Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9930fc56-ea79-486d-a22f-265fb0453c85.roa
File: 9930fc56-ea79-486d-a22f-265fb0453c85.roa (raw, json)
Hash identifier: Di6TEcXNvlAgW9/H6s6lbhPFeDxdAcJNNjM9LmeqghQ=
Subject key identifier: 3A:FA:30:3C:F7:19:47:73:19:AE:7D:D4:D9:3B:EE:9B:83:16:DF:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75EFF47AEF7119CAFC3308B10B3E596BBE7385E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9930fc56-ea79-486d-a22f-265fb0453c85.roa
Signing time: Sat 18 Oct 2025 00:51:43 +0000
ROA not before: Sat 18 Oct 2025 00:51:43 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ef:f4:7a:ef:71:19:ca:fc:33:08:b1:0b:3e:59:6b:be:73:85:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:51:43 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=49fdd290ab937022a5d249469fd760db19b40b39b752141744131ffd253efc4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:89:95:1a:16:21:a5:70:1a:40:f1:92:ea:
a7:ab:bb:6d:ad:5d:c5:b4:16:3c:06:6f:3b:a4:71:
bb:9d:ef:aa:b8:21:13:af:0d:63:f9:7f:2d:b6:9f:
ba:5b:03:77:60:1f:f9:37:43:25:97:51:9e:e4:56:
54:5d:00:e3:c1:b7:46:f9:dd:1f:3a:7f:00:0e:ea:
98:aa:3b:a3:8a:e1:9c:d3:12:42:b5:27:87:d9:cf:
99:a9:3d:55:db:37:43:e9:d9:66:bb:89:bc:ce:cd:
36:df:d7:ef:87:b3:4e:74:33:69:34:f1:f3:3e:b8:
b8:ce:3b:d1:ce:c3:43:c5:fd:6c:9b:89:0f:a2:df:
c3:28:22:72:f1:eb:5e:a2:63:85:43:16:46:f8:9e:
9b:25:2d:f2:a1:d2:6a:5b:dc:4d:03:ac:be:8e:f1:
d4:77:85:78:62:b3:c4:ad:03:55:18:98:ea:86:9f:
ce:31:db:9f:d4:3b:05:7e:7d:3e:54:99:29:d4:5c:
e5:3c:42:89:17:98:df:82:5f:6c:93:3c:f9:1c:bc:
df:97:8d:87:f6:0f:5b:53:26:b2:69:c2:d3:52:1a:
48:df:a0:a8:5e:df:f1:d0:53:63:a5:93:ae:f3:94:
e5:b6:01:77:fa:19:c7:e4:b9:d4:b2:62:b8:3b:d7:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FA:30:3C:F7:19:47:73:19:AE:7D:D4:D9:3B:EE:9B:83:16:DF:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9930fc56-ea79-486d-a22f-265fb0453c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.140.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:29:08:ad:eb:b8:0e:06:8c:25:b5:3f:d0:30:9e:46:d5:d8:
10:a3:f9:7a:45:ab:bf:3c:92:a2:70:bf:a3:c7:af:5d:b0:5f:
ab:e7:2a:55:16:da:b4:4c:99:c0:3e:ed:42:6e:59:01:a4:15:
68:dd:5c:63:39:9f:3e:9a:4c:65:21:e1:1a:f9:d2:6e:a1:3b:
eb:e1:de:89:cb:06:0f:30:a1:39:c7:ec:45:f7:5a:51:a4:04:
89:e8:13:2b:c1:0f:5a:8c:7c:a7:2a:7a:26:58:1b:a2:e2:4c:
22:8e:05:b3:3b:33:de:31:03:15:4f:d2:7c:56:4e:ee:c4:12:
b2:fe:52:82:1e:b7:6c:31:d9:fe:69:bc:2f:e3:7b:a8:01:fe:
e9:ba:49:03:03:2d:4f:31:8b:c5:1e:28:44:c1:1f:db:a7:df:
2b:13:cc:0b:9b:ed:4c:09:54:3a:41:13:6d:c1:d7:b4:4d:e3:
16:e4:ea:85:c3:18:7d:81:32:df:43:be:f7:67:e6:07:03:c0:
43:ec:85:11:8a:80:f3:cd:c0:a3:fb:69:18:0d:23:9b:52:96:
94:8d:ec:bc:75:d6:91:b3:98:35:3e:44:ef:5f:14:18:1e:58:
fd:ee:30:85:40:aa:65:1e:8d:4b:16:3a:e1:c4:05:67:1b:15:
05:88:56:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUde/0eu9xGcr8MwixCz5Za75zheYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDA1MTQzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0OWZkZDI5MGFiOTM3MDIyYTVkMjQ5NDY5ZmQ3NjBkYjE5
YjQwYjM5Yjc1MjE0MTc0NDEzMWZmZDI1M2VmYzRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC76omVGhYhpXAaQPGS6qeru22tXcW0FjwGbzukcbud76q4
IROvDWP5fy22n7pbA3dgH/k3QyWXUZ7kVlRdAOPBt0b53R86fwAO6piqO6OK4ZzT
EkK1J4fZz5mpPVXbN0Pp2Wa7ibzOzTbf1++Hs050M2k08fM+uLjOO9HOw0PF/Wyb
iQ+i38MoInLx616iY4VDFkb4npslLfKh0mpb3E0DrL6O8dR3hXhis8StA1UYmOqG
n84x25/UOwV+fT5UmSnUXOU8QokXmN+CX2yTPPkcvN+XjYf2D1tTJrJpwtNSGkjf
oKhe3/HQU2Olk67zlOW2AXf6GcfkudSyYrg71yEDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOvowPPcZR3MZrn3U2Tvum4MW37QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk5MzBmYzU2LWVhNzktNDg2ZC1hMjJmLTI2NWZiMDQ1M2M4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCYwwDQYJKoZIhvcNAQELBQADggEBALYpCK3ruA4GjCW1P9AwnkbV2BCj
+XpFq788kqJwv6PHr12wX6vnKlUW2rRMmcA+7UJuWQGkFWjdXGM5nz6aTGUh4Rr5
0m6hO+vh3onLBg8woTnH7EX3WlGkBInoEyvBD1qMfKcqeiZYG6LiTCKOBbM7M94x
AxVP0nxWTu7EErL+UoIet2wx2f5pvC/je6gB/um6SQMDLU8xi8UeKETBH9un3ysT
zAub7UwJVDpBE23B17RN4xbk6oXDGH2BMt9Dvvdn5gcDwEPshRGKgPPNwKP7aRgN
I5tSlpSN7Lx11pGzmDU+RO9fFBgeWP3uMIVAqmUejUsWOuHEBWcbFQWIVvI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:33 2025 by rpki-client