Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa
File: 5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa (raw, json)
Hash identifier: 2vxenF+XQjkB3ilXaech8ToNFD+UMrVKj1mkVn+hn4U=
Subject key identifier: 78:0E:F8:CB:2F:D5:05:79:AC:4B:35:F5:DE:F8:97:83:FB:BE:BA:80
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6958EB04F9DD7B19FE11FBC8488972C2E1BEEFE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa
Signing time: Wed 08 Oct 2025 00:51:25 +0000
ROA not before: Wed 08 Oct 2025 00:51:25 +0000
ROA not after: Wed 12 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:58:eb:04:f9:dd:7b:19:fe:11:fb:c8:48:89:72:c2:e1:be:ef:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:51:25 2025 GMT
Not After : Nov 12 23:59:59 2025 GMT
Subject: serialNumber=9e3532c59d2bc6bfdf398a4a64427f907a3709262a13881f8825b9802cdf96ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:93:71:e6:83:ac:91:1c:e1:b7:fe:8c:3f:ce:
e9:4e:05:2d:01:e9:fc:6f:af:0a:d2:a1:cc:a8:08:
2d:01:43:2e:fb:22:eb:90:ea:c2:d6:14:aa:b7:67:
19:73:48:b7:7c:cc:ed:8a:90:7c:7b:73:66:fc:8b:
07:1f:4f:ff:0e:99:eb:05:28:c2:bb:b7:9b:e3:8a:
78:21:d6:4c:20:ad:3b:95:77:98:76:2b:b6:f5:a4:
79:01:d6:29:12:6c:77:8a:46:57:37:5e:90:e5:55:
48:e9:12:51:50:2c:93:eb:12:6e:ae:38:48:fd:51:
ee:db:95:5a:e2:8c:9f:3d:fe:96:b2:6e:ac:1c:a7:
75:96:06:92:56:b4:c7:ec:ca:a0:bb:ab:d1:3e:7e:
65:56:c7:b5:f6:6b:48:59:ad:dd:7a:56:0f:cc:51:
35:02:67:c4:4e:00:5f:66:fe:f9:0b:22:ff:58:bb:
fe:19:89:95:47:60:00:10:21:7c:37:86:3a:02:3b:
b3:fb:ee:38:eb:ff:0b:49:f0:a3:a0:1c:95:a8:9a:
cd:39:86:9c:5d:32:74:c4:a6:a4:c6:6d:e9:29:4f:
49:9b:15:12:37:80:f1:ba:ac:51:4a:4d:4e:b6:84:
ae:15:fc:d1:f1:37:66:02:51:e0:c2:cc:dc:f1:8c:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0E:F8:CB:2F:D5:05:79:AC:4B:35:F5:DE:F8:97:83:FB:BE:BA:80
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ee3f969-775f-4571-b834-3ffb3e1dd5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.104.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:ab:5f:fa:65:4b:9b:ff:56:6f:4c:dc:fe:99:18:e8:1e:6f:
28:8f:2f:93:32:2d:12:15:32:a9:31:0d:d0:6f:83:af:b5:8c:
55:37:59:78:7b:f9:78:c6:38:65:0a:a7:36:0d:9d:22:8c:38:
60:d1:9d:23:45:30:67:07:f9:a3:3e:5f:eb:22:bb:ca:03:cf:
78:a0:0b:9d:36:25:bb:36:3b:76:52:91:9a:d7:05:46:7e:ef:
e8:17:02:b2:85:02:3a:99:f2:0d:d4:7f:ea:53:ba:78:fa:1b:
91:1d:da:42:36:16:69:5a:9c:a2:6e:60:d4:2a:0f:d3:9c:c1:
49:92:83:55:c0:55:df:cd:35:ee:f6:16:5f:c4:c2:e6:cb:a8:
97:14:30:58:bf:71:6d:be:9d:1f:d4:23:c6:a2:dd:c7:7c:64:
86:0a:b7:13:72:f5:0a:3a:87:a8:8b:82:cd:cd:05:54:f3:e9:
94:f2:a2:4c:36:bf:67:d6:de:a6:06:f3:3c:c9:d9:59:c5:78:
a0:e1:17:f0:f5:eb:69:7e:0e:94:00:88:c0:5d:1a:fe:94:db:
04:43:65:af:ca:d1:81:d4:93:ad:21:1c:f1:a3:04:5e:b2:5e:
c7:07:4d:29:f9:e1:e1:0b:7e:34:23:e2:2f:aa:5a:04:3d:11:
1d:cf:db:40
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaVjrBPndexn+EfvISIlywuG+7+UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA4MDA1MTI1WhcNMjUxMTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTM1MzJjNTlkMmJjNmJmZGYzOThhNGE2NDQyN2Y5MDdh
MzcwOTI2MmExMzg4MWY4ODI1Yjk4MDJjZGY5NmVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkk3Hmg6yRHOG3/ow/zulOBS0B6fxvrwrSocyoCC0BQy77
IuuQ6sLWFKq3ZxlzSLd8zO2KkHx7c2b8iwcfT/8OmesFKMK7t5vjingh1kwgrTuV
d5h2K7b1pHkB1ikSbHeKRlc3XpDlVUjpElFQLJPrEm6uOEj9Ue7blVrijJ89/pay
bqwcp3WWBpJWtMfsyqC7q9E+fmVWx7X2a0hZrd16Vg/MUTUCZ8ROAF9m/vkLIv9Y
u/4ZiZVHYAAQIXw3hjoCO7P77jjr/wtJ8KOgHJWoms05hpxdMnTEpqTGbekpT0mb
FRI3gPG6rFFKTU62hK4V/NHxN2YCUeDCzNzxjPnRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeA74yy/VBXmsSzX13viXg/u+uoAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlZTNmOTY5LTc3NWYtNDU3MS1iODM0LTNmZmIzZTFkZDVmOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANjl2gwDQYJKoZIhvcNAQELBQADggEBAM+rX/plS5v/Vm9M3P6ZGOgebyiP
L5MyLRIVMqkxDdBvg6+1jFU3WXh7+XjGOGUKpzYNnSKMOGDRnSNFMGcH+aM+X+si
u8oDz3igC502Jbs2O3ZSkZrXBUZ+7+gXArKFAjqZ8g3Uf+pTunj6G5Ed2kI2Fmla
nKJuYNQqD9OcwUmSg1XAVd/NNe72Fl/EwubLqJcUMFi/cW2+nR/UI8ai3cd8ZIYK
txNy9Qo6h6iLgs3NBVTz6ZTyokw2v2fW3qYG8zzJ2VnFeKDhF/D162l+DpQAiMBd
Gv6U2wRDZa/K0YHUk60hHPGjBF6yXscHTSn54eELfjQj4i+qWgQ9ER3P20A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:16 2025 by rpki-client