Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3cea1cb-1569-468b-a42e-9e3ab74850b1.roa
File: a3cea1cb-1569-468b-a42e-9e3ab74850b1.roa (raw, json)
Hash identifier: O4h5XlDI5BD8gR/IFqJr8LMiSM++VfB5II+e35TeUhE=
Subject key identifier: 5F:2E:39:B3:69:AD:45:B3:8A:5C:FB:54:54:59:75:D9:67:D6:A6:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F679C862C8A27BF0F8B04A1448CB78BEB9B6C2F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3cea1cb-1569-468b-a42e-9e3ab74850b1.roa
Signing time: Wed 15 Oct 2025 16:12:47 +0000
ROA not before: Wed 15 Oct 2025 16:12:47 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:67:9c:86:2c:8a:27:bf:0f:8b:04:a1:44:8c:b7:8b:eb:9b:6c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:12:47 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=c7f95a661ae39c517ba0167938153bc9899b949c0e44d32b1fd5fd5fdde4a794, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:ae:63:48:7e:a3:b1:d6:f3:d8:d2:d8:c1:
7b:ea:ef:b3:1b:15:aa:ac:ac:6c:53:18:d8:05:8b:
48:75:a6:10:df:a5:a6:06:4f:07:e1:3f:ba:12:3d:
32:b0:99:60:da:97:90:c8:a2:97:19:03:45:48:c9:
c0:98:8c:90:0b:5e:b2:45:35:21:77:93:0a:0c:01:
61:da:6a:68:2a:b9:89:f7:0e:c6:55:02:69:09:3d:
dd:3a:87:21:ce:4a:27:4f:9e:79:33:15:c1:97:43:
ba:78:a8:22:67:c7:38:3a:8d:01:43:3b:49:82:e1:
e8:a7:1b:9d:67:2e:c8:61:49:11:e5:4a:24:1c:cf:
e2:8c:fd:7f:50:f5:66:7d:b7:db:af:f5:2a:a7:41:
13:4c:89:ec:51:e1:2e:35:e3:91:a9:0d:b0:cb:e3:
63:a7:c4:26:3a:b0:37:96:48:89:3e:33:74:63:8f:
51:fa:e2:e6:51:41:02:99:20:cd:4d:05:2e:f0:31:
2b:08:89:d2:03:d2:9b:8c:a9:14:8a:8b:37:d2:a0:
f2:51:2a:4d:f1:6f:a8:3e:66:af:74:0a:b2:2a:92:
06:3c:7b:0a:6b:34:eb:ba:28:7a:b2:26:7f:cb:1a:
0b:2c:bb:61:a8:cc:fc:a3:a0:69:a2:cf:64:e1:73:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2E:39:B3:69:AD:45:B3:8A:5C:FB:54:54:59:75:D9:67:D6:A6:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3cea1cb-1569-468b-a42e-9e3ab74850b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
af:65:73:a8:de:d5:db:ef:89:d8:03:3b:a6:0e:91:16:68:0b:
2f:12:a1:2b:d5:1f:f1:96:40:fc:9f:61:42:00:30:ac:0e:5b:
27:ca:f9:bf:e5:69:97:95:7d:3a:f8:f7:7c:77:84:38:01:31:
8c:c1:80:36:a4:b3:95:9b:00:0c:8d:17:2c:33:91:fd:35:3e:
9d:e5:f8:d9:7d:46:ea:50:d3:97:ac:ff:97:8a:01:20:0f:15:
ff:2e:46:f7:99:f5:8e:ec:56:5e:46:21:19:0a:00:c5:7b:db:
38:1d:90:52:e6:6f:74:a1:27:ac:91:a1:a4:5c:94:be:66:9e:
a7:56:5f:61:89:60:8a:be:67:eb:fd:9d:74:3b:2f:69:e6:d2:
89:80:c2:23:4d:39:cf:e4:86:1f:4f:2c:d8:aa:0e:58:98:c8:
e4:1c:1c:ca:b2:17:ec:8f:71:26:da:a8:2b:e0:b2:d1:cd:21:
73:3f:c0:af:75:df:1b:83:3b:7e:95:19:4c:ea:7d:45:3d:32:
78:bf:ce:aa:39:f5:d4:21:ee:d4:99:6d:94:77:42:4f:ed:51:
b1:bc:82:c7:44:76:5f:f8:22:0b:e1:0f:73:be:40:a9:9d:6c:
c3:0a:33:23:d8:5e:c4:64:30:35:27:ec:e5:7b:41:32:68:58:
15:2c:50:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUb2echiyKJ78PiwShRIy3i+ubbC8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTYxMjQ3WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjN2Y5NWE2NjFhZTM5YzUxN2JhMDE2NzkzODE1M2JjOTg5
OWI5NDljMGU0NGQzMmIxZmQ1ZmQ1ZmRkZTRhNzk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCipK5jSH6jsdbz2NLYwXvq77MbFaqsrGxTGNgFi0h1phDf
paYGTwfhP7oSPTKwmWDal5DIopcZA0VIycCYjJALXrJFNSF3kwoMAWHaamgquYn3
DsZVAmkJPd06hyHOSidPnnkzFcGXQ7p4qCJnxzg6jQFDO0mC4einG51nLshhSRHl
SiQcz+KM/X9Q9WZ9t9uv9SqnQRNMiexR4S4145GpDbDL42OnxCY6sDeWSIk+M3Rj
j1H64uZRQQKZIM1NBS7wMSsIidID0puMqRSKizfSoPJRKk3xb6g+Zq90CrIqkgY8
ewprNOu6KHqyJn/LGgssu2GozPyjoGmiz2Thc6ffAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXy45s2mtRbOKXPtUVFl12WfWpuQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzY2VhMWNiLTE1NjktNDY4Yi1hNDJlLTllM2FiNzQ4NTBiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVmEwDQYJKoZIhvcNAQELBQADggEBAK9lc6je1dvvidgDO6YOkRZoCy8S
oSvVH/GWQPyfYUIAMKwOWyfK+b/laZeVfTr493x3hDgBMYzBgDaks5WbAAyNFywz
kf01Pp3l+Nl9RupQ05es/5eKASAPFf8uRveZ9Y7sVl5GIRkKAMV72zgdkFLmb3Sh
J6yRoaRclL5mnqdWX2GJYIq+Z+v9nXQ7L2nm0omAwiNNOc/khh9PLNiqDliYyOQc
HMqyF+yPcSbaqCvgstHNIXM/wK913xuDO36VGUzqfUU9Mni/zqo59dQh7tSZbZR3
Qk/tUbG8gsdEdl/4IgvhD3O+QKmdbMMKMyPYXsRkMDUn7OV7QTJoWBUsUD4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:38 2025 by rpki-client