Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa
File: 5eac4af7-a50d-47d9-86d6-2298b7626d53.roa (raw, json)
Hash identifier: PM62WqPyziF0F+qJhPhnmSAFcgCgmdgmtzH7R7lExd0=
Subject key identifier: F4:30:C4:5E:30:ED:65:4D:EE:A1:46:45:73:EC:3A:67:8E:48:19:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6621F513AB6804E240EC2336141731C0954CD31E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa
Signing time: Tue 14 Oct 2025 17:52:32 +0000
ROA not before: Tue 14 Oct 2025 17:52:32 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:21:f5:13:ab:68:04:e2:40:ec:23:36:14:17:31:c0:95:4c:d3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:52:32 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=50e4427ab629c0ba1d980fe3a31320487670f5603f1c67b24c9c0379dfc98ee6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:41:73:0b:2d:67:06:d7:4e:11:b0:1f:79:
20:de:c6:ca:53:26:c2:18:5d:84:87:b6:32:ad:e1:
1f:f7:c5:2d:8f:bb:5e:a6:fe:e8:9e:2a:37:f5:4c:
b9:17:31:42:b5:cd:57:01:4b:ae:54:39:12:9c:94:
ed:ed:0b:37:e1:5d:c5:8c:98:90:7c:3b:d2:93:61:
c0:f7:50:ad:54:8b:1e:df:e2:22:53:98:24:c0:0d:
6d:2e:f5:ef:ee:53:91:3d:1e:22:15:b3:d7:4d:a3:
6f:1c:b0:77:b5:34:4a:0d:a4:97:e4:48:8c:06:2e:
46:7d:1b:f1:79:6a:a8:15:5b:c1:b0:b7:2c:69:0e:
76:9e:77:cf:36:ae:63:01:7d:2e:3d:65:19:f0:ad:
21:25:09:18:a9:d2:ff:eb:22:a3:f4:78:68:6c:da:
57:f6:43:ff:55:72:6c:d4:ca:05:bc:d3:ba:85:e3:
8d:d8:9e:e8:23:da:91:d4:1f:48:94:1d:0a:27:85:
ba:ca:53:8a:98:d4:3c:fc:84:de:bb:ab:98:ff:45:
04:cc:7c:c3:5d:68:79:17:67:df:2f:33:35:4a:e3:
4f:a8:19:de:58:b7:77:89:b5:3a:a6:8f:73:02:1c:
f8:42:49:e6:29:ea:da:8f:21:99:2e:1c:a5:f5:8b:
3d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:30:C4:5E:30:ED:65:4D:EE:A1:46:45:73:EC:3A:67:8E:48:19:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5eac4af7-a50d-47d9-86d6-2298b7626d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.86.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:61:a2:69:48:a2:7e:d6:98:7b:e4:4e:e2:08:59:58:d6:f9:
dd:77:2f:91:d3:0d:31:c1:d6:5e:3f:ca:4b:b9:39:f6:be:e9:
f3:73:16:43:73:c3:bd:2c:ee:33:d2:ff:e9:12:62:09:b3:b2:
19:3c:46:1f:26:37:07:b0:56:a1:e9:c4:9d:02:45:b9:2e:bd:
89:96:9b:79:5b:fc:32:1f:5f:df:3e:1e:5f:eb:f3:f4:0f:17:
a5:85:56:fc:c4:f2:4f:f5:c4:c6:b8:c8:96:b3:9a:7c:26:5c:
a6:c7:10:e2:62:08:26:01:f9:50:0a:fc:95:71:9c:d6:ae:04:
59:91:5e:70:94:ea:f3:5e:92:eb:98:ba:b6:8f:c8:54:eb:eb:
75:f1:1d:40:b1:2b:ca:ce:91:d9:f1:2b:58:4a:1a:67:56:77:
50:f6:49:2d:f8:25:19:52:24:b2:13:42:b4:3b:fa:50:d5:dd:
eb:6a:94:f3:1a:8f:ae:7a:d3:3c:05:51:03:93:d8:e2:ce:03:
9a:c3:61:35:84:ec:fd:64:5c:b0:b6:10:3e:e4:09:57:7c:5f:
c7:ca:bc:4e:07:6a:65:6d:c5:59:6f:d8:75:9d:62:a6:41:0b:
97:5c:ca:d6:7b:6a:86:e0:13:1b:c8:ad:98:cf:72:7c:80:37:
78:0b:6b:ca
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZiH1E6toBOJA7CM2FBcxwJVM0x4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTc1MjMyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGU0NDI3YWI2MjljMGJhMWQ5ODBmZTNhMzEzMjA0ODc2
NzBmNTYwM2YxYzY3YjI0YzljMDM3OWRmYzk4ZWU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxJkFzCy1nBtdOEbAfeSDexspTJsIYXYSHtjKt4R/3xS2P
u16m/uieKjf1TLkXMUK1zVcBS65UORKclO3tCzfhXcWMmJB8O9KTYcD3UK1Uix7f
4iJTmCTADW0u9e/uU5E9HiIVs9dNo28csHe1NEoNpJfkSIwGLkZ9G/F5aqgVW8Gw
tyxpDnaed882rmMBfS49ZRnwrSElCRip0v/rIqP0eGhs2lf2Q/9VcmzUygW807qF
443Ynugj2pHUH0iUHQonhbrKU4qY1Dz8hN67q5j/RQTMfMNdaHkXZ98vMzVK40+o
Gd5Yt3eJtTqmj3MCHPhCSeYp6tqPIZkuHKX1iz0nAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU9DDEXjDtZU3uoUZFc+w6Z45IGTwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlYWM0YWY3LWE1MGQtNDdkOS04NmQ2LTIyOThiNzYyNmQ1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmFYwDQYJKoZIhvcNAQELBQADggEBANVhomlIon7WmHvkTuIIWVjW+d13
L5HTDTHB1l4/yku5Ofa+6fNzFkNzw70s7jPS/+kSYgmzshk8Rh8mNwewVqHpxJ0C
RbkuvYmWm3lb/DIfX98+Hl/r8/QPF6WFVvzE8k/1xMa4yJazmnwmXKbHEOJiCCYB
+VAK/JVxnNauBFmRXnCU6vNekuuYuraPyFTr63XxHUCxK8rOkdnxK1hKGmdWd1D2
SS34JRlSJLITQrQ7+lDV3etqlPMaj6560zwFUQOT2OLOA5rDYTWE7P1kXLC2ED7k
CVd8X8fKvE4HamVtxVlv2HWdYqZBC5dcytZ7aobgExvIrZjPcnyAN3gLa8o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:49 2025 by rpki-client