Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
File: 7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa (raw, json)
Hash identifier: XOSAIjTGRdT1GHF4vSfOfu1ePtlSmA/TDBf0kTFDeFM=
Subject key identifier: 5F:75:2D:51:39:CC:65:74:ED:A1:33:59:D1:48:A5:07:7F:E3:B5:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 191E3A3D2100E7C7DACD81D63F2E619CADC6811A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
Signing time: Fri 03 Oct 2025 00:52:59 +0000
ROA not before: Fri 03 Oct 2025 00:52:59 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 99.77.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1e:3a:3d:21:00:e7:c7:da:cd:81:d6:3f:2e:61:9c:ad:c6:81:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:52:59 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=b1d91db097cecb0e899ce3d376883ced04a29886cb071e1568634beaa6b5c4bb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:5c:d8:db:10:8b:5c:87:b5:8a:a1:89:ab:
1d:28:2a:95:0e:22:3c:b6:59:dd:8c:a6:8e:97:de:
cd:f4:ae:ae:7a:cd:1d:ee:b4:b1:13:29:76:8e:fc:
3d:da:c4:e4:d0:af:23:ca:65:b7:17:d4:9b:a3:53:
1d:cb:a1:6f:a3:ce:45:4a:69:cd:81:d6:6d:39:51:
e1:e1:7f:3a:9a:1b:1d:0b:b0:ad:20:5c:86:c8:dc:
d9:32:43:d0:08:46:28:1d:b2:5a:ed:34:e0:8b:e8:
6d:7e:b3:5b:3a:bf:d9:ab:b7:4b:4b:c7:fa:4c:06:
7c:b4:e1:ec:a1:cb:7e:96:1a:60:ba:e0:4e:53:68:
7a:35:48:4a:58:0b:57:ac:63:52:da:b3:66:6e:64:
1f:a8:4b:6f:19:1c:37:d1:f1:3d:9d:b0:62:b2:b0:
e1:f7:8f:d9:45:e1:b9:a4:66:19:6d:70:8f:11:ec:
fe:07:c0:d8:ae:70:e5:24:a2:6d:96:6e:ee:e7:55:
8e:60:55:d6:fc:e4:7b:ab:08:f6:08:4e:49:18:68:
cd:3c:8f:a0:9e:c2:35:cf:82:ac:d7:a9:40:34:01:
36:33:bd:74:6a:49:3f:40:83:67:1f:82:fa:9a:6c:
38:ce:53:88:1c:b8:16:7d:cb:00:54:cf:00:65:67:
60:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:75:2D:51:39:CC:65:74:ED:A1:33:59:D1:48:A5:07:7F:E3:B5:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7fd2bd53-38ec-4a62-80d5-78aaa40d7895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.128.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c2:3a:df:4c:2c:57:f9:b8:c5:e0:22:4c:ce:83:69:20:5b:
75:5a:7e:c3:d3:6e:cd:6a:93:b7:f2:7e:71:69:25:0a:97:08:
0c:31:8e:5e:81:68:17:a8:8d:8a:86:0f:1a:e1:2c:63:70:eb:
30:75:23:49:08:af:f7:94:17:c9:ba:7b:eb:3d:13:56:cb:86:
36:d7:de:f0:be:0d:92:74:bb:2f:26:56:c6:f5:33:36:b1:27:
9a:30:d7:fe:9d:db:76:75:29:7a:d4:a5:f5:31:e1:01:59:21:
28:31:72:42:ce:9b:fe:5b:42:7b:1a:ac:0a:5a:af:bd:27:1f:
4a:32:4d:c7:21:26:71:f9:94:95:b3:dd:37:00:58:0c:f7:0c:
8f:fe:91:70:f8:b0:d4:e4:45:40:43:8c:5a:df:27:32:c4:81:
ec:9b:2e:7a:6d:d0:59:de:5f:05:45:45:e3:ea:72:95:40:b1:
c9:6b:94:2a:eb:bb:3d:30:ea:26:0f:1d:2b:30:3e:64:47:36:
a9:a6:ed:b4:5a:ff:26:ba:a3:2b:10:79:60:5a:79:ca:fd:37:
3d:d9:f6:85:02:9a:8a:e2:99:60:53:2e:d5:5b:56:d2:b1:d3:
47:df:52:0e:ba:b8:c3:d3:a8:9d:b8:ce:c4:4f:9a:82:fc:79:
f7:ba:8d:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGR46PSEA58fazYHWPy5hnK3GgRowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA1MjU5WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMWQ5MWRiMDk3Y2VjYjBlODk5Y2UzZDM3Njg4M2NlZDA0
YTI5ODg2Y2IwNzFlMTU2ODYzNGJlYWE2YjVjNGJiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnyVzY2xCLXIe1iqGJqx0oKpUOIjy2Wd2Mpo6X3s30rq56
zR3utLETKXaO/D3axOTQryPKZbcX1JujUx3LoW+jzkVKac2B1m05UeHhfzqaGx0L
sK0gXIbI3NkyQ9AIRigdslrtNOCL6G1+s1s6v9mrt0tLx/pMBny04eyhy36WGmC6
4E5TaHo1SEpYC1esY1Las2ZuZB+oS28ZHDfR8T2dsGKysOH3j9lF4bmkZhltcI8R
7P4HwNiucOUkom2Wbu7nVY5gVdb85HurCPYITkkYaM08j6CewjXPgqzXqUA0ATYz
vXRqST9Ag2cfgvqabDjOU4gcuBZ9ywBUzwBlZ2BdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUX3UtUTnMZXTtoTNZ0UilB3/jtVMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmZDJiZDUzLTM4ZWMtNGE2Mi04MGQ1LTc4YWFhNDBkNzg5NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYAwDQYJKoZIhvcNAQELBQADggEBACPCOt9MLFf5uMXgIkzOg2kgW3Va
fsPTbs1qk7fyfnFpJQqXCAwxjl6BaBeojYqGDxrhLGNw6zB1I0kIr/eUF8m6e+s9
E1bLhjbX3vC+DZJ0uy8mVsb1MzaxJ5ow1/6d23Z1KXrUpfUx4QFZISgxckLOm/5b
QnsarApar70nH0oyTcchJnH5lJWz3TcAWAz3DI/+kXD4sNTkRUBDjFrfJzLEgeyb
Lnpt0FneXwVFRePqcpVAsclrlCrruz0w6iYPHSswPmRHNqmm7bRa/ya6oysQeWBa
ecr9Nz3Z9oUCmorimWBTLtVbVtKx00ffUg66uMPTqJ24zsRPmoL8efe6jes=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:29:03 2025 by rpki-client