30:98:7f:f8:bc:7b:5d:8b:e8:
31:90:f5:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfVLpxg6/4l5bmXKt+3RWprK0jJ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQyMTMzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3MGM0YmRkYzRlZDQ3NGRhYWRjNWNiNjU3NDNhNjM1ZjA2
NjFhMmUxNDRhMzFjZWE5M2Q2MGE0MDk5NmE2ZjlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxkqEpCl80QdqvGEfFs3Ens5Mmr+JbSk8zxjN4I0oMB7cP
1Pgho+5iDrkrur+HXpUsx8JxOw+J8AoOiZ9G+9jeXRWLa7ZQ5PojflgRopoyKcbw
6mnz0axMC63iiyuXugcURxQFsw+IrrGzKf93mPAHhHPOe0o0LWxj1f0o0hZv0Tq9
AzJBHONGL1ItggeIqarHloaUGz8y3AwkbrZqqnPxhs9L6kfok+Y318+LxbWSt0GK
+NWtKkDBv5qI9Fg0l2DYS9yjCdbZrI0+xCTTBOe2fznJMXJVvlai9OOhBaIqcLVj
O5yF+w7GRCPwrV6e968NEn93st9NEwJlYzBdQIAxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlRbcQD0Yk6kqSl9uWIbXxogSWAYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNhZTg5NzJlLWQxNDQtNGQ4OC1hYmFlLWUxYTE0ZmJmODc4MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCPwwDQYJKoZIhvcNAQELBQADggEBAEFply4Dy0T9gRi4zW2Th1/9xSxo
Xkj0w8iyrGKbISxttt09WLw4mz/d60bhjbx/wWAyoR6Ub0/1qSnpmiRAGkuoZ/Wl
MJBp1Y4pTjGg0Ny2I0tlVWwHUw+Ia1jNdhzDT+8EVX3MAbP5HYf8hVJQrsFs5OQ4
sB0uCYyIAC1MnmZAUbRkL2UBlM2ukJuw5cJklzS3aBKAHtz5IJFHZ8PsCx0ggPXZ
8xTlrdC7ff2i1lyOCewlCh1GFI2Ph5dbGCL3RSLf7E3/i7DqyGn8NocmchwTWg3G
aZD+1Anrj3ncRAaHhcyiPELP1oyziPrpTzHVNVM3GzCYf/i8e12L6DGQ9RQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:27 2025 by rpki-client