Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8acb668b-4888-4f57-83b4-a4b8876e8d3d.roa
File: 8acb668b-4888-4f57-83b4-a4b8876e8d3d.roa (raw, json)
Hash identifier: WEixRvDHI+0uJ1mQVKibNt458T8Xgu7ukGZykwwEPSg=
Subject key identifier: AD:38:7A:66:E3:59:0A:55:EE:85:E0:87:93:06:B0:54:1F:82:1E:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73B3822A603A8628162AB18A483CBB308EC6642D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8acb668b-4888-4f57-83b4-a4b8876e8d3d.roa
Signing time: Tue 14 Oct 2025 20:22:48 +0000
ROA not before: Tue 14 Oct 2025 20:22:48 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b3:82:2a:60:3a:86:28:16:2a:b1:8a:48:3c:bb:30:8e:c6:64:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 20:22:48 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9212c6e85a9146853bdfc06932b8c1194088d9248a00aa489243dd200c989cbd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:9e:df:d0:76:b2:52:95:d0:f4:23:11:8c:
34:8a:c3:81:94:6a:e4:4d:77:2d:c7:ca:00:fa:8a:
ef:3d:58:4c:60:08:12:fe:c3:87:20:9a:a8:0c:a2:
71:71:da:4e:3b:97:41:ce:43:50:92:bc:b4:dd:1e:
55:4c:cd:db:f2:c8:76:d5:0c:43:20:c7:d7:24:12:
fd:c6:4f:3e:e2:11:21:5e:c4:6f:6e:cb:9a:b9:23:
09:55:4d:49:45:20:14:f9:f5:f5:34:f7:4e:53:3b:
89:6a:03:a5:62:33:c1:3f:88:6f:51:27:0b:82:ce:
b1:c3:41:ad:7c:0f:46:6e:23:ad:3f:e6:11:3e:b1:
47:aa:5f:2d:3f:54:cb:5e:13:f6:37:6e:5b:84:a3:
27:a2:53:7d:83:f4:dc:44:d6:16:c8:59:c0:b1:76:
53:fd:bc:d6:e9:1d:05:85:e7:f1:d1:71:e2:00:27:
a2:56:86:42:1f:ac:61:fe:d0:bf:39:18:33:36:d4:
e5:3b:fd:52:b3:b9:a5:a5:ee:51:41:7f:a4:0e:29:
7d:0a:53:07:ed:b8:1c:0b:a1:0b:09:3b:67:97:55:
13:5b:03:dc:99:ab:c5:00:94:a6:b5:e2:b4:76:d2:
49:d7:d9:1f:d1:9c:30:74:c6:0a:4e:4b:71:b5:e6:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:38:7A:66:E3:59:0A:55:EE:85:E0:87:93:06:B0:54:1F:82:1E:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8acb668b-4888-4f57-83b4-a4b8876e8d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.139.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8a:bb:05:61:6e:60:6b:0c:c6:c9:81:67:38:18:58:cd:f0:
54:66:c2:31:ae:00:81:55:e9:39:a3:c3:f9:8d:ac:92:b1:2b:
ce:5f:75:34:7a:16:ce:8f:50:20:95:ce:22:5b:c9:08:74:63:
e1:d0:59:50:8b:62:aa:cd:03:7b:b9:94:47:5a:0f:e9:53:19:
8f:b8:89:78:bd:e7:a7:e1:72:62:0a:da:a1:c8:4a:95:bb:7a:
65:a2:94:ea:d7:3a:eb:44:ae:4d:b6:bb:a2:d2:f6:12:3d:12:
15:18:b6:9d:1a:36:0d:6c:79:75:c9:7f:60:69:20:36:09:07:
3f:09:23:f2:66:6a:a8:e0:ab:a1:31:d2:e0:72:2f:c4:63:a7:
e2:22:ea:ab:7f:f4:af:52:3b:75:a5:9b:95:7f:f7:79:ef:d7:
cf:86:ad:a9:36:c8:03:31:08:28:0e:dd:d3:7f:04:b1:bd:62:
74:5e:17:38:a7:1e:5b:9d:10:0a:cb:09:05:58:78:0c:58:1e:
4f:51:18:f6:1f:87:f2:28:16:cd:28:e9:71:20:5e:71:19:a1:
78:ff:51:dd:6a:e4:48:1b:bc:36:ff:71:72:64:86:cf:57:32:
5b:0c:f5:22:cd:c9:66:0b:f9:6a:f3:ca:be:48:62:a7:73:8b:
a2:5f:95:a9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUc7OCKmA6higWKrGKSDy7MI7GZC0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjAyMjQ4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjEyYzZlODVhOTE0Njg1M2JkZmMwNjkzMmI4YzExOTQw
ODhkOTI0OGEwMGFhNDg5MjQzZGQyMDBjOTg5Y2JkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDShp7f0HayUpXQ9CMRjDSKw4GUauRNdy3HygD6iu89WExg
CBL+w4cgmqgMonFx2k47l0HOQ1CSvLTdHlVMzdvyyHbVDEMgx9ckEv3GTz7iESFe
xG9uy5q5IwlVTUlFIBT59fU0905TO4lqA6ViM8E/iG9RJwuCzrHDQa18D0ZuI60/
5hE+sUeqXy0/VMteE/Y3bluEoyeiU32D9NxE1hbIWcCxdlP9vNbpHQWF5/HRceIA
J6JWhkIfrGH+0L85GDM21OU7/VKzuaWl7lFBf6QOKX0KUwftuBwLoQsJO2eXVRNb
A9yZq8UAlKa14rR20knX2R/RnDB0xgpOS3G15hsBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrTh6ZuNZClXuheCHkwawVB+CHtswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhY2I2NjhiLTQ4ODgtNGY1Ny04M2I0LWE0Yjg4NzZlOGQzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVIswDQYJKoZIhvcNAQELBQADggEBAGaKuwVhbmBrDMbJgWc4GFjN8FRm
wjGuAIFV6Tmjw/mNrJKxK85fdTR6Fs6PUCCVziJbyQh0Y+HQWVCLYqrNA3u5lEda
D+lTGY+4iXi956fhcmIK2qHISpW7emWilOrXOutErk22u6LS9hI9EhUYtp0aNg1s
eXXJf2BpIDYJBz8JI/Jmaqjgq6Ex0uByL8Rjp+Ii6qt/9K9SO3Wlm5V/93nv18+G
rak2yAMxCCgO3dN/BLG9YnReFzinHludEArLCQVYeAxYHk9RGPYfh/IoFs0o6XEg
XnEZoXj/Ud1q5EgbvDb/cXJkhs9XMlsM9SLNyWYL+Wrzyr5IYqdzi6Jflak=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:04 2025 by rpki-client