Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa
File: b8b00ce6-94f4-49aa-9139-7d3156871f35.roa (raw, json)
Hash identifier: pshLlVo1Agrv72+ipeOrlZLLkNtKicADIBkYCgRPbAE=
Subject key identifier: AF:C5:AD:73:04:58:E6:E4:30:96:CE:C6:1E:D0:85:2D:CC:C7:3F:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C69547C081FAB75F79016723C67451E8D22C868
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa
Signing time: Sat 18 Oct 2025 01:10:08 +0000
ROA not before: Sat 18 Oct 2025 01:10:08 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.25.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:69:54:7c:08:1f:ab:75:f7:90:16:72:3c:67:45:1e:8d:22:c8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 01:10:08 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=a14fbb76eead069bf0a4eafb6fb7c220cb5c08b8080c5e76107855b2731f40e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:af:64:20:04:b0:d6:74:ce:c9:d8:33:0b:
35:89:2f:cb:e0:12:d8:8f:86:9a:33:22:99:a4:c6:
8f:a1:80:a1:f5:59:a6:a6:b7:02:6c:78:01:81:3f:
37:28:60:c9:b8:fa:9a:ad:f1:6a:5d:45:ea:8e:38:
49:90:5a:ea:7c:97:d4:b4:f1:3d:f2:79:8b:53:5a:
98:4e:ca:b7:7c:cf:55:c5:ee:2b:21:3c:51:aa:7e:
83:99:e5:0a:b9:ed:f7:ea:d8:eb:39:aa:7a:fc:b2:
b9:30:ff:6f:8a:e3:12:5b:2c:27:a4:f3:65:f4:27:
3b:9e:a3:74:89:5f:f1:77:73:f1:7e:83:d5:2e:58:
14:a6:30:04:13:a1:70:bd:58:a6:12:b8:b8:1b:fa:
0c:4f:b6:51:72:f1:df:06:98:65:42:5a:25:ec:a8:
67:a8:7f:0c:ec:3c:5e:02:88:c0:14:21:92:5f:f3:
25:dd:8b:31:3a:51:71:49:f5:8c:9b:c3:39:9f:3b:
12:df:55:e0:c4:50:40:d4:82:3f:01:8c:4f:c2:94:
e8:dc:c7:85:e1:bd:7d:5d:5e:e8:96:c2:05:38:ed:
eb:de:c0:45:5d:a6:63:6b:ac:5f:f1:f3:f7:4a:d4:
61:ce:07:c5:2b:cf:33:a9:56:4f:b4:4e:9c:34:78:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C5:AD:73:04:58:E6:E4:30:96:CE:C6:1E:D0:85:2D:CC:C7:3F:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b00ce6-94f4-49aa-9139-7d3156871f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.15.0/24
Signature Algorithm: sha256WithRSAEncryption
36:0c:c6:71:22:5e:ca:fa:76:67:40:f9:ce:62:55:a7:b9:a9:
ae:40:5f:08:60:a0:af:cf:c9:83:8a:2b:69:9e:57:9b:2d:6e:
12:08:34:a7:0f:a1:0e:f5:f1:bf:4a:f4:11:4c:07:61:a5:11:
c7:42:c3:99:eb:22:02:66:66:a1:a6:54:65:c3:81:84:fb:cf:
7f:14:ba:88:7d:67:6c:72:26:87:e5:e9:23:22:bf:c3:7d:ac:
a7:c4:6c:f5:c0:8a:08:27:2f:95:8c:25:43:5f:2f:d9:0f:06:
f8:47:15:a9:24:d3:1e:69:9e:76:2f:59:19:75:25:cf:13:3e:
de:7b:b6:e0:e3:3b:b6:3f:2d:bd:04:49:b4:d1:c1:75:8c:f1:
44:8f:85:5f:ef:1a:99:d4:54:27:52:e6:06:1d:12:a8:fd:34:
45:fd:e3:6a:d4:e4:6c:43:45:92:99:b8:62:ec:61:17:74:7e:
6c:d0:a5:74:41:32:8d:36:a3:89:cc:83:af:88:c9:47:47:31:
b8:96:cf:9e:69:4c:5b:ff:01:58:3f:ad:33:5f:49:c0:21:86:
ab:0e:c3:a1:0f:90:3c:11:23:2d:d7:34:51:73:d4:d5:dc:c5:
a9:b8:3a:dd:66:df:b3:cb:4e:eb:d1:28:9a:56:42:4a:7b:3f:
0a:b8:ed:88
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXGlUfAgfq3X3kBZyPGdFHo0iyGgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDExMDA4WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMTRmYmI3NmVlYWQwNjliZjBhNGVhZmI2ZmI3YzIyMGNi
NWMwOGI4MDgwYzVlNzYxMDc4NTViMjczMWY0MGU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+069kIASw1nTOydgzCzWJL8vgEtiPhpozIpmkxo+hgKH1
WaamtwJseAGBPzcoYMm4+pqt8WpdReqOOEmQWup8l9S08T3yeYtTWphOyrd8z1XF
7ishPFGqfoOZ5Qq57ffq2Os5qnr8srkw/2+K4xJbLCek82X0Jzueo3SJX/F3c/F+
g9UuWBSmMAQToXC9WKYSuLgb+gxPtlFy8d8GmGVCWiXsqGeofwzsPF4CiMAUIZJf
8yXdizE6UXFJ9YybwzmfOxLfVeDEUEDUgj8BjE/ClOjcx4XhvX1dXuiWwgU47eve
wEVdpmNrrF/x8/dK1GHOB8UrzzOpVk+0Tpw0eBptAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUr8WtcwRY5uQwls7GHtCFLczHP34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4YjAwY2U2LTk0ZjQtNDlhYS05MTM5LTdkMzE1Njg3MWYzNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA2GQ8wDQYJKoZIhvcNAQELBQADggEBADYMxnEiXsr6dmdA+c5iVae5qa5A
XwhgoK/PyYOKK2meV5stbhIINKcPoQ718b9K9BFMB2GlEcdCw5nrIgJmZqGmVGXD
gYT7z38Uuoh9Z2xyJofl6SMiv8N9rKfEbPXAiggnL5WMJUNfL9kPBvhHFakk0x5p
nnYvWRl1Jc8TPt57tuDjO7Y/Lb0ESbTRwXWM8USPhV/vGpnUVCdS5gYdEqj9NEX9
42rU5GxDRZKZuGLsYRd0fmzQpXRBMo02o4nMg6+IyUdHMbiWz55pTFv/AVg/rTNf
ScAhhqsOw6EPkDwRIy3XNFFz1NXcxam4Ot1m37PLTuvRKJpWQkp7Pwq47Yg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:10:29 2025 by rpki-client