Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c3d56fb-7479-408f-a8c6-f0be05db41f7.roa
File: 3c3d56fb-7479-408f-a8c6-f0be05db41f7.roa (raw, json)
Hash identifier: gq1tfFuty6IGt7XwaP8oQ0darevS0xabmvqAsNKkXck=
Subject key identifier: 64:7E:95:87:C3:44:D1:B4:6B:55:A2:14:AE:6C:81:57:B9:04:B9:7F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: B0993B168C663D8CBEA8B86C9BA6CDAB1E470C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c3d56fb-7479-408f-a8c6-f0be05db41f7.roa
Signing time: Tue 14 Oct 2025 23:01:16 +0000
ROA not before: Tue 14 Oct 2025 23:01:16 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b0:99:3b:16:8c:66:3d:8c:be:a8:b8:6c:9b:a6:cd:ab:1e:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 23:01:16 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=535125fbd843d2bce4adb98c77f36245fe871a9b637a29ee97287cd2542f8bd8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:cf:4d:cd:16:72:3a:f4:01:23:17:85:89:
ce:5c:40:2b:5e:91:d4:e0:f4:52:be:e4:ab:25:fe:
d6:93:a6:27:bc:55:95:11:cf:0e:f6:4a:29:fa:ec:
7a:cb:e8:cf:37:f1:5b:00:cc:9a:61:83:e3:f3:8f:
f5:00:31:46:37:f6:eb:60:62:46:b9:50:01:f7:2a:
fc:7f:b2:e7:d4:a1:a0:84:b2:d2:54:3f:40:3f:c1:
85:df:8e:52:ef:ae:a3:65:3a:a7:91:40:20:59:b3:
6e:d2:5b:7c:4b:78:dd:98:60:5e:22:26:d6:46:5e:
74:48:be:2e:e4:67:45:28:87:6b:d1:37:df:6c:ac:
e3:46:32:f7:46:54:d4:fd:20:9b:e4:33:25:1d:54:
9e:b5:c4:1e:31:9b:83:66:b0:e3:11:86:54:c9:29:
cb:74:fc:5b:cb:5c:b1:e6:9b:47:24:d5:8f:95:23:
d6:0f:de:b2:c8:4c:c8:d3:b0:21:10:14:f9:bf:c5:
4f:6c:d2:58:61:f5:ab:5d:bb:8c:e5:d6:ec:ec:4c:
3e:bb:2f:ed:c4:58:a6:53:f8:bb:56:05:3b:ac:aa:
ee:86:0e:d4:67:4e:6a:cc:28:e5:2f:dd:ca:07:c3:
ff:48:6e:04:43:c5:22:bd:2e:ee:40:d6:42:8b:a5:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:95:87:C3:44:D1:B4:6B:55:A2:14:AE:6C:81:57:B9:04:B9:7F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c3d56fb-7479-408f-a8c6-f0be05db41f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1d:b0:5e:02:99:fb:77:fb:ad:87:2b:4d:bf:0b:b7:e7:4d:
94:02:cd:df:7e:27:2d:6b:fa:9c:59:f4:a4:5d:4f:3d:0f:dd:
11:5e:6f:57:49:80:8d:2d:ee:c6:11:e7:c5:a7:47:11:2b:59:
31:5f:10:1e:eb:b7:22:cb:ca:23:74:b8:be:70:ef:dc:22:4a:
77:94:f8:ff:ca:46:64:6c:d2:75:77:0f:17:74:98:1c:40:45:
58:01:9b:fb:08:90:49:c3:82:7c:84:f6:1c:73:21:27:6d:d8:
de:f5:0f:29:67:34:43:27:98:6e:69:c5:96:5e:30:75:f4:3d:
18:e9:b8:71:80:32:ba:eb:02:36:4e:6f:7c:07:76:a6:8c:cc:
1a:88:3b:9a:ed:d7:f6:2a:49:42:39:6a:3f:dc:bc:43:d2:96:
ca:e9:e2:ef:82:a8:c2:3e:02:f8:35:c3:37:10:f5:bc:f7:35:
e0:2a:22:0f:43:df:6a:2a:4a:46:73:1a:21:f9:db:85:37:90:
de:97:fe:60:db:a9:f8:4d:aa:fa:73:8d:f2:59:be:2e:cd:17:
0a:1f:fa:55:fe:dc:9b:47:97:d7:50:78:00:4b:9d:d0:c1:5e:
08:9b:c7:6a:f8:f3:da:1d:5a:ad:9a:0b:fa:0f:c2:0e:b3:ca:
cf:2b:c7:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUALCZOxaMZj2Mvqi4bJumzaseRwwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjMwMTE2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MzUxMjVmYmQ4NDNkMmJjZTRhZGI5OGM3N2YzNjI0NWZl
ODcxYTliNjM3YTI5ZWU5NzI4N2NkMjU0MmY4YmQ4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmPs9NzRZyOvQBIxeFic5cQCtekdTg9FK+5Ksl/taTpie8
VZURzw72Sin67HrL6M838VsAzJphg+Pzj/UAMUY39utgYka5UAH3Kvx/sufUoaCE
stJUP0A/wYXfjlLvrqNlOqeRQCBZs27SW3xLeN2YYF4iJtZGXnRIvi7kZ0Uoh2vR
N99srONGMvdGVNT9IJvkMyUdVJ61xB4xm4NmsOMRhlTJKct0/FvLXLHmm0ck1Y+V
I9YP3rLITMjTsCEQFPm/xU9s0lhh9atdu4zl1uzsTD67L+3EWKZT+LtWBTusqu6G
DtRnTmrMKOUv3coHw/9IbgRDxSK9Lu5A1kKLpbQ7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZH6Vh8NE0bRrVaIUrmyBV7kEuX8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNjM2Q1NmZiLTc0NzktNDA4Zi1hOGM2LWYwYmUwNWRiNDFmNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVqUwDQYJKoZIhvcNAQELBQADggEBALMdsF4Cmft3+62HK02/C7fnTZQC
zd9+Jy1r+pxZ9KRdTz0P3RFeb1dJgI0t7sYR58WnRxErWTFfEB7rtyLLyiN0uL5w
79wiSneU+P/KRmRs0nV3Dxd0mBxARVgBm/sIkEnDgnyE9hxzISdt2N71DylnNEMn
mG5pxZZeMHX0PRjpuHGAMrrrAjZOb3wHdqaMzBqIO5rt1/YqSUI5aj/cvEPSlsrp
4u+CqMI+Avg1wzcQ9bz3NeAqIg9D32oqSkZzGiH524U3kN6X/mDbqfhNqvpzjfJZ
vi7NFwof+lX+3JtHl9dQeABLndDBXgibx2r489odWq2aC/oPwg6zys8rx0Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:42 2025 by rpki-client