Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9abd7a-7de4-4f55-b965-36db644c926a.roa
File: 6f9abd7a-7de4-4f55-b965-36db644c926a.roa (raw, json)
Hash identifier: qp6uGlBHf+/ZpFN32JNuQ3CgZZKqUC7ahJDg3O0hxMQ=
Subject key identifier: 0F:85:BA:77:FD:58:43:AF:98:91:CC:72:75:BD:A4:C6:78:AC:B4:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 379155BF249EF04D42E77A79C11AB505D9778944
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9abd7a-7de4-4f55-b965-36db644c926a.roa
Signing time: Sat 18 Oct 2025 03:01:46 +0000
ROA not before: Sat 18 Oct 2025 03:01:46 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:91:55:bf:24:9e:f0:4d:42:e7:7a:79:c1:1a:b5:05:d9:77:89:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:01:46 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=6b553315a198d346b65067a178de9a97d241cad0c5ba6263a9bda32b74403c5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e8:0b:bf:b8:3e:93:26:79:11:3f:bb:4a:7b:
e6:fa:04:6d:55:38:ff:20:e7:57:b6:53:79:ad:24:
fb:46:66:df:31:85:b3:ef:17:99:5f:30:d9:93:f4:
e7:ac:c3:6f:65:33:bc:13:ea:8b:4f:ba:1c:ab:d4:
e5:5f:bf:86:06:5c:e8:c2:72:56:e4:72:a2:45:46:
f8:3b:4f:10:71:3e:64:b6:1a:dd:0f:2a:2a:d7:1a:
2e:66:49:37:63:2f:51:08:34:6f:b6:56:1c:97:4a:
e4:5f:83:df:24:d4:1c:9a:3d:9d:ae:ba:ca:8d:c6:
dd:20:ab:9b:d6:6d:51:24:2c:42:dc:fd:a9:e0:dd:
94:8d:52:30:1b:82:2f:e2:48:59:fd:9e:77:9a:f7:
b5:05:40:df:13:aa:d0:c0:2a:81:75:f2:8c:de:ab:
55:7b:d3:01:b3:6c:76:e5:bf:8c:e9:ca:9a:f9:89:
c6:92:4f:5c:77:98:d5:d1:50:2a:c2:cc:52:04:2d:
53:06:5d:07:ca:2d:b9:51:95:5a:1c:d0:20:cf:12:
8c:03:60:56:0b:bc:3a:06:66:bd:d4:6f:30:5d:68:
44:55:63:76:61:63:df:01:71:e7:a9:c3:fe:b8:6c:
fb:be:d7:e1:44:5b:67:ec:f3:5a:46:10:84:8c:0d:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:85:BA:77:FD:58:43:AF:98:91:CC:72:75:BD:A4:C6:78:AC:B4:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6f9abd7a-7de4-4f55-b965-36db644c926a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e9:a0:e3:0c:bb:73:51:d8:d8:9a:e0:b2:cd:da:b8:55:3d:
16:c7:66:90:31:91:b7:27:5f:b7:de:5b:a9:81:45:47:85:32:
17:0f:42:97:a0:08:77:63:2c:6e:f7:32:0e:b7:57:34:ea:04:
ad:33:69:7e:d9:03:8f:b1:02:db:d9:3f:a0:0a:be:36:51:06:
8d:db:db:df:3e:29:2e:af:a6:49:40:91:47:a1:4b:10:a0:46:
ad:03:f3:15:7e:65:94:1f:fd:6b:65:40:98:d5:54:38:14:61:
57:bc:18:6e:79:ce:f0:af:93:fa:93:7d:73:6b:99:6e:73:81:
6b:49:24:3a:de:7c:b9:54:b6:94:e5:93:bc:78:80:ad:70:45:
fc:73:12:d7:da:5a:ae:99:4d:84:7a:bf:f5:27:11:21:d0:a2:
97:19:52:72:61:f0:e4:d2:be:f7:5c:cf:d9:d4:09:de:82:ad:
e6:13:99:39:67:c3:8e:4c:88:12:a3:c5:74:a1:c7:17:cd:8a:
b5:41:a3:9d:4d:43:7b:9a:65:4f:12:ba:46:74:cc:4d:f9:db:
04:80:13:b5:88:60:bd:5d:61:c2:be:30:91:fe:2d:78:2b:89:
93:b9:01:19:d1:05:90:a4:f0:8f:a5:ba:78:3d:ba:a1:f0:0a:
68:fa:c0:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN5FVvySe8E1C53p5wRq1Bdl3iUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMwMTQ2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjU1MzMxNWExOThkMzQ2YjY1MDY3YTE3OGRlOWE5N2Qy
NDFjYWQwYzViYTYyNjNhOWJkYTMyYjc0NDAzYzVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCg6Au/uD6TJnkRP7tKe+b6BG1VOP8g51e2U3mtJPtGZt8x
hbPvF5lfMNmT9Oesw29lM7wT6otPuhyr1OVfv4YGXOjCclbkcqJFRvg7TxBxPmS2
Gt0PKirXGi5mSTdjL1EING+2VhyXSuRfg98k1ByaPZ2uusqNxt0gq5vWbVEkLELc
/ang3ZSNUjAbgi/iSFn9nnea97UFQN8TqtDAKoF18ozeq1V70wGzbHblv4zpypr5
icaST1x3mNXRUCrCzFIELVMGXQfKLblRlVoc0CDPEowDYFYLvDoGZr3UbzBdaERV
Y3ZhY98Bceepw/64bPu+1+FEW2fs81pGEISMDc75AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUD4W6d/1YQ6+Ykcxydb2kxnistCUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmOWFiZDdhLTdkZTQtNGY1NS1iOTY1LTM2ZGI2NDRjOTI2YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCLkwDQYJKoZIhvcNAQELBQADggEBAI7poOMMu3NR2Nia4LLN2rhVPRbH
ZpAxkbcnX7feW6mBRUeFMhcPQpegCHdjLG73Mg63VzTqBK0zaX7ZA4+xAtvZP6AK
vjZRBo3b298+KS6vpklAkUehSxCgRq0D8xV+ZZQf/WtlQJjVVDgUYVe8GG55zvCv
k/qTfXNrmW5zgWtJJDrefLlUtpTlk7x4gK1wRfxzEtfaWq6ZTYR6v/UnESHQopcZ
UnJh8OTSvvdcz9nUCd6CreYTmTlnw45MiBKjxXShxxfNirVBo51NQ3uaZU8SukZ0
zE352wSAE7WIYL1dYcK+MJH+LXgriZO5ARnRBZCk8I+lung9uqHwCmj6wPk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:50 2025 by rpki-client