Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9abfc60e-b24a-4fff-b30f-c937cdde80c4.roa
File: 9abfc60e-b24a-4fff-b30f-c937cdde80c4.roa (raw, json)
Hash identifier: F8bhafyUp2d+o6d1JqVmNEWUIB1sngfz9Rzt8NKj6xI=
Subject key identifier: AD:D4:BF:48:18:7E:A6:FA:09:CD:CA:3C:22:2A:12:3C:F8:7B:47:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A5B8FCB13F196B478D62C4B3256DB4B79EBDB35
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9abfc60e-b24a-4fff-b30f-c937cdde80c4.roa
Signing time: Tue 14 Oct 2025 18:22:00 +0000
ROA not before: Tue 14 Oct 2025 18:22:00 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5b:8f:cb:13:f1:96:b4:78:d6:2c:4b:32:56:db:4b:79:eb:db:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:22:00 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=50e9de867f85201930ee31b97060511e545f3cfc2a7d45080a854699d2b8740b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:a4:9d:9e:51:75:30:c6:83:5f:ae:2a:4c:
3b:98:bd:ca:9f:74:57:d5:f3:03:36:c5:a6:41:bd:
f0:21:68:48:f8:a1:d8:ae:73:fa:6f:95:1c:ec:8c:
fd:b2:b0:f9:86:0f:b4:68:95:47:a9:e6:9a:06:f3:
3c:72:22:f0:7d:17:9a:7f:8a:ec:72:6a:c0:8c:0d:
50:dd:bf:3e:27:06:b5:7d:dc:fa:b5:ac:66:56:00:
f2:50:f0:a1:b4:ac:f8:4c:fb:48:99:94:b2:6c:7e:
dd:ec:7a:48:92:45:c6:c8:58:4d:52:f9:b1:a5:f0:
1d:c1:1b:2f:4b:7c:54:0a:c9:c0:a5:a1:0b:7a:f2:
47:2f:cf:5b:2b:aa:bb:d0:c0:b8:a3:60:3c:58:a0:
73:5a:14:f0:50:1b:dd:45:cd:28:ed:49:81:65:ed:
cf:ec:67:de:87:45:3c:1d:0c:05:43:fe:bf:bb:01:
31:9d:cd:55:da:71:83:d1:d6:55:f8:26:13:ca:0a:
c5:f1:ff:52:94:2e:fc:2f:9c:79:41:3e:7b:e3:b1:
c2:51:be:78:be:d1:53:50:37:82:b6:4c:ba:2b:33:
15:39:03:cf:fe:da:13:ec:67:10:b4:3b:32:0d:ba:
44:0a:07:f1:c7:fd:d5:de:b3:d7:f4:28:ed:5a:12:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:BF:48:18:7E:A6:FA:09:CD:CA:3C:22:2A:12:3C:F8:7B:47:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9abfc60e-b24a-4fff-b30f-c937cdde80c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.40.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0a:e9:ed:a4:0a:7b:37:73:91:3e:e7:3b:ce:87:25:3d:94:
b5:18:9c:3d:01:f2:59:85:82:7e:d9:9c:d4:08:a0:8d:0f:7c:
65:20:39:69:b7:85:81:6d:31:2d:0a:8b:01:3d:ae:fa:d4:01:
db:88:f3:1f:2d:b0:ce:c6:d3:f4:c0:72:a6:20:ce:76:a0:3f:
6c:9c:3e:4e:9f:be:0e:25:96:55:76:f5:f2:c3:9d:53:09:a2:
a5:4a:6d:13:15:3c:2c:a3:80:99:6d:7c:47:57:f6:b7:ef:ac:
4f:e9:c1:0a:13:95:bd:8e:ff:13:ef:b3:da:3f:29:51:53:ea:
da:44:1b:72:e1:9f:c9:a8:f5:86:b9:21:03:a5:70:18:0d:a9:
cf:72:b0:4e:e2:2b:18:a5:43:0b:ee:42:e9:2f:c8:55:fb:5d:
96:ef:c0:68:71:02:b9:6f:21:ac:65:3c:27:9a:b9:23:28:e0:
3f:87:c4:c5:6e:b5:d7:8d:92:f4:b4:d6:06:33:fd:8c:cd:69:
05:b0:99:02:cb:b6:64:44:62:b3:bc:83:a7:a6:af:3f:19:e4:
61:65:a4:04:8c:8a:7b:ad:a4:a8:8c:2d:cc:bf:60:e4:ad:4e:
86:e2:92:03:8c:91:f5:ae:91:46:96:29:ee:3a:a1:bb:2f:e8:
5d:23:82:12
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGluPyxPxlrR41ixLMlbbS3nr2zUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTgyMjAwWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGU5ZGU4NjdmODUyMDE5MzBlZTMxYjk3MDYwNTExZTU0
NWYzY2ZjMmE3ZDQ1MDgwYTg1NDY5OWQyYjg3NDBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+AqSdnlF1MMaDX64qTDuYvcqfdFfV8wM2xaZBvfAhaEj4
odiuc/pvlRzsjP2ysPmGD7RolUep5poG8zxyIvB9F5p/iuxyasCMDVDdvz4nBrV9
3Pq1rGZWAPJQ8KG0rPhM+0iZlLJsft3sekiSRcbIWE1S+bGl8B3BGy9LfFQKycCl
oQt68kcvz1srqrvQwLijYDxYoHNaFPBQG91FzSjtSYFl7c/sZ96HRTwdDAVD/r+7
ATGdzVXacYPR1lX4JhPKCsXx/1KULvwvnHlBPnvjscJRvni+0VNQN4K2TLorMxU5
A8/+2hPsZxC0OzINukQKB/HH/dXes9f0KO1aEsZfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrdS/SBh+pvoJzco8IioSPPh7R08wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlhYmZjNjBlLWIyNGEtNGZmZi1iMzBmLWM5MzdjZGRlODBjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVCgwDQYJKoZIhvcNAQELBQADggEBAHAK6e2kCns3c5E+5zvOhyU9lLUY
nD0B8lmFgn7ZnNQIoI0PfGUgOWm3hYFtMS0KiwE9rvrUAduI8x8tsM7G0/TAcqYg
znagP2ycPk6fvg4lllV29fLDnVMJoqVKbRMVPCyjgJltfEdX9rfvrE/pwQoTlb2O
/xPvs9o/KVFT6tpEG3Lhn8mo9Ya5IQOlcBgNqc9ysE7iKxilQwvuQukvyFX7XZbv
wGhxArlvIaxlPCeauSMo4D+HxMVutdeNkvS01gYz/YzNaQWwmQLLtmREYrO8g6em
rz8Z5GFlpASMinutpKiMLcy/YOStTobikgOMkfWukUaWKe46obsv6F0jghI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:39 2025 by rpki-client