Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca7da64e-9cbe-4096-a2fd-b010bb7827a6.roa
File: ca7da64e-9cbe-4096-a2fd-b010bb7827a6.roa (raw, json)
Hash identifier: fxUwkljP91UP0DpkpmrH/hay1DK3/JM0dEMSZJWaS0Y=
Subject key identifier: 64:65:C2:D2:C7:90:54:D1:83:47:8A:FF:B8:74:4D:DC:9C:50:CF:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F6FC26C0F239A5201274077B16CE270E6F9D2F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca7da64e-9cbe-4096-a2fd-b010bb7827a6.roa
Signing time: Tue 14 Oct 2025 17:39:11 +0000
ROA not before: Tue 14 Oct 2025 17:39:11 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:6f:c2:6c:0f:23:9a:52:01:27:40:77:b1:6c:e2:70:e6:f9:d2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:39:11 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=bf088e9f7bb740fafc0ef3e54413a9b6b01c9f8c02325aa8db0b18d04a9fe6bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:f6:f2:d9:34:f9:6e:0c:fa:a6:2a:21:cd:
4d:6e:df:00:5a:8e:82:cc:2e:b4:e0:ac:7b:e4:88:
7b:74:1c:08:2f:7f:db:6e:c3:08:e7:a9:17:0b:e8:
e2:d1:48:c2:d6:68:46:7c:af:26:cd:e1:ac:ce:18:
5f:65:35:ae:40:b6:1b:09:62:4a:c8:74:86:2d:8a:
fd:6b:6c:1b:2d:15:5f:75:83:5a:f9:bb:39:32:df:
08:e0:81:c7:46:ee:f7:21:51:3b:97:ea:1e:27:4c:
5a:cd:d2:c2:b0:7c:af:ad:27:57:b4:76:0b:14:55:
bf:9c:f4:fa:34:39:7b:2d:97:8f:e0:d9:93:b0:88:
52:d2:92:39:3e:b8:4c:4e:ce:3a:2f:f9:e7:75:7a:
c2:2d:b4:40:71:c3:81:5b:38:e5:0b:68:69:fa:9f:
49:81:de:81:53:66:4d:2c:c9:0e:70:cf:60:24:26:
05:c9:ae:86:37:98:22:0e:0a:64:c3:1f:5d:c3:45:
65:96:2a:d7:0f:b0:34:da:5d:4c:80:df:27:b4:f8:
9f:b4:f8:e2:61:a5:6c:8a:19:27:aa:e8:da:75:74:
2d:56:7a:dd:e2:f6:b5:27:ed:76:13:86:e2:e8:47:
d1:b2:4f:a4:d2:78:46:82:ca:e3:4c:cd:fc:dd:10:
57:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:C2:D2:C7:90:54:D1:83:47:8A:FF:B8:74:4D:DC:9C:50:CF:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ca7da64e-9cbe-4096-a2fd-b010bb7827a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.31.0/24
Signature Algorithm: sha256WithRSAEncryption
60:de:f2:a8:0f:d2:65:53:6d:c6:66:10:ab:3f:b3:10:7f:e3:
9a:4b:0b:50:9e:2a:42:1f:bc:19:a6:d6:50:86:93:c5:8c:01:
04:fe:62:27:c0:35:6d:17:68:d6:f9:21:7c:a3:a6:13:0d:1e:
13:f3:b4:21:7f:cf:51:51:f5:46:ef:fe:76:1a:dc:34:20:2f:
f9:fd:90:6b:d6:02:4b:a6:20:cf:2a:b5:2c:90:e5:1a:cb:43:
f0:89:7f:e4:e2:55:1a:3a:d8:7b:3e:bc:0a:1f:2d:83:af:04:
e6:61:36:6c:28:6d:64:f9:1a:5d:ce:fe:b6:2c:e0:f5:b6:ea:
52:22:b2:96:48:6f:ee:c6:df:53:a6:04:69:ab:de:b0:62:d3:
01:e1:e7:fc:6e:00:5f:a7:a4:29:38:eb:b1:38:ea:20:b7:6e:
65:b3:0d:6e:45:de:07:98:aa:8b:be:e1:da:9d:a9:cf:39:94:
d2:a7:51:a9:04:5c:5b:5f:9d:c8:3f:d0:f8:a1:48:a8:34:12:
1e:cf:6d:77:b2:a7:66:4a:c6:b7:f1:b7:97:5d:95:2d:4e:f8:
ed:63:6a:6c:4e:ae:c8:b9:1b:f5:6a:2f:26:1a:0b:42:c8:94:
76:76:8d:fe:af:76:ed:d3:54:96:8d:88:a1:f4:8f:40:bd:a4:
51:a4:99:e4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL2/CbA8jmlIBJ0B3sWzicOb50vcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTczOTExWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiZjA4OGU5ZjdiYjc0MGZhZmMwZWYzZTU0NDEzYTliNmIw
MWM5ZjhjMDIzMjVhYThkYjBiMThkMDRhOWZlNmJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1Lfby2TT5bgz6piohzU1u3wBajoLMLrTgrHvkiHt0HAgv
f9tuwwjnqRcL6OLRSMLWaEZ8rybN4azOGF9lNa5AthsJYkrIdIYtiv1rbBstFV91
g1r5uzky3wjggcdG7vchUTuX6h4nTFrN0sKwfK+tJ1e0dgsUVb+c9Po0OXstl4/g
2ZOwiFLSkjk+uExOzjov+ed1esIttEBxw4FbOOULaGn6n0mB3oFTZk0syQ5wz2Ak
JgXJroY3mCIOCmTDH13DRWWWKtcPsDTaXUyA3ye0+J+0+OJhpWyKGSeq6Np1dC1W
et3i9rUn7XYThuLoR9GyT6TSeEaCyuNMzfzdEFcxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZGXC0seQVNGDR4r/uHRN3JxQz2swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NhN2RhNjRlLTljYmUtNDA5Ni1hMmZkLWIwMTBiYjc4MjdhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGhB8wDQYJKoZIhvcNAQELBQADggEBAGDe8qgP0mVTbcZmEKs/sxB/45pL
C1CeKkIfvBmm1lCGk8WMAQT+YifANW0XaNb5IXyjphMNHhPztCF/z1FR9Ubv/nYa
3DQgL/n9kGvWAkumIM8qtSyQ5RrLQ/CJf+TiVRo62Hs+vAofLYOvBOZhNmwobWT5
Gl3O/rYs4PW26lIispZIb+7G31OmBGmr3rBi0wHh5/xuAF+npCk467E46iC3bmWz
DW5F3geYqou+4dqdqc85lNKnUakEXFtfncg/0PihSKg0Eh7PbXeyp2ZKxrfxt5dd
lS1O+O1jamxOrsi5G/VqLyYaC0LIlHZ2jf6vdu3TVJaNiKH0j0C9pFGkmeQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:42 2025 by rpki-client