Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b810b8a4-6c3a-4b54-8bd4-db7f8853766c.roa
File: b810b8a4-6c3a-4b54-8bd4-db7f8853766c.roa (raw, json)
Hash identifier: GWF3D4+lVTWlVEFf0/746nc9Mxqt1kvjZ8EZM0ScESM=
Subject key identifier: 69:14:96:72:7D:72:4B:9A:61:DA:78:44:F0:34:C2:67:FC:85:23:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 37EAD0B79AECC3B6FB28F98F9024A93EE3B5E39C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b810b8a4-6c3a-4b54-8bd4-db7f8853766c.roa
Signing time: Sat 18 Oct 2025 04:30:15 +0000
ROA not before: Sat 18 Oct 2025 04:30:15 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.214.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ea:d0:b7:9a:ec:c3:b6:fb:28:f9:8f:90:24:a9:3e:e3:b5:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:30:15 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4ddd935b08580fe40477a57fb3fe3800709926142841178a811cf80a4922bcb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:a0:69:bc:ce:bd:72:42:8a:4a:93:2c:2f:
62:f2:73:d7:0e:99:b7:63:91:71:b8:ba:aa:1a:60:
83:88:76:99:3e:39:5d:f5:23:90:6e:1e:7b:93:a6:
05:4e:b8:4e:5c:3b:94:5b:f5:be:85:81:48:2d:10:
ff:9f:e0:ea:1d:17:53:5d:f5:8b:3d:ae:b4:f3:bf:
38:86:8c:bc:26:4b:79:bd:fe:b3:6a:23:53:1a:8f:
fe:14:34:27:0f:46:46:e5:65:92:c3:99:03:34:d7:
c1:b3:dc:76:9a:ec:15:bf:17:e3:dc:c2:fc:74:39:
11:f9:0b:bc:0f:87:ca:c8:54:a1:90:fd:73:41:69:
33:b4:50:9a:3b:35:9f:82:d0:7f:ce:83:53:6e:68:
2b:7f:a7:d1:0f:b2:2b:58:92:e6:63:2b:cd:df:60:
de:03:e2:13:00:0b:dd:43:16:9a:f4:4e:21:f1:a2:
ef:c8:23:b2:77:b9:b1:26:5d:fe:2a:e6:ef:91:d6:
f6:db:ea:7a:cd:ad:f5:6d:ad:da:0d:4a:82:d0:5f:
71:34:a7:62:65:5c:76:66:ec:85:91:70:9f:0b:5e:
a5:99:12:1f:99:62:dd:71:8b:77:16:e5:96:0b:2f:
b2:56:db:9a:0b:8f:a7:86:aa:57:58:90:62:15:e2:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:14:96:72:7D:72:4B:9A:61:DA:78:44:F0:34:C2:67:FC:85:23:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b810b8a4-6c3a-4b54-8bd4-db7f8853766c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.214.0/23
Signature Algorithm: sha256WithRSAEncryption
01:6c:8d:3d:c3:ca:0e:06:18:ab:c9:a9:1c:73:f6:07:a9:da:
4f:8c:55:13:83:37:a1:7e:30:04:d1:1f:32:ce:50:37:e5:f8:
c9:4a:5a:25:78:e9:ca:0c:7c:58:e3:92:02:25:68:c7:fb:c7:
fa:e5:49:d5:12:3c:f9:ec:dd:a8:ca:f9:cd:79:00:4e:94:e5:
82:86:f6:41:0c:46:42:36:2b:a2:d4:ea:b9:6b:b4:1c:01:92:
95:fb:06:00:aa:3b:7f:3c:3c:04:f4:19:6f:69:b4:0a:a4:9b:
b2:b7:9a:7f:b6:7a:a5:59:24:16:94:09:41:1c:8d:65:c2:1d:
21:3a:cb:75:cb:80:fd:b8:e7:56:94:bf:e2:84:be:f3:00:38:
c4:e5:de:ca:13:ee:7a:91:f9:79:db:01:5a:32:f5:d5:ac:73:
21:3d:09:bc:88:ac:69:d1:fb:24:d1:f7:0b:38:fe:24:2a:8a:
ce:12:3f:56:7e:e8:2c:40:de:77:25:00:ca:7b:6f:46:27:76:
a1:eb:58:8c:7b:34:93:5f:0d:a8:c8:21:db:79:b8:17:c5:9b:
ed:ee:60:36:95:0d:2d:bb:b0:8e:40:c0:f4:3a:7b:f8:d3:88:
71:fa:84:53:41:de:38:3d:5e:73:cb:6e:8d:21:9b:f8:f8:98:
96:29:d9:be
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUN+rQt5rsw7b7KPmPkCSpPuO145wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQzMDE1WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZGRkOTM1YjA4NTgwZmU0MDQ3N2E1N2ZiM2ZlMzgwMDcw
OTkyNjE0Mjg0MTE3OGE4MTFjZjgwYTQ5MjJiY2I4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6OqBpvM69ckKKSpMsL2Lyc9cOmbdjkXG4uqoaYIOIdpk+
OV31I5BuHnuTpgVOuE5cO5Rb9b6FgUgtEP+f4OodF1Nd9Ys9rrTzvziGjLwmS3m9
/rNqI1Maj/4UNCcPRkblZZLDmQM018Gz3Haa7BW/F+Pcwvx0ORH5C7wPh8rIVKGQ
/XNBaTO0UJo7NZ+C0H/Og1NuaCt/p9EPsitYkuZjK83fYN4D4hMAC91DFpr0TiHx
ou/II7J3ubEmXf4q5u+R1vbb6nrNrfVtrdoNSoLQX3E0p2JlXHZm7IWRcJ8LXqWZ
Eh+ZYt1xi3cW5ZYLL7JW25oLj6eGqldYkGIV4p/LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaRSWcn1yS5ph2nhE8DTCZ/yFI2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4MTBiOGE0LTZjM2EtNGI1NC04YmQ0LWRiN2Y4ODUzNzY2Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCNYwDQYJKoZIhvcNAQELBQADggEBAAFsjT3Dyg4GGKvJqRxz9gep2k+M
VRODN6F+MATRHzLOUDfl+MlKWiV46coMfFjjkgIlaMf7x/rlSdUSPPns3ajK+c15
AE6U5YKG9kEMRkI2K6LU6rlrtBwBkpX7BgCqO388PAT0GW9ptAqkm7K3mn+2eqVZ
JBaUCUEcjWXCHSE6y3XLgP2451aUv+KEvvMAOMTl3soT7nqR+XnbAVoy9dWscyE9
CbyIrGnR+yTR9ws4/iQqis4SP1Z+6CxA3nclAMp7b0YndqHrWIx7NJNfDajIIdt5
uBfFm+3uYDaVDS27sI5AwPQ6e/jTiHH6hFNB3jg9XnPLbo0hm/j4mJYp2b4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:48 2025 by rpki-client