Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
File: bc98b8a4-19f3-4303-9456-ca95391c61c5.roa (raw, json)
Hash identifier: 69nohMCFEbpivpzvnVaKyTAUbSHc4d+WXiPFmdomuSg=
Subject key identifier: 88:BE:A5:C0:6D:00:27:7E:B6:99:2C:D6:E0:27:1E:2A:33:5E:AD:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6682F32EEDA52B388E4F75BC240C99889ADB063E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
Signing time: Sat 18 Oct 2025 03:10:05 +0000
ROA not before: Sat 18 Oct 2025 03:10:05 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 23.22.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:82:f3:2e:ed:a5:2b:38:8e:4f:75:bc:24:0c:99:88:9a:db:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:10:05 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=5dd9d85b71389209f80bae89805944a0ff4ca5eb13887aaf12a171d74a004ec6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:13:d0:8d:e2:dc:31:33:cf:7e:61:ea:50:
d6:ff:4a:d9:a2:26:06:15:b4:06:f5:57:f5:61:72:
5d:65:a3:f9:63:62:6f:05:db:5c:19:ed:52:fb:ae:
8e:0f:d6:8c:52:77:1d:6a:2f:67:c6:85:d3:12:5c:
62:9b:b9:de:9f:9d:8a:5a:0a:bc:2e:3f:00:10:21:
92:f8:81:ec:5a:b9:2a:f7:e8:90:c5:d0:cb:cd:af:
e6:f5:6e:fd:06:55:d8:5a:5a:79:b5:5c:f5:f1:ac:
8f:48:36:48:3e:79:ad:5d:ad:e4:f5:8a:fb:a2:ae:
ea:1e:aa:0f:94:77:3e:d2:0d:a8:3d:9f:a5:4b:be:
96:ad:40:ad:68:b2:9b:34:c7:58:4e:39:60:ba:12:
df:18:23:92:05:33:6c:7f:1c:89:fc:ad:e1:d8:cc:
9c:8a:8d:ab:37:e8:71:7b:3a:6a:93:3e:3f:ec:61:
e8:41:f7:42:aa:13:af:f4:7a:57:db:22:4b:42:09:
a3:24:a8:8c:a5:a7:f6:5c:8f:ef:2f:1f:4e:6e:0c:
62:24:0d:45:d3:37:e6:bf:2d:ff:c6:e6:fa:36:91:
91:9c:aa:da:86:85:48:d1:42:26:15:eb:95:c8:e0:
25:7b:4e:30:e5:e1:6a:a7:23:bd:30:6b:ad:88:5d:
b0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BE:A5:C0:6D:00:27:7E:B6:99:2C:D6:E0:27:1E:2A:33:5E:AD:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bc98b8a4-19f3-4303-9456-ca95391c61c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:7b:91:f5:93:cf:f2:99:d3:67:ef:5d:af:fb:b0:c4:a2:64:
8c:38:ee:a2:78:87:e8:f9:94:53:80:17:02:31:20:d2:af:71:
68:56:30:26:12:c3:e4:8f:30:5f:4b:50:90:e0:df:33:cd:6d:
06:18:4f:cd:1f:3a:97:c8:7e:47:d9:b1:d7:70:9e:df:d1:d1:
cd:9f:aa:d8:b8:61:3b:d2:dd:ae:82:8d:72:0c:9a:72:3c:7f:
96:e2:96:0e:4a:29:48:aa:8c:f8:20:3d:a4:c7:19:cb:9b:c4:
04:e7:50:64:59:c5:3a:28:d6:54:b8:17:4a:96:0d:6a:e5:5f:
3f:98:ca:e1:65:00:28:6d:6a:d7:8b:a2:69:69:f3:8a:d3:45:
08:49:c7:03:9c:29:e3:0b:71:bb:b1:b0:2f:33:01:7a:20:3d:
7f:13:38:ee:ad:8c:a8:7b:5a:9f:0b:1a:96:d0:11:4c:47:1f:
c4:3c:80:a6:11:ba:2a:d5:c8:13:d4:dd:66:9f:e0:5c:3a:b0:
0e:e1:7c:1d:6f:ea:47:40:c7:44:73:cc:f8:7f:b5:cb:38:be:
44:65:56:4e:0f:75:63:e0:ed:17:8b:5e:ce:5b:af:2b:af:4e:
b2:47:9a:60:17:ee:8f:ab:03:62:b2:16:5f:db:ef:6f:44:ce:
e5:12:08:8d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZoLzLu2lKziOT3W8JAyZiJrbBj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMxMDA1WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZGQ5ZDg1YjcxMzg5MjA5ZjgwYmFlODk4MDU5NDRhMGZm
NGNhNWViMTM4ODdhYWYxMmExNzFkNzRhMDA0ZWM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCK2BPQjeLcMTPPfmHqUNb/StmiJgYVtAb1V/Vhcl1lo/lj
Ym8F21wZ7VL7ro4P1oxSdx1qL2fGhdMSXGKbud6fnYpaCrwuPwAQIZL4gexauSr3
6JDF0MvNr+b1bv0GVdhaWnm1XPXxrI9INkg+ea1dreT1ivuiruoeqg+Udz7SDag9
n6VLvpatQK1osps0x1hOOWC6Et8YI5IFM2x/HIn8reHYzJyKjas36HF7OmqTPj/s
YehB90KqE6/0elfbIktCCaMkqIylp/Zcj+8vH05uDGIkDUXTN+a/Lf/G5vo2kZGc
qtqGhUjRQiYV65XI4CV7TjDl4WqnI70wa62IXbAlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiL6lwG0AJ362mSzW4CceKjNerWgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JjOThiOGE0LTE5ZjMtNDMwMy05NDU2LWNhOTUzOTFjNjFjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYXFgAwDQYJKoZIhvcNAQELBQADggEBALZ7kfWTz/KZ02fvXa/7sMSiZIw4
7qJ4h+j5lFOAFwIxINKvcWhWMCYSw+SPMF9LUJDg3zPNbQYYT80fOpfIfkfZsddw
nt/R0c2fqti4YTvS3a6CjXIMmnI8f5bilg5KKUiqjPggPaTHGcubxATnUGRZxToo
1lS4F0qWDWrlXz+YyuFlAChtateLomlp84rTRQhJxwOcKeMLcbuxsC8zAXogPX8T
OO6tjKh7Wp8LGpbQEUxHH8Q8gKYRuirVyBPU3Waf4Fw6sA7hfB1v6kdAx0RzzPh/
tcs4vkRlVk4PdWPg7ReLXs5bryuvTrJHmmAX7o+rA2KyFl/b729EzuUSCI0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:56 2025 by rpki-client