Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/960f621b-dcce-4c73-ba71-ae1cc5980a83.roa
File: 960f621b-dcce-4c73-ba71-ae1cc5980a83.roa (raw, json)
Hash identifier: U+7AfkCwtRxk+J/xm4naztXqiyCu0S954Fh3fvO9Of4=
Subject key identifier: A4:B7:05:D3:2E:CE:C3:E8:76:1B:F9:0F:8E:13:7C:33:AC:F1:47:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5991769898B2D591CE595C255678B30282D2DC69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/960f621b-dcce-4c73-ba71-ae1cc5980a83.roa
Signing time: Tue 14 Oct 2025 17:12:05 +0000
ROA not before: Tue 14 Oct 2025 17:12:05 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:91:76:98:98:b2:d5:91:ce:59:5c:25:56:78:b3:02:82:d2:dc:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:12:05 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=d39e086adc442508adae7c34b151684a5ef3a2e634d1e7aadf61c3d34e616dc5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:70:ea:6f:c8:83:db:e8:83:b3:4c:46:d3:5d:
7b:17:f1:d4:7d:f0:ef:28:f2:83:ee:ba:5e:f1:96:
9b:fb:de:be:6c:ad:65:9f:05:49:d4:8f:b7:6f:ac:
c9:07:eb:bd:59:ad:15:7a:79:a8:c2:05:7a:02:80:
64:75:f6:76:f8:7a:ef:df:d7:e3:92:70:a4:e5:7e:
6f:23:aa:aa:28:67:53:2f:e7:8d:12:97:2c:aa:db:
fc:82:b5:61:70:89:11:d3:5e:b5:11:04:32:8c:22:
37:1e:01:0d:41:c3:98:03:c5:7b:c9:5d:88:dc:b8:
dc:86:69:7c:9d:fa:e4:28:f1:b4:be:1c:f8:bb:4d:
9c:5f:a7:b9:b9:c9:8e:56:b1:b7:00:fb:ad:c0:da:
85:7b:fa:50:8f:8d:96:2b:74:30:bd:4e:01:08:83:
46:b3:f8:a0:e2:e5:33:ce:47:83:78:2b:1e:bf:b4:
19:8e:a7:39:b6:73:3f:7c:fe:ba:a2:99:b8:e0:8b:
2b:38:0c:2a:b8:b0:33:47:69:95:ad:32:11:10:b2:
33:47:a8:a9:32:b5:45:49:6d:8f:1c:bd:0f:45:5e:
73:e4:2b:21:e5:80:95:a9:c8:58:99:a1:a4:a1:1c:
38:e4:a8:fa:f3:dc:3e:a7:cd:4c:51:61:36:d0:aa:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:05:D3:2E:CE:C3:E8:76:1B:F9:0F:8E:13:7C:33:AC:F1:47:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/960f621b-dcce-4c73-ba71-ae1cc5980a83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.57.0/24
Signature Algorithm: sha256WithRSAEncryption
27:cd:94:4e:4d:da:e3:fd:91:8d:6f:a7:97:fd:76:cb:8c:74:
7b:41:e8:9b:52:b2:bf:cc:b1:9f:86:d0:46:bc:e4:6d:d0:20:
ab:be:59:03:f6:37:b6:e4:6e:e3:57:de:82:54:6f:c2:05:ae:
e6:0a:55:c3:a4:49:f0:24:0a:4b:bb:2f:06:be:e7:10:db:70:
e5:fa:2a:e8:d2:80:28:8c:1d:30:6a:67:25:68:9a:88:7e:c4:
04:d9:1a:86:37:22:bc:e6:01:9d:5a:49:38:33:63:ba:63:54:
d5:44:2c:57:7c:34:aa:70:93:89:1d:03:68:e2:1c:0e:cf:ff:
da:d8:ff:cd:55:a4:65:a1:5f:33:aa:dd:18:ce:15:cf:2c:d2:
4c:cf:fa:96:d6:b9:29:bf:79:ba:39:90:6f:2d:98:08:56:73:
b4:0c:fc:50:0c:3e:35:a9:65:02:b1:7e:ec:8e:af:62:39:5d:
03:3b:ec:f9:7b:6f:69:73:5f:e7:58:6b:1f:36:d6:ea:15:a8:
c4:51:68:ca:e3:3d:54:bd:74:af:84:64:05:0e:6e:c8:a9:77:
51:0d:1f:57:41:94:4e:ea:74:ae:70:c1:ee:a8:44:bb:7f:7b:
66:af:b2:a7:fe:79:5c:7a:e4:72:a0:5a:5d:1d:01:54:21:d7:
54:91:b9:4d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWZF2mJiy1ZHOWVwlVnizAoLS3GkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTcxMjA1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMzllMDg2YWRjNDQyNTA4YWRhZTdjMzRiMTUxNjg0YTVl
ZjNhMmU2MzRkMWU3YWFkZjYxYzNkMzRlNjE2ZGM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDucOpvyIPb6IOzTEbTXXsX8dR98O8o8oPuul7xlpv73r5s
rWWfBUnUj7dvrMkH671ZrRV6eajCBXoCgGR19nb4eu/f1+OScKTlfm8jqqooZ1Mv
540Slyyq2/yCtWFwiRHTXrURBDKMIjceAQ1Bw5gDxXvJXYjcuNyGaXyd+uQo8bS+
HPi7TZxfp7m5yY5WsbcA+63A2oV7+lCPjZYrdDC9TgEIg0az+KDi5TPOR4N4Kx6/
tBmOpzm2cz98/rqimbjgiys4DCq4sDNHaZWtMhEQsjNHqKkytUVJbY8cvQ9FXnPk
KyHlgJWpyFiZoaShHDjkqPrz3D6nzUxRYTbQqg7/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUpLcF0y7Ow+h2G/kPjhN8M6zxR9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk2MGY2MjFiLWRjY2UtNGM3My1iYTcxLWFlMWNjNTk4MGE4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGhDkwDQYJKoZIhvcNAQELBQADggEBACfNlE5N2uP9kY1vp5f9dsuMdHtB
6JtSsr/MsZ+G0Ea85G3QIKu+WQP2N7bkbuNX3oJUb8IFruYKVcOkSfAkCku7Lwa+
5xDbcOX6KujSgCiMHTBqZyVomoh+xATZGoY3IrzmAZ1aSTgzY7pjVNVELFd8NKpw
k4kdA2jiHA7P/9rY/81VpGWhXzOq3RjOFc8s0kzP+pbWuSm/ebo5kG8tmAhWc7QM
/FAMPjWpZQKxfuyOr2I5XQM77Pl7b2lzX+dYax821uoVqMRRaMrjPVS9dK+EZAUO
bsipd1ENH1dBlE7qdK5wwe6oRLt/e2avsqf+eVx65HKgWl0dAVQh11SRuU0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:51 2025 by rpki-client