Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed1ca78-668f-4d2f-ae42-9fda052849f0.roa
File: 6ed1ca78-668f-4d2f-ae42-9fda052849f0.roa (raw, json)
Hash identifier: gAtGugb3qd6t2QyKf8mADC2ZEODGboGWq/LqjO9rpTs=
Subject key identifier: F1:78:00:D6:CF:F3:3A:EA:AA:8E:E2:BB:94:8D:32:A5:A0:29:F6:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D59C643CDC5A12F2C07AA98B7666D0EF58D2C69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed1ca78-668f-4d2f-ae42-9fda052849f0.roa
Signing time: Tue 14 Oct 2025 20:41:15 +0000
ROA not before: Tue 14 Oct 2025 20:41:15 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:59:c6:43:cd:c5:a1:2f:2c:07:aa:98:b7:66:6d:0e:f5:8d:2c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:41:15 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=4c3c0d32ed97879ccfea1f4b1b40311b4345c53d9ecf6807c7b0d51d837b0e4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:89:40:45:c8:e6:ec:42:4e:12:23:67:45:
84:ad:c1:09:92:c4:8f:fb:8a:99:b9:af:0e:38:fd:
85:91:f6:b8:22:9b:47:95:d3:ba:90:1c:ab:c5:90:
5d:5c:a6:19:c7:f5:e8:e9:8c:4c:59:1c:eb:7e:41:
86:ae:cc:28:9b:f7:48:82:c8:bf:04:f1:21:d7:2f:
e4:48:4c:33:52:8a:f3:b0:4e:32:05:a1:1a:11:e1:
f5:5d:4b:ad:44:95:5c:7f:23:0f:a0:64:87:31:e9:
ce:e5:f0:da:32:36:bd:6c:86:97:6c:39:53:a1:93:
9c:52:15:6d:00:ca:e3:f7:49:45:fa:50:10:d9:e2:
0c:9d:36:72:57:38:54:7f:ea:47:b0:64:58:80:b3:
80:c2:c9:74:45:10:55:dc:fa:56:9e:59:9f:bf:9d:
fd:a3:81:6d:79:9b:73:1a:30:16:de:be:86:22:0f:
ea:13:b2:de:2e:e5:66:f7:3c:41:b1:3d:db:2e:0c:
c3:93:61:c5:52:69:7e:48:38:df:7d:58:92:eb:80:
6a:a7:38:b9:4c:61:6f:63:d2:a6:bc:8c:cb:fc:3a:
64:ee:71:d0:fc:13:43:b2:ac:5a:25:55:ce:f4:54:
85:71:d7:29:5b:6f:6e:1d:42:4b:53:5e:f7:b8:cc:
4e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:78:00:D6:CF:F3:3A:EA:AA:8E:E2:BB:94:8D:32:A5:A0:29:F6:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6ed1ca78-668f-4d2f-ae42-9fda052849f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:52:8a:fe:5d:93:33:76:c9:95:64:e9:9a:0c:86:e7:1a:13:
62:c7:39:46:b2:4d:27:52:20:6b:3a:37:65:81:21:f0:c4:f5:
e3:81:b7:30:9b:3d:e2:b9:4e:29:c1:1e:d1:a9:84:cd:3b:65:
23:b2:e6:88:f3:43:cc:6a:ea:bc:06:bc:c0:af:a7:05:da:66:
6e:54:0e:e2:de:ab:bc:73:03:dd:7f:dc:fe:3c:6b:39:d1:4f:
4c:f7:a1:22:14:fa:25:bc:72:39:9c:58:f1:83:4b:66:0f:84:
c8:60:85:4a:41:8b:8a:ff:71:7d:57:61:8d:3e:71:4b:ee:62:
4d:11:7f:85:d9:58:12:eb:0b:14:2b:42:b9:45:01:18:29:47:
a6:2d:a2:21:0b:cd:66:2a:10:00:c9:98:40:87:0d:ed:d5:08:
d4:f9:d2:c5:52:fd:57:c0:6b:00:d9:b8:67:46:6d:ee:f3:a1:
a2:33:a1:89:02:25:7e:ae:65:71:80:de:28:65:c5:4d:99:64:
63:d2:ab:04:22:60:e3:fb:a2:cd:0b:72:08:c3:6a:1a:b9:9f:
46:28:fb:56:1e:b5:8e:97:10:cf:61:50:52:2d:3a:15:f8:5f:
f3:86:ef:7f:e0:8c:2f:bb:20:06:14:a5:47:5f:74:dc:5b:8c:
ae:d1:42:17
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPVnGQ83FoS8sB6qYt2ZtDvWNLGkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjA0MTE1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A0YzNjMGQzMmVkOTc4NzljY2ZlYTFmNGIxYjQwMzExYjQz
NDVjNTNkOWVjZjY4MDdjN2IwZDUxZDgzN2IwZTRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6O4lARcjm7EJOEiNnRYStwQmSxI/7ipm5rw44/YWR9rgi
m0eV07qQHKvFkF1cphnH9ejpjExZHOt+QYauzCib90iCyL8E8SHXL+RITDNSivOw
TjIFoRoR4fVdS61ElVx/Iw+gZIcx6c7l8NoyNr1shpdsOVOhk5xSFW0AyuP3SUX6
UBDZ4gydNnJXOFR/6kewZFiAs4DCyXRFEFXc+laeWZ+/nf2jgW15m3MaMBbevoYi
D+oTst4u5Wb3PEGxPdsuDMOTYcVSaX5ION99WJLrgGqnOLlMYW9j0qa8jMv8OmTu
cdD8E0OyrFolVc70VIVx1ylbb24dQktTXve4zE5TAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU8XgA1s/zOuqqjuK7lI0ypaAp9jUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlZDFjYTc4LTY2OGYtNGQyZi1hZTQyLTlmZGEwNTI4NDlmMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjVIgwDQYJKoZIhvcNAQELBQADggEBAKJSiv5dkzN2yZVk6ZoMhucaE2LH
OUayTSdSIGs6N2WBIfDE9eOBtzCbPeK5TinBHtGphM07ZSOy5ojzQ8xq6rwGvMCv
pwXaZm5UDuLeq7xzA91/3P48aznRT0z3oSIU+iW8cjmcWPGDS2YPhMhghUpBi4r/
cX1XYY0+cUvuYk0Rf4XZWBLrCxQrQrlFARgpR6YtoiELzWYqEADJmECHDe3VCNT5
0sVS/VfAawDZuGdGbe7zoaIzoYkCJX6uZXGA3ihlxU2ZZGPSqwQiYOP7os0LcgjD
ahq5n0Yo+1YetY6XEM9hUFItOhX4X/OG73/gjC+7IAYUpUdfdNxbjK7RQhc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:16 2025 by rpki-client