Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48ee7e5c-5107-4b2d-a47f-59da331b89be.roa
File: 48ee7e5c-5107-4b2d-a47f-59da331b89be.roa (raw, json)
Hash identifier: 6SRckmmhqKcQkHtPOGjmbJ5lgtpHgK02U9jMr5Ty3O0=
Subject key identifier: 34:E7:08:90:A6:DE:D9:DC:A7:A3:94:4B:1A:96:2D:63:59:2A:E5:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A056EC31CF17EA2A1DEF2755129D654DBAA1008
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48ee7e5c-5107-4b2d-a47f-59da331b89be.roa
Signing time: Tue 14 Oct 2025 20:12:55 +0000
ROA not before: Tue 14 Oct 2025 20:12:55 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:05:6e:c3:1c:f1:7e:a2:a1:de:f2:75:51:29:d6:54:db:aa:10:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:12:55 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=e0cfa489220138a07c98dc58a50657c74569a09125c69100f20c177e7e00d186, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:55:fa:79:e7:5f:24:b9:7a:9b:8b:b5:4e:b5:
75:ce:03:f0:8c:e1:c3:ef:4c:cd:1a:dc:b9:c7:26:
2e:7f:03:07:56:03:74:af:f5:d6:19:af:5d:da:3f:
d4:f5:36:e5:cf:bb:4f:51:9b:ae:bc:e8:52:f2:7b:
65:4a:5b:bc:d5:c8:0e:c2:37:41:76:56:3f:a6:b8:
f1:66:27:b6:7c:2f:61:99:7e:9a:00:8b:3f:c6:0b:
93:48:17:b5:bb:16:71:77:12:ea:fb:27:0d:7f:bb:
09:84:47:02:e0:d0:24:67:2d:00:c4:20:b3:81:fd:
64:ff:be:22:60:1f:00:75:fa:8d:21:52:10:31:dc:
93:a7:47:ac:99:c3:60:2f:6d:8d:fc:49:5e:25:53:
ab:de:eb:f7:03:b3:ed:97:47:96:5b:2d:ec:c7:d3:
f1:bc:7f:71:e5:31:ac:dd:17:23:23:77:fb:29:93:
63:91:91:e4:e0:4c:0f:a7:fd:06:1f:3a:ab:81:fb:
12:30:e9:8e:47:d7:44:b5:a7:f8:a0:c7:7a:ce:3e:
56:cb:d3:6b:ac:73:4c:90:0c:d0:a9:1a:63:7e:7d:
ba:73:dc:29:a6:24:35:5a:30:ed:56:38:c7:8e:10:
9f:ac:e7:55:24:c2:83:3d:be:33:76:1f:4c:32:1a:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E7:08:90:A6:DE:D9:DC:A7:A3:94:4B:1A:96:2D:63:59:2A:E5:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48ee7e5c-5107-4b2d-a47f-59da331b89be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.2.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ae:8e:48:94:f3:6f:9d:15:a7:68:52:9a:29:0b:24:d8:e3:
0b:2e:80:78:9e:ca:d2:56:0c:62:e6:76:a4:d3:d2:44:f0:ad:
c5:fb:73:26:87:80:c1:4b:52:2d:2a:fb:08:61:0d:88:dc:30:
20:b1:1e:a7:1d:13:eb:77:9a:03:47:2d:7b:41:de:e6:49:cf:
ab:d8:4f:32:59:84:f4:88:84:84:35:d9:ce:4d:ad:70:59:52:
68:56:2e:1c:57:b6:cb:57:2f:6b:7c:9c:9b:9e:11:87:af:bf:
c9:17:7a:a4:71:e2:3c:06:f9:ec:d9:e5:83:ea:29:95:36:af:
54:09:a3:73:0e:f0:51:46:ad:e4:d6:f4:73:14:c3:da:03:99:
d3:dd:bd:58:1b:84:b7:ce:5e:3f:6e:c9:3b:65:a3:5a:e8:76:
f4:4f:87:0b:e6:a8:65:ad:cc:39:10:2d:ab:7c:1b:5e:67:3c:
87:96:c4:8a:71:50:57:9e:10:d6:14:81:ee:d5:0b:0a:fd:8c:
fd:e1:51:79:55:4a:b6:62:51:2b:d5:ba:f3:00:56:c0:32:ff:
f5:85:fc:2b:bd:7c:ad:45:18:67:a6:43:9a:fa:8a:1c:9b:a6:
6b:21:cf:a4:a6:6d:23:47:19:e4:8d:a8:1b:c9:7e:02:e7:c8:
6a:82:da:1d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUagVuwxzxfqKh3vJ1USnWVNuqEAgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjAxMjU1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMGNmYTQ4OTIyMDEzOGEwN2M5OGRjNThhNTA2NTdjNzQ1
NjlhMDkxMjVjNjkxMDBmMjBjMTc3ZTdlMDBkMTg2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrVfp5518kuXqbi7VOtXXOA/CM4cPvTM0a3LnHJi5/AwdW
A3Sv9dYZr13aP9T1NuXPu09Rm6686FLye2VKW7zVyA7CN0F2Vj+muPFmJ7Z8L2GZ
fpoAiz/GC5NIF7W7FnF3Eur7Jw1/uwmERwLg0CRnLQDEILOB/WT/viJgHwB1+o0h
UhAx3JOnR6yZw2AvbY38SV4lU6ve6/cDs+2XR5ZbLezH0/G8f3HlMazdFyMjd/sp
k2ORkeTgTA+n/QYfOquB+xIw6Y5H10S1p/igx3rOPlbL02usc0yQDNCpGmN+fbpz
3CmmJDVaMO1WOMeOEJ+s51UkwoM9vjN2H0wyGgJPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNOcIkKbe2dyno5RLGpYtY1kq5VowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4ZWU3ZTVjLTUxMDctNGIyZC1hNDdmLTU5ZGEzMzFiODliZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVAIwDQYJKoZIhvcNAQELBQADggEBAG2ujkiU82+dFadoUpopCyTY4wsu
gHieytJWDGLmdqTT0kTwrcX7cyaHgMFLUi0q+whhDYjcMCCxHqcdE+t3mgNHLXtB
3uZJz6vYTzJZhPSIhIQ12c5NrXBZUmhWLhxXtstXL2t8nJueEYevv8kXeqRx4jwG
+ezZ5YPqKZU2r1QJo3MO8FFGreTW9HMUw9oDmdPdvVgbhLfOXj9uyTtlo1rodvRP
hwvmqGWtzDkQLat8G15nPIeWxIpxUFeeENYUge7VCwr9jP3hUXlVSrZiUSvVuvMA
VsAy//WF/Cu9fK1FGGemQ5r6ihybpmshz6SmbSNHGeSNqBvJfgLnyGqC2h0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:46 2025 by rpki-client