Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cae38fe2-98d6-47d4-985b-b3b03afaec67.roa
File: cae38fe2-98d6-47d4-985b-b3b03afaec67.roa (raw, json)
Hash identifier: nWFKsuDw+A6L9J5hR0KJk6Wy0Pi7U3r2tHTLph3siIU=
Subject key identifier: 56:0C:D7:AE:3D:48:3A:4F:84:6A:C7:11:51:63:4F:54:F8:84:8F:6F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 308157F3373C5684142876FC6687848AB86B7530
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cae38fe2-98d6-47d4-985b-b3b03afaec67.roa
Signing time: Tue 14 Oct 2025 22:51:15 +0000
ROA not before: Tue 14 Oct 2025 22:51:15 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:81:57:f3:37:3c:56:84:14:28:76:fc:66:87:84:8a:b8:6b:75:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:51:15 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=fd8e9ac6a7b17dd23d14d4e8b1533a1e1e38eeed6730341af065e938e2833161, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:50:cf:3f:1a:db:75:33:1f:c8:55:bf:67:
5d:0c:f9:64:b1:ca:a0:6b:51:13:98:90:73:c1:e1:
10:ac:cb:5d:d2:72:ac:ca:07:9c:de:41:ac:f0:a3:
99:51:2f:8d:67:71:1d:00:cf:3d:04:6c:75:13:06:
52:9c:ff:86:54:05:b0:72:35:ea:8d:ee:da:e9:8c:
70:ea:bc:5c:98:98:14:ab:3a:fe:04:6b:a7:53:66:
27:01:79:23:30:5d:a8:2b:51:3d:b2:30:cc:6e:01:
10:22:99:e4:df:f3:5a:a6:26:b8:37:a1:5e:41:0d:
49:bc:e4:b1:38:9a:95:19:d5:04:37:96:4b:cf:4f:
0b:68:f0:bb:b2:2e:30:5a:69:dd:e5:37:67:82:ae:
02:dd:35:d4:64:6b:2f:eb:ec:a6:16:31:9a:01:86:
00:36:37:93:3d:91:93:f6:ff:ba:3c:6e:80:e2:0f:
3e:00:de:6c:52:c3:d3:c5:d3:3d:b4:42:b9:3f:aa:
06:1d:83:e9:dc:a1:38:d3:3d:c7:31:e3:98:2f:82:
87:22:81:f9:ed:99:f8:a7:fd:bf:ef:f9:20:84:f9:
49:32:73:37:c6:79:df:98:41:c5:47:7c:57:36:a0:
3c:2d:fb:93:66:52:1e:2a:0f:bf:10:2e:2d:63:0c:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0C:D7:AE:3D:48:3A:4F:84:6A:C7:11:51:63:4F:54:F8:84:8F:6F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cae38fe2-98d6-47d4-985b-b3b03afaec67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.28.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0a:83:8c:bd:d9:7d:94:ae:39:db:67:cc:64:b3:8c:35:7e:
89:a2:7e:5f:ae:2f:4f:0a:eb:9a:a6:7b:37:ce:48:31:e3:fc:
30:9e:a6:72:8a:87:52:95:28:f0:36:46:1c:e2:f9:2b:e8:a6:
53:f1:fa:47:40:45:82:b9:db:f8:ad:41:76:99:42:4c:5a:f9:
c3:27:24:a1:6c:57:3b:04:81:20:e2:c0:74:c9:d3:51:ee:09:
6f:96:6a:ff:55:3f:86:6e:2c:79:de:19:9c:51:67:70:22:be:
9b:64:d8:a6:e4:af:72:a2:c5:ab:44:a6:48:2e:e2:e3:e2:1b:
bf:85:bc:de:12:ad:27:af:1d:db:ce:0f:7e:49:14:83:ca:81:
b8:72:25:f6:84:c4:93:4f:e1:59:5c:5c:b3:f7:1f:ca:c6:6c:
cb:7f:e5:df:2a:2c:7c:6c:ee:c0:00:1a:5f:46:e1:88:52:3c:
a0:8b:b5:e6:1f:42:80:a2:16:61:4f:4e:96:4f:79:08:44:12:
54:b9:04:f6:4c:ed:63:5d:6c:19:b7:16:4c:9d:f0:62:1a:d7:
46:9b:b7:90:3c:c4:44:7d:0f:34:09:71:e9:c3:8d:9d:d6:7e:
50:9d:9a:df:f7:c5:19:89:40:c5:46:49:5d:77:ed:f6:2f:b1:
35:61:02:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMIFX8zc8VoQUKHb8ZoeEirhrdTAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjI1MTE1WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZDhlOWFjNmE3YjE3ZGQyM2QxNGQ0ZThiMTUzM2ExZTFl
MzhlZWVkNjczMDM0MWFmMDY1ZTkzOGUyODMzMTYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDATFDPPxrbdTMfyFW/Z10M+WSxyqBrUROYkHPB4RCsy13S
cqzKB5zeQazwo5lRL41ncR0Azz0EbHUTBlKc/4ZUBbByNeqN7trpjHDqvFyYmBSr
Ov4Ea6dTZicBeSMwXagrUT2yMMxuARAimeTf81qmJrg3oV5BDUm85LE4mpUZ1QQ3
lkvPTwto8LuyLjBaad3lN2eCrgLdNdRkay/r7KYWMZoBhgA2N5M9kZP2/7o8boDi
Dz4A3mxSw9PF0z20Qrk/qgYdg+ncoTjTPccx45gvgocigfntmfin/b/v+SCE+Uky
czfGed+YQcVHfFc2oDwt+5NmUh4qD78QLi1jDKsnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVgzXrj1IOk+EascRUWNPVPiEj28wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NhZTM4ZmUyLTk4ZDYtNDdkNC05ODViLWIzYjAzYWZhZWM2Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVhwwDQYJKoZIhvcNAQELBQADggEBAEUKg4y92X2UrjnbZ8xks4w1fomi
fl+uL08K65qmezfOSDHj/DCepnKKh1KVKPA2Rhzi+SvoplPx+kdARYK52/itQXaZ
Qkxa+cMnJKFsVzsEgSDiwHTJ01HuCW+Wav9VP4ZuLHneGZxRZ3Aivptk2Kbkr3Ki
xatEpkgu4uPiG7+FvN4SrSevHdvOD35JFIPKgbhyJfaExJNP4VlcXLP3H8rGbMt/
5d8qLHxs7sAAGl9G4YhSPKCLteYfQoCiFmFPTpZPeQhEElS5BPZM7WNdbBm3Fkyd
8GIa10abt5A8xER9DzQJcenDjZ3WflCdmt/3xRmJQMVGSV137fYvsTVhAiE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:33 2025 by rpki-client