Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7057faf5-2089-4917-bd4c-1ea8235fb41e.roa
File: 7057faf5-2089-4917-bd4c-1ea8235fb41e.roa (raw, json)
Hash identifier: 4VIx6vkbW+T0j9WYG7hFLJWP2N3sHYexDkgPrQUHYmQ=
Subject key identifier: 6B:9C:3F:88:D2:56:A9:34:F9:E0:5B:CE:95:71:9A:8E:56:38:C0:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AFE7C80C77BD3B6E304417DEDDB1DCF5BC49AF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7057faf5-2089-4917-bd4c-1ea8235fb41e.roa
Signing time: Sat 18 Oct 2025 03:00:11 +0000
ROA not before: Sat 18 Oct 2025 03:00:11 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:fe:7c:80:c7:7b:d3:b6:e3:04:41:7d:ed:db:1d:cf:5b:c4:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:00:11 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=9b4027e932f4b120dca7499a5c9f0b2fc0d2af386035e4cf3b5568ca8567e661, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:c9:3c:b8:fe:26:46:ed:ec:c7:53:4d:26:
b4:f7:b9:b9:98:97:13:03:88:74:c4:ae:48:c6:e8:
7e:7a:ad:bc:b8:90:4c:db:7c:63:f4:96:46:29:25:
09:a5:73:23:35:40:dd:1c:0f:7a:c8:1d:d4:6d:0e:
97:bf:d4:d0:00:a6:41:1a:af:a4:6c:c5:d5:23:ca:
fa:74:e8:a7:5f:f0:1b:1a:db:d7:6f:54:41:e1:11:
f6:2b:f2:5e:04:bb:db:5e:d1:d8:a5:b8:a9:42:c9:
c6:e6:68:c2:30:9d:76:06:6e:bd:0e:9c:2d:e9:60:
00:c6:22:81:29:76:33:cc:92:4c:27:56:ce:99:31:
45:ca:f2:cf:29:f6:30:8f:61:ba:de:dc:e7:fd:42:
5b:b8:cb:ce:55:e1:d0:13:92:91:42:11:81:4c:d8:
b8:19:9f:e2:6f:ae:ad:75:96:82:4b:aa:ae:7e:cb:
fa:85:58:a1:08:40:5c:26:e4:dc:73:52:3d:48:12:
06:9b:c5:c6:5a:c0:c6:2a:5b:d4:33:6a:ee:3d:79:
71:ed:a6:25:9c:b8:d5:19:c0:5b:98:d9:6f:55:d3:
0c:cf:fe:68:85:81:da:f6:b9:af:8d:76:d5:4f:56:
96:7a:57:f1:19:34:af:8c:7d:0c:66:91:73:b3:8a:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9C:3F:88:D2:56:A9:34:F9:E0:5B:CE:95:71:9A:8E:56:38:C0:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7057faf5-2089-4917-bd4c-1ea8235fb41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.222.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:03:fd:90:3a:eb:3e:a6:32:10:26:4b:40:86:d2:b0:2d:28:
21:ba:8a:23:7b:fa:7f:d0:ec:c8:26:8d:64:ae:33:25:b1:ae:
27:18:22:b5:07:98:60:b4:48:6b:c7:0a:fe:9d:7a:57:44:c9:
be:41:17:80:3d:46:e7:53:d0:5d:83:1e:a8:50:a4:4e:6e:c6:
e0:29:80:07:86:2f:7f:04:2b:3a:10:a7:f4:bc:8f:cd:db:f4:
56:1e:6c:56:72:04:0f:2e:ba:17:7f:6d:6a:b7:57:bc:3f:dc:
cb:64:06:c8:6e:1c:70:a1:b9:fd:91:1d:ca:93:f7:b0:82:35:
61:d6:c3:f9:43:de:7e:39:ea:c0:45:af:7e:96:f0:3c:f9:b3:
54:79:2c:0e:c8:db:da:80:78:94:a1:c6:a1:a2:85:a2:be:af:
4c:2b:de:94:5d:69:93:d0:0e:41:e2:3b:54:1e:b2:72:17:dc:
2d:f2:4c:ae:90:09:b1:50:41:ff:a7:e2:36:cc:10:e9:3e:84:
a1:08:bc:5f:2a:fe:2a:e0:3d:00:60:88:7d:be:82:d5:55:e1:
4e:1e:26:47:53:ab:10:1a:c1:ed:2e:c6:43:66:02:15:0d:10:
04:c9:40:f8:95:8b:be:07:1e:e8:d2:08:66:f4:9a:1e:ab:41:
57:49:48:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGv58gMd707bjBEF97dsdz1vEmvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMwMDExWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjQwMjdlOTMyZjRiMTIwZGNhNzQ5OWE1YzlmMGIyZmMw
ZDJhZjM4NjAzNWU0Y2YzYjU1NjhjYTg1NjdlNjYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDack8uP4mRu3sx1NNJrT3ubmYlxMDiHTErkjG6H56rby4
kEzbfGP0lkYpJQmlcyM1QN0cD3rIHdRtDpe/1NAApkEar6RsxdUjyvp06Kdf8Bsa
29dvVEHhEfYr8l4Eu9te0diluKlCycbmaMIwnXYGbr0OnC3pYADGIoEpdjPMkkwn
Vs6ZMUXK8s8p9jCPYbre3Of9Qlu4y85V4dATkpFCEYFM2LgZn+Jvrq11loJLqq5+
y/qFWKEIQFwm5NxzUj1IEgabxcZawMYqW9Qzau49eXHtpiWcuNUZwFuY2W9V0wzP
/miFgdr2ua+NdtVPVpZ6V/EZNK+MfQxmkXOzimW/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUa5w/iNJWqTT54FvOlXGajlY4wDUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcwNTdmYWY1LTIwODktNDkxNy1iZDRjLTFlYTgyMzVmYjQxZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCN4wDQYJKoZIhvcNAQELBQADggEBALgD/ZA66z6mMhAmS0CG0rAtKCG6
iiN7+n/Q7MgmjWSuMyWxricYIrUHmGC0SGvHCv6deldEyb5BF4A9RudT0F2DHqhQ
pE5uxuApgAeGL38EKzoQp/S8j83b9FYebFZyBA8uuhd/bWq3V7w/3MtkBshuHHCh
uf2RHcqT97CCNWHWw/lD3n456sBFr36W8Dz5s1R5LA7I29qAeJShxqGihaK+r0wr
3pRdaZPQDkHiO1QesnIX3C3yTK6QCbFQQf+n4jbMEOk+hKEIvF8q/irgPQBgiH2+
gtVV4U4eJkdTqxAawe0uxkNmAhUNEATJQPiVi74HHujSCGb0mh6rQVdJSHI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:23 2025 by rpki-client