Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab7f91a5-e06f-4597-9518-7eb97daccdca.roa
File: ab7f91a5-e06f-4597-9518-7eb97daccdca.roa (raw, json)
Hash identifier: bel5ks2StmnqzZDscclbY2F5Wpm+qW3k4i/4cgO0+UM=
Subject key identifier: C6:4F:43:EF:8F:B6:A1:6C:13:0D:17:41:E8:A1:93:0B:23:F5:E7:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4087B8932ED0BDF7ED0479D94E1481B478EDA82D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab7f91a5-e06f-4597-9518-7eb97daccdca.roa
Signing time: Wed 15 Oct 2025 16:01:08 +0000
ROA not before: Wed 15 Oct 2025 16:01:08 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:87:b8:93:2e:d0:bd:f7:ed:04:79:d9:4e:14:81:b4:78:ed:a8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 16:01:08 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=92da1adc526dce1efa5d99b266a2e1efd69d409b0e40a8d55e92bcdf3cd0e493, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0c:5a:c1:fe:f2:c3:ae:9e:8e:3f:c0:45:6c:
a8:eb:7b:80:30:f4:54:c6:42:81:e6:9e:be:ab:a9:
36:e4:bd:82:05:7a:cf:e2:3e:1d:eb:35:89:8c:25:
96:7e:d0:95:7e:45:b2:aa:e3:50:34:80:87:ae:bb:
5d:47:63:60:7c:3b:50:30:2a:57:09:05:0f:db:9a:
e8:06:3c:8d:70:8b:af:76:4c:90:24:f0:dd:b3:90:
bf:4b:b6:9c:15:01:38:7b:b2:69:53:09:48:8e:c5:
15:21:15:3d:cd:b5:74:80:e1:d2:88:36:32:d1:8d:
11:df:19:2c:5f:86:92:5e:95:90:91:ff:c5:cf:2a:
81:89:06:1b:f1:ac:c3:8c:db:17:04:bb:cf:73:3c:
e0:1f:ca:a9:54:80:fd:37:5d:3e:7a:27:42:63:ae:
41:2e:d9:cc:5e:b5:c3:73:2c:2d:3c:ae:a4:11:c6:
4f:c5:2e:80:26:06:4d:e0:b8:84:df:24:f0:fc:60:
81:e8:dd:5e:30:9f:94:87:d2:e5:b0:90:64:af:07:
2d:5e:d1:9c:b6:34:95:df:d3:20:f3:84:fc:13:d9:
5d:ea:86:b8:c3:0b:18:30:e6:4e:77:f7:8f:e0:0c:
a1:42:e3:59:bf:fd:42:49:77:c0:d4:01:a6:b1:08:
82:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:43:EF:8F:B6:A1:6C:13:0D:17:41:E8:A1:93:0B:23:F5:E7:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab7f91a5-e06f-4597-9518-7eb97daccdca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:61:10:df:43:9c:f2:18:58:53:4d:0f:ab:14:ba:a0:78:14:
c6:b8:16:1e:75:96:cc:d4:64:a2:21:e8:c8:21:75:93:fe:72:
54:d9:d9:da:66:2d:81:3d:40:5b:9d:83:ed:01:3b:bf:99:e5:
e1:fb:d8:86:4c:9b:41:8c:6e:5e:72:4e:e9:53:a7:1a:39:10:
a1:71:53:98:39:bf:91:71:22:ae:69:83:2a:55:39:1e:c6:0c:
c3:c5:c3:79:ec:4c:47:20:24:39:a0:41:9c:84:23:c2:8b:e5:
69:e1:ab:bf:93:72:11:29:10:9f:27:b7:11:d9:1e:ee:53:e4:
1f:34:5c:bf:5a:ca:67:0e:4e:90:38:b5:03:7a:40:98:51:d8:
e4:05:c6:9b:af:6d:0d:23:e9:01:bd:b8:35:9d:12:ca:96:89:
dc:94:ac:81:35:b3:2d:12:25:ca:f8:10:e7:64:bd:8e:bf:1a:
da:ba:c6:e7:bf:46:a1:0a:55:88:33:32:2b:85:dd:43:da:85:
02:71:cf:a4:ee:43:14:63:22:cd:2a:ee:b0:e5:94:99:d7:b3:
1e:51:c4:10:a1:3a:cc:cc:90:14:94:44:18:8d:00:29:1c:a2:
22:b2:36:71:24:38:b7:47:7b:6d:c1:a4:57:cc:d0:f7:20:be:
22:4e:ff:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQIe4ky7QvfftBHnZThSBtHjtqC0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTYwMTA4WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MmRhMWFkYzUyNmRjZTFlZmE1ZDk5YjI2NmEyZTFlZmQ2
OWQ0MDliMGU0MGE4ZDU1ZTkyYmNkZjNjZDBlNDkzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMDFrB/vLDrp6OP8BFbKjre4Aw9FTGQoHmnr6rqTbkvYIF
es/iPh3rNYmMJZZ+0JV+RbKq41A0gIeuu11HY2B8O1AwKlcJBQ/bmugGPI1wi692
TJAk8N2zkL9LtpwVATh7smlTCUiOxRUhFT3NtXSA4dKINjLRjRHfGSxfhpJelZCR
/8XPKoGJBhvxrMOM2xcEu89zPOAfyqlUgP03XT56J0JjrkEu2cxetcNzLC08rqQR
xk/FLoAmBk3guITfJPD8YIHo3V4wn5SH0uWwkGSvBy1e0Zy2NJXf0yDzhPwT2V3q
hrjDCxgw5k5394/gDKFC41m//UJJd8DUAaaxCILBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxk9D74+2oWwTDRdB6KGTCyP155wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiN2Y5MWE1LWUwNmYtNDU5Ny05NTE4LTdlYjk3ZGFjY2RjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVnQwDQYJKoZIhvcNAQELBQADggEBAF5hEN9DnPIYWFNND6sUuqB4FMa4
Fh51lszUZKIh6MghdZP+clTZ2dpmLYE9QFudg+0BO7+Z5eH72IZMm0GMbl5yTulT
pxo5EKFxU5g5v5FxIq5pgypVOR7GDMPFw3nsTEcgJDmgQZyEI8KL5Wnhq7+TchEp
EJ8ntxHZHu5T5B80XL9aymcOTpA4tQN6QJhR2OQFxpuvbQ0j6QG9uDWdEsqWidyU
rIE1sy0SJcr4EOdkvY6/Gtq6xue/RqEKVYgzMiuF3UPahQJxz6TuQxRjIs0q7rDl
lJnXsx5RxBChOszMkBSURBiNACkcoiKyNnEkOLdHe23BpFfM0PcgviJO/0Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:20 2025 by rpki-client