Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc1de07-898f-4a71-8b85-0de7631ff22b.roa
File: 6dc1de07-898f-4a71-8b85-0de7631ff22b.roa (raw, json)
Hash identifier: /0LfgfPD4UvbeUbbPivVv4KJ+Ua39lVWbO95HcnaCrM=
Subject key identifier: A5:AB:E1:BD:A6:EB:8B:FA:50:5C:05:6E:F3:8D:90:5F:C6:1E:24:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 203F78573E8B37FAAB8EC5F2F954A598803ED6A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc1de07-898f-4a71-8b85-0de7631ff22b.roa
Signing time: Sat 18 Oct 2025 04:31:46 +0000
ROA not before: Sat 18 Oct 2025 04:31:46 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:3f:78:57:3e:8b:37:fa:ab:8e:c5:f2:f9:54:a5:98:80:3e:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:31:46 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=522f1e584365f4d413766a9df695b95a72e711bf8b49c450c7a64df585fa0fba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:95:d4:bc:15:e7:60:c7:dc:64:15:a8:b6:
1c:4c:dd:57:87:d5:f4:c7:f1:b8:e4:4e:f5:64:a0:
06:23:2e:ad:d9:e1:db:8b:63:a1:c9:b4:46:99:26:
95:68:ff:67:9e:d7:82:2d:cd:0a:fd:40:98:7a:bc:
d6:6a:59:88:ca:fb:fa:a1:24:ab:53:ed:ff:e8:6a:
02:de:99:c9:89:db:85:67:e4:d0:f6:f4:fe:2b:21:
76:0c:27:2f:84:81:8a:a7:3c:8d:b6:d2:0b:bb:c9:
59:a3:bc:4d:3a:34:e7:3b:8f:83:aa:f3:3d:c7:2a:
31:83:f2:a4:42:8b:d4:fe:23:e4:6d:03:17:25:05:
22:8c:a3:3b:34:d7:c2:40:e0:e1:50:38:91:47:bb:
25:60:d2:17:a8:bc:0b:0e:af:0d:ea:55:20:e7:8e:
87:7f:47:8c:ed:70:91:b9:90:e1:36:73:3c:2c:6f:
b1:48:17:35:01:2c:bf:17:db:b7:95:41:97:e5:af:
2c:3a:49:5e:60:ad:95:35:c1:99:63:e4:9b:c9:66:
35:7b:30:2b:23:05:be:ca:ec:99:09:cd:3d:79:07:
f5:00:d3:06:d2:bd:e6:1a:42:0d:d8:d2:ae:4e:06:
3b:d9:a9:63:03:76:e4:f9:a1:20:28:0e:27:ef:93:
74:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AB:E1:BD:A6:EB:8B:FA:50:5C:05:6E:F3:8D:90:5F:C6:1E:24:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6dc1de07-898f-4a71-8b85-0de7631ff22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.102.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f9:b2:1c:1f:79:34:44:2d:e5:fc:d9:d4:8b:46:4e:c7:59:
17:d6:f5:cd:54:2d:b4:a5:86:6e:08:cf:72:0d:8c:74:22:3e:
b2:e5:4a:40:93:0d:fe:c7:e2:bd:1e:40:7e:b6:6c:09:e8:66:
4e:be:f4:49:de:d3:bf:fd:7c:ff:cb:b5:13:f3:71:0b:c9:09:
a6:86:37:3a:4f:43:f8:8a:01:73:27:11:4e:31:87:f0:1c:f5:
ad:9c:1a:6c:03:13:be:8d:1e:fc:fb:67:ae:66:95:94:90:3a:
85:ee:7a:ba:d1:e7:29:57:98:03:42:68:66:58:59:90:c2:4b:
c3:a0:4f:aa:4d:f3:bb:4c:4e:42:d0:f5:f6:58:db:c4:5b:49:
02:bc:c7:bd:c1:42:3f:eb:9f:4c:cf:e1:9b:0f:cd:ab:b8:3b:
48:2b:c2:b8:df:c7:81:f5:f2:1c:9e:71:c6:a3:04:21:5e:fe:
de:f4:52:cd:3b:5b:50:e0:b6:bf:f0:d8:84:c8:6e:ec:0c:4a:
a7:f6:ac:02:f5:05:41:29:2d:1a:f8:4d:c2:b6:8c:55:c5:6a:
99:55:df:14:98:e5:c5:e5:bb:e2:51:ea:ad:80:5b:70:fa:6c:
18:ce:02:4d:33:81:fe:36:81:d6:3d:97:4f:c0:0f:8b:78:18:
6e:3d:39:90
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUID94Vz6LN/qrjsXy+VSlmIA+1qkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQzMTQ2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjJmMWU1ODQzNjVmNGQ0MTM3NjZhOWRmNjk1Yjk1YTcy
ZTcxMWJmOGI0OWM0NTBjN2E2NGRmNTg1ZmEwZmJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDI+JXUvBXnYMfcZBWothxM3VeH1fTH8bjkTvVkoAYjLq3Z
4duLY6HJtEaZJpVo/2ee14ItzQr9QJh6vNZqWYjK+/qhJKtT7f/oagLemcmJ24Vn
5ND29P4rIXYMJy+EgYqnPI220gu7yVmjvE06NOc7j4Oq8z3HKjGD8qRCi9T+I+Rt
AxclBSKMozs018JA4OFQOJFHuyVg0heovAsOrw3qVSDnjod/R4ztcJG5kOE2czws
b7FIFzUBLL8X27eVQZflryw6SV5grZU1wZlj5JvJZjV7MCsjBb7K7JkJzT15B/UA
0wbSveYaQg3Y0q5OBjvZqWMDduT5oSAoDifvk3S3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpavhvabri/pQXAVu842QX8YeJHwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZkYzFkZTA3LTg5OGYtNGE3MS04Yjg1LTBkZTc2MzFmZjIyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCWYwDQYJKoZIhvcNAQELBQADggEBAHD5shwfeTRELeX82dSLRk7HWRfW
9c1ULbSlhm4Iz3INjHQiPrLlSkCTDf7H4r0eQH62bAnoZk6+9Ene07/9fP/LtRPz
cQvJCaaGNzpPQ/iKAXMnEU4xh/Ac9a2cGmwDE76NHvz7Z65mlZSQOoXuerrR5ylX
mANCaGZYWZDCS8OgT6pN87tMTkLQ9fZY28RbSQK8x73BQj/rn0zP4ZsPzau4O0gr
wrjfx4H18hyeccajBCFe/t70Us07W1Dgtr/w2ITIbuwMSqf2rAL1BUEpLRr4TcK2
jFXFaplV3xSY5cXlu+JR6q2AW3D6bBjOAk0zgf42gdY9l0/AD4t4GG49OZA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:43 2025 by rpki-client