Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa
File: 7812bdff-a702-4659-8989-c79feeb052dd.roa (raw, json)
Hash identifier: lyEh4BQOYZHaIDS1hBGzNDlgI/0OKf2KPrCI5YclWbs=
Subject key identifier: DD:40:78:4D:7B:F2:D2:5C:DB:65:AD:9A:55:6D:33:0E:1F:2D:4D:CD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EB732E10F5482EB2A202773959ACE4208565C4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa
Signing time: Sat 11 Oct 2025 00:38:32 +0000
ROA not before: Sat 11 Oct 2025 00:38:32 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.198.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b7:32:e1:0f:54:82:eb:2a:20:27:73:95:9a:ce:42:08:56:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:38:32 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=8517502f9ce00c344cb42cd3f9a4c427583684521378343751d9385f4ae4500c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:f6:42:09:44:7f:ae:d1:53:5d:68:95:80:
94:c8:c7:ec:08:82:e3:1a:e0:31:0e:22:6c:24:a9:
90:5b:29:01:c8:1c:57:49:49:fc:0b:a9:93:07:e9:
d4:2b:0e:2d:a1:0a:92:a1:97:95:28:21:77:e2:27:
de:c2:ad:78:43:b5:41:d1:94:b2:22:78:c7:a6:98:
1c:a2:24:e7:b9:16:39:be:20:17:90:55:2e:9d:54:
2e:b9:8e:71:1b:74:ab:eb:fc:27:84:a5:76:c2:85:
ca:83:f5:a2:d0:bc:1b:02:da:d5:b5:d3:9b:6f:64:
99:a5:97:c0:39:69:c8:52:8b:87:b6:17:5c:88:6a:
6b:b8:dc:03:c5:e2:84:d9:e5:96:b8:d1:ed:a8:23:
0e:11:05:c2:f4:87:90:be:1c:18:68:a5:d4:79:70:
52:a9:dc:e9:d9:c9:ed:bd:98:5a:35:3a:25:85:bf:
30:aa:c2:4c:06:f4:91:4a:92:c5:e3:f7:19:26:f0:
de:0d:d3:04:73:af:6d:0f:14:18:cd:7a:da:24:2a:
0a:5e:7f:af:80:ae:b4:f6:a1:9a:7a:e8:18:5e:13:
6b:b1:77:1a:55:42:c4:e2:a0:71:23:b0:ae:a2:e5:
a8:1c:0d:0d:cb:dc:15:27:a3:de:ea:99:69:df:e3:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:40:78:4D:7B:F2:D2:5C:DB:65:AD:9A:55:6D:33:0E:1F:2D:4D:CD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7812bdff-a702-4659-8989-c79feeb052dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.198.85.0/24
Signature Algorithm: sha256WithRSAEncryption
13:53:74:31:6e:90:12:61:20:d2:4c:1b:5f:ed:9a:c8:31:97:
88:a4:cd:0f:88:9a:2f:86:3c:63:81:0f:82:df:cb:93:b2:0e:
15:33:d7:79:01:5e:2a:77:0a:d6:a6:4e:57:21:65:9d:c8:fa:
f9:43:50:40:ec:cd:d5:3f:db:b8:3a:b2:45:69:4b:67:63:f7:
d8:05:14:97:15:01:a0:db:d8:9e:9d:57:bf:06:a2:b3:2d:23:
fa:09:de:8c:a7:c2:4b:e3:1a:ad:17:0b:17:2a:45:3a:87:40:
e4:47:4b:40:d2:ad:45:b2:b5:2b:d4:2d:eb:61:95:87:57:68:
08:6c:9b:4f:39:85:a0:a8:16:75:5a:49:0f:a1:1e:27:c9:0b:
2a:ae:c8:e1:cb:7d:41:35:76:44:d1:8e:7f:d7:c2:d1:36:cc:
38:5a:88:7c:c2:d7:0f:41:90:18:d3:4e:21:86:2d:a0:93:bb:
42:76:ac:0f:0d:aa:ae:e5:e5:3e:5d:01:33:76:a6:8e:07:9e:
36:ca:17:6b:e9:44:44:73:a5:4e:6f:04:b7:c7:15:65:90:51:
aa:5b:5e:ab:e7:1f:f8:48:03:95:7d:55:68:18:f1:10:b0:71:
d8:c5:53:1f:50:0f:1c:3e:61:6d:be:25:4f:48:78:5b:19:0f:
fe:32:41:68
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfrcy4Q9UgusqICdzlZrOQghWXEswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDAzODMyWhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NTE3NTAyZjljZTAwYzM0NGNiNDJjZDNmOWE0YzQyNzU4
MzY4NDUyMTM3ODM0Mzc1MWQ5Mzg1ZjRhZTQ1MDBjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYyPZCCUR/rtFTXWiVgJTIx+wIguMa4DEOImwkqZBbKQHI
HFdJSfwLqZMH6dQrDi2hCpKhl5UoIXfiJ97CrXhDtUHRlLIieMemmByiJOe5Fjm+
IBeQVS6dVC65jnEbdKvr/CeEpXbChcqD9aLQvBsC2tW105tvZJmll8A5achSi4e2
F1yIamu43APF4oTZ5Za40e2oIw4RBcL0h5C+HBhopdR5cFKp3OnZye29mFo1OiWF
vzCqwkwG9JFKksXj9xkm8N4N0wRzr20PFBjNetokKgpef6+ArrT2oZp66BheE2ux
dxpVQsTioHEjsK6i5agcDQ3L3BUno97qmWnf42jxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU3UB4TXvy0lzbZa2aVW0zDh8tTc0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc4MTJiZGZmLWE3MDItNDY1OS04OTg5LWM3OWZlZWIwNTJkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADYxlUwDQYJKoZIhvcNAQELBQADggEBABNTdDFukBJhINJMG1/tmsgxl4ik
zQ+Imi+GPGOBD4Lfy5OyDhUz13kBXip3CtamTlchZZ3I+vlDUEDszdU/27g6skVp
S2dj99gFFJcVAaDb2J6dV78GorMtI/oJ3oynwkvjGq0XCxcqRTqHQORHS0DSrUWy
tSvULethlYdXaAhsm085haCoFnVaSQ+hHifJCyquyOHLfUE1dkTRjn/XwtE2zDha
iHzC1w9BkBjTTiGGLaCTu0J2rA8Nqq7l5T5dATN2po4HnjbKF2vpRERzpU5vBLfH
FWWQUapbXqvnH/hIA5V9VWgY8RCwcdjFUx9QDxw+YW2+JU9IeFsZD/4yQWg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:17:33 2025 by rpki-client