Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488527d1-bf7f-45e8-8680-c245ac682120.roa
File: 488527d1-bf7f-45e8-8680-c245ac682120.roa (raw, json)
Hash identifier: qiC2loqRLi2Yqn2TfmdCJuNtHZy1Y+IXTUox4sVSduI=
Subject key identifier: EA:E2:99:B4:DE:FF:83:C6:E8:5B:81:9F:85:CA:17:F6:8F:B7:51:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 076AD87F78E1F92B364C7970CC3B487F5622E8D3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488527d1-bf7f-45e8-8680-c245ac682120.roa
Signing time: Sat 04 Oct 2025 00:51:10 +0000
ROA not before: Sat 04 Oct 2025 00:51:10 +0000
ROA not after: Sat 08 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 40.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6a:d8:7f:78:e1:f9:2b:36:4c:79:70:cc:3b:48:7f:56:22:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:51:10 2025 GMT
Not After : Nov 8 23:59:59 2025 GMT
Subject: serialNumber=bb2af392432e846f28bbd1df6ec724d19bcf8b4f3c7ef76b611ec1044ff526c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:6e:5d:46:87:07:2e:fe:4a:9e:e5:e1:06:
88:aa:18:a9:38:f0:77:95:a1:d3:e1:74:a1:ec:be:
4c:80:58:97:35:36:cd:f7:96:40:aa:b2:75:ef:34:
75:be:ab:81:e1:3b:0b:d8:5d:20:ec:64:40:a2:fb:
1d:8c:56:21:d1:2b:dd:a4:a1:b9:8d:fd:35:b8:0e:
b4:9c:85:4e:a7:69:9c:b7:9f:e3:96:94:9a:94:21:
50:c2:63:df:ca:b9:c9:de:00:3b:a8:66:29:79:fe:
39:73:2b:63:d4:6b:f9:c3:e1:b4:4d:68:49:24:6a:
74:29:ef:83:67:b8:8e:85:76:2b:2d:b6:53:8d:df:
75:f5:07:59:be:d2:de:ba:6c:f7:09:75:ba:77:8c:
55:16:99:34:e0:02:2e:90:23:66:90:f9:35:96:9c:
37:4f:e4:0d:a9:a2:c9:91:66:0b:33:67:0f:1c:76:
dd:4f:13:d1:40:3f:d7:83:07:97:f7:8c:66:3f:d1:
58:df:2f:61:53:c4:2a:46:55:fb:a1:f6:ef:67:5a:
86:5d:6f:81:3a:bf:1e:ed:b3:1a:fa:b8:59:0f:30:
1e:87:5f:8f:95:f1:fb:43:56:c4:73:30:b5:07:af:
26:8f:4d:ea:7a:f7:d1:ca:28:84:10:f1:8a:65:6f:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:99:B4:DE:FF:83:C6:E8:5B:81:9F:85:CA:17:F6:8F:B7:51:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/488527d1-bf7f-45e8-8680-c245ac682120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b2:f7:99:c3:2e:81:da:cf:89:bf:69:8e:53:81:9c:a9:db:ae:
3d:76:17:0a:a4:53:f4:5f:92:2f:98:12:5f:27:98:50:63:d3:
b9:1e:64:b3:82:94:7a:69:1e:c1:32:c9:31:28:d3:e7:9a:5c:
68:9f:2e:76:b2:80:5a:a7:fe:d3:a4:16:b8:c4:ca:0a:d0:3a:
1b:91:9b:b2:dd:b4:6e:13:85:e9:0f:3e:1f:2e:4b:5a:51:8e:
8a:2d:32:8b:c2:eb:fd:ff:b7:9c:b0:12:65:ca:6e:d2:55:2c:
95:5b:37:09:60:7b:a5:d5:71:57:3f:a5:6a:53:76:9f:e3:35:
7a:40:b9:87:92:73:26:ca:bb:a2:86:9b:d9:26:0d:2e:e0:69:
c1:72:50:19:34:df:81:35:6e:6e:8b:21:8a:4a:f7:ea:26:68:
75:89:71:84:80:7d:9e:db:b2:00:6c:ee:c9:40:4e:cb:9a:4f:
22:67:a5:38:1f:b6:5d:31:5a:98:2c:11:94:b6:64:4f:42:ec:
c6:7a:e9:b3:fc:36:78:61:cc:16:f5:b5:96:56:ca:22:c1:ea:
95:11:5e:77:2b:e6:48:80:55:58:57:b1:eb:00:aa:b2:e9:5f:
f2:c0:1f:fd:53:68:98:36:3d:3c:8b:0f:d2:5d:a7:c0:d3:a6:
15:42:4f:7c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUB2rYf3jh+Ss2THlwzDtIf1Yi6NMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA0MDA1MTEwWhcNMjUxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjJhZjM5MjQzMmU4NDZmMjhiYmQxZGY2ZWM3MjRkMTli
Y2Y4YjRmM2M3ZWY3NmI2MTFlYzEwNDRmZjUyNmMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqpW5dRocHLv5KnuXhBoiqGKk48HeVodPhdKHsvkyAWJc1
Ns33lkCqsnXvNHW+q4HhOwvYXSDsZECi+x2MViHRK92kobmN/TW4DrSchU6naZy3
n+OWlJqUIVDCY9/KucneADuoZil5/jlzK2PUa/nD4bRNaEkkanQp74NnuI6Fdist
tlON33X1B1m+0t66bPcJdbp3jFUWmTTgAi6QI2aQ+TWWnDdP5A2posmRZgszZw8c
dt1PE9FAP9eDB5f3jGY/0VjfL2FTxCpGVfuh9u9nWoZdb4E6vx7tsxr6uFkPMB6H
X4+V8ftDVsRzMLUHryaPTep699HKKIQQ8Yplb9CRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6uKZtN7/g8boW4GfhcoX9o+3UeQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4ODUyN2QxLWJmN2YtNDVlOC04NjgwLWMyNDVhYzY4MjEyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAoljANBgkqhkiG9w0BAQsFAAOCAQEAsveZwy6B2s+Jv2mOU4GcqduuPXYX
CqRT9F+SL5gSXyeYUGPTuR5ks4KUemkewTLJMSjT55pcaJ8udrKAWqf+06QWuMTK
CtA6G5Gbst20bhOF6Q8+Hy5LWlGOii0yi8Lr/f+3nLASZcpu0lUslVs3CWB7pdVx
Vz+lalN2n+M1ekC5h5JzJsq7ooab2SYNLuBpwXJQGTTfgTVuboshikr36iZodYlx
hIB9ntuyAGzuyUBOy5pPImelOB+2XTFamCwRlLZkT0Lsxnrps/w2eGHMFvW1llbK
IsHqlRFedyvmSIBVWFex6wCqsulf8sAf/VNomDY9PIsP0l2nwNOmFUJPfA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:25 2025 by rpki-client