Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ddf83f-3fd1-4497-8da1-24a13e8665ca.roa
File: 51ddf83f-3fd1-4497-8da1-24a13e8665ca.roa (raw, json)
Hash identifier: 2td/tzRbSDfBhpHShY7Kth/G5xfXNnCYVXJS5nQY/PU=
Subject key identifier: CF:31:D3:7F:A4:22:65:A3:8B:45:7C:39:E0:22:D1:A9:52:57:33:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24E3BD2ED8A1ED627DA73018AC5D6B3FCFBF5794
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ddf83f-3fd1-4497-8da1-24a13e8665ca.roa
Signing time: Tue 14 Oct 2025 22:40:27 +0000
ROA not before: Tue 14 Oct 2025 22:40:27 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e3:bd:2e:d8:a1:ed:62:7d:a7:30:18:ac:5d:6b:3f:cf:bf:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:40:27 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=7c9a70adf21c2511752ecbc06f7b03c6e84e36969a5854daec919e6ab731fc23, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:8f:fa:a2:c3:1b:b2:0d:b0:03:27:67:e0:
1f:43:94:84:9a:84:af:ef:05:64:ab:ee:2d:4e:02:
7b:b5:1f:3e:3c:df:b5:83:ef:4b:29:13:7e:75:9b:
62:d0:cf:46:ba:8c:8c:64:58:a6:a6:a2:3b:31:88:
67:09:80:d4:a4:23:2f:4f:51:db:6e:fa:d7:e7:6f:
41:fe:16:bd:23:4c:9c:ce:7d:e6:45:3f:36:ac:47:
97:e6:47:26:06:05:f1:e4:a3:1a:53:2c:a9:4b:00:
59:02:2c:6d:d0:fb:11:3d:d4:c4:c3:b9:61:b7:56:
a1:ec:20:ff:60:63:91:b2:b0:07:04:60:f7:61:4c:
a6:02:a8:dd:e1:68:05:b2:d6:b1:4b:eb:7e:b5:92:
7d:4a:a0:00:b0:39:4f:f2:91:1a:45:dc:bc:fb:88:
e9:a6:a1:45:cf:ff:65:80:0a:ee:d5:c7:79:d1:ee:
b6:36:ec:97:78:f5:79:07:1f:70:79:54:fe:f7:96:
ba:db:75:fd:4d:fd:db:b2:7d:d3:aa:9b:d8:27:b7:
18:7f:87:50:2b:42:3a:1d:99:af:f8:fd:ff:47:fa:
31:73:93:9f:53:da:d5:6a:30:ad:f1:ef:8c:3d:5c:
eb:7d:13:4f:6d:ea:6b:84:32:74:58:5b:5f:59:e6:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:D3:7F:A4:22:65:A3:8B:45:7C:39:E0:22:D1:A9:52:57:33:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51ddf83f-3fd1-4497-8da1-24a13e8665ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.84.0/23
Signature Algorithm: sha256WithRSAEncryption
49:68:6a:75:b4:a2:0e:d9:7c:ff:18:19:aa:34:89:6b:21:0d:
7b:ac:a6:d9:d2:9c:c7:7d:a1:01:a7:7c:a4:2f:93:8f:ea:5e:
dd:7c:49:16:09:58:40:e8:1d:83:c3:d4:47:9e:a2:45:30:97:
38:f3:8a:a6:88:24:3f:05:0d:00:47:49:d8:0f:48:96:62:8c:
76:e3:d7:87:03:03:00:04:e1:cc:25:20:57:38:99:68:c0:04:
10:81:e6:df:5d:45:ad:d2:24:f9:d0:81:a1:5c:58:d8:fe:54:
13:f8:6a:e6:34:a1:7e:c5:db:03:b9:2e:40:b3:55:68:e1:a5:
7c:b5:1b:38:57:e9:49:bd:90:5a:fc:8f:1e:34:d0:e1:21:ee:
97:4b:bf:f1:61:b2:4b:ad:ba:c2:aa:da:b2:64:20:9d:e8:9d:
0f:9a:c9:13:53:22:ad:04:97:e3:88:cb:a8:1e:e9:de:6e:e1:
d6:64:98:73:8b:c6:d4:32:f1:fa:5c:92:74:00:2f:19:b7:af:
27:83:a1:56:3e:b5:6e:4a:60:58:d2:14:35:3e:5a:f4:c0:36:
6c:06:4f:24:45:cf:23:5e:b5:86:f0:e2:dc:0c:5a:c1:86:49:
53:ff:a9:58:ee:ab:28:ea:55:cb:8b:b0:2e:f3:0a:c6:80:8b:
20:49:38:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJOO9Ltih7WJ9pzAYrF1rP8+/V5QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjI0MDI3WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3YzlhNzBhZGYyMWMyNTExNzUyZWNiYzA2ZjdiMDNjNmU4
NGUzNjk2OWE1ODU0ZGFlYzkxOWU2YWI3MzFmYzIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS/I/6osMbsg2wAydn4B9DlISahK/vBWSr7i1OAnu1Hz48
37WD70spE351m2LQz0a6jIxkWKamojsxiGcJgNSkIy9PUdtu+tfnb0H+Fr0jTJzO
feZFPzasR5fmRyYGBfHkoxpTLKlLAFkCLG3Q+xE91MTDuWG3VqHsIP9gY5GysAcE
YPdhTKYCqN3haAWy1rFL6361kn1KoACwOU/ykRpF3Lz7iOmmoUXP/2WACu7Vx3nR
7rY27Jd49XkHH3B5VP73lrrbdf1N/duyfdOqm9gntxh/h1ArQjodma/4/f9H+jFz
k59T2tVqMK3x74w9XOt9E09t6muEMnRYW19Z5v2JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzzHTf6QiZaOLRXw54CLRqVJXM2cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZGRmODNmLTNmZDEtNDQ5Ny04ZGExLTI0YTEzZTg2NjVjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVFQwDQYJKoZIhvcNAQELBQADggEBAEloanW0og7ZfP8YGao0iWshDXus
ptnSnMd9oQGnfKQvk4/qXt18SRYJWEDoHYPD1EeeokUwlzjziqaIJD8FDQBHSdgP
SJZijHbj14cDAwAE4cwlIFc4mWjABBCB5t9dRa3SJPnQgaFcWNj+VBP4auY0oX7F
2wO5LkCzVWjhpXy1GzhX6Um9kFr8jx400OEh7pdLv/FhskutusKq2rJkIJ3onQ+a
yRNTIq0El+OIy6ge6d5u4dZkmHOLxtQy8fpcknQALxm3ryeDoVY+tW5KYFjSFDU+
WvTANmwGTyRFzyNetYbw4twMWsGGSVP/qVjuqyjqVcuLsC7zCsaAiyBJOGM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:22 2025 by rpki-client