Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9347621-df8f-473b-b096-dcff6eebae8f.roa
File: d9347621-df8f-473b-b096-dcff6eebae8f.roa (raw, json)
Hash identifier: XmWjm737+64Y+rA7K2DBccu2eG/U2bNA+rsXe7tVFb8=
Subject key identifier: 97:A8:89:49:71:36:FE:CE:95:9C:A9:30:B1:EB:83:41:1F:33:A2:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 706C37EF9A8AB4DE4AC741F26C4A4ACF30B76EDC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9347621-df8f-473b-b096-dcff6eebae8f.roa
Signing time: Sat 18 Oct 2025 04:01:50 +0000
ROA not before: Sat 18 Oct 2025 04:01:50 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:6c:37:ef:9a:8a:b4:de:4a:c7:41:f2:6c:4a:4a:cf:30:b7:6e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:01:50 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4cbc556346fefc39a99d363d9abd9ad309398fb06dd2962de48e0ce777e691f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:4e:e4:85:55:0c:a4:19:e0:4f:9c:8a:37:
0f:4b:0c:a6:0d:6f:34:47:f0:99:e9:ee:6d:41:f8:
3c:47:38:f8:16:55:42:3d:0e:a8:32:16:d6:ca:43:
6c:08:62:c6:7d:4a:05:c4:cc:a8:3d:a8:e0:7e:e2:
33:e2:99:9d:bd:7f:f3:55:30:e1:99:57:90:af:f5:
26:35:10:e1:c1:62:af:bc:2d:2d:89:65:4b:1c:bb:
f0:4f:1e:a3:d1:69:1f:f4:34:d6:82:ca:b5:18:b6:
8a:14:7e:93:64:dc:d0:09:16:8a:4d:8c:a3:41:4a:
e0:fe:66:02:e1:f9:a9:25:a4:2b:82:d2:52:a9:1f:
70:ee:6b:a5:02:9b:6f:37:d3:23:55:2e:e7:15:58:
1d:72:a0:d9:2e:a2:df:ee:95:66:92:86:51:4f:68:
0f:e3:8e:f6:8a:a9:b6:26:9a:9c:59:24:7d:d1:6d:
20:ce:f3:84:10:8b:8c:fc:b3:9d:03:82:a1:13:29:
8f:94:0e:ee:08:e6:30:8d:51:5f:53:9d:c1:74:b4:
66:69:7c:ba:6f:bc:81:1f:c3:21:82:ef:c8:d2:0e:
86:41:9e:8a:94:bd:90:ff:b7:71:e2:e7:84:5f:92:
e1:d7:b0:4d:65:b5:cc:10:d1:58:89:ff:ed:b9:5b:
3b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:89:49:71:36:FE:CE:95:9C:A9:30:B1:EB:83:41:1F:33:A2:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9347621-df8f-473b-b096-dcff6eebae8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a5:03:46:12:33:44:9d:1e:cf:cf:46:bd:8f:54:8f:58:3b:
18:36:7e:d2:8b:1b:0b:d1:de:24:54:9c:a9:8f:e0:ff:b7:aa:
c3:7a:0f:fb:7a:f7:13:41:68:d7:16:bb:02:34:d1:27:5f:32:
c8:98:e6:97:c6:cd:27:3a:d8:2c:b4:5a:21:71:43:bc:1b:2a:
ec:f7:74:29:79:01:75:fc:87:9c:5c:f9:18:15:af:6a:49:d1:
3e:4c:ea:b8:b4:5f:a9:7d:4e:9d:2e:21:5b:31:90:8e:8d:e4:
39:32:5b:66:48:a1:79:57:1c:97:d0:e9:32:a6:83:70:9e:8d:
9e:fd:ab:58:17:63:47:22:29:2f:85:4d:cc:3a:df:e5:2a:1d:
3a:d6:59:fa:e0:b9:67:b4:8a:c6:7a:b1:6a:b3:96:6b:4d:f9:
43:ff:78:af:70:c4:94:1f:e7:15:73:d3:e9:96:90:52:04:45:
e1:23:8a:d9:e5:09:fd:07:bd:9b:33:a4:66:46:2f:40:00:f3:
e6:c1:fd:7d:96:d0:ae:b6:07:bf:3e:b1:bf:7b:bf:5d:33:e6:
81:a6:8c:be:c8:d5:50:7e:cd:7e:81:d9:88:8d:08:e6:a6:61:
92:6e:74:c3:c2:bd:ad:c3:b4:8d:64:25:b5:4a:e7:44:15:d0:
90:37:5d:7c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUcGw375qKtN5Kx0HybEpKzzC3btwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQwMTUwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0Y2JjNTU2MzQ2ZmVmYzM5YTk5ZDM2M2Q5YWJkOWFkMzA5
Mzk4ZmIwNmRkMjk2MmRlNDhlMGNlNzc3ZTY5MWY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCq407khVUMpBngT5yKNw9LDKYNbzRH8Jnp7m1B+DxHOPgW
VUI9DqgyFtbKQ2wIYsZ9SgXEzKg9qOB+4jPimZ29f/NVMOGZV5Cv9SY1EOHBYq+8
LS2JZUscu/BPHqPRaR/0NNaCyrUYtooUfpNk3NAJFopNjKNBSuD+ZgLh+aklpCuC
0lKpH3Dua6UCm2830yNVLucVWB1yoNkuot/ulWaShlFPaA/jjvaKqbYmmpxZJH3R
bSDO84QQi4z8s50DgqETKY+UDu4I5jCNUV9TncF0tGZpfLpvvIEfwyGC78jSDoZB
noqUvZD/t3Hi54RfkuHXsE1ltcwQ0ViJ/+25WztfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl6iJSXE2/s6VnKkwseuDQR8zovQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q5MzQ3NjIxLWRmOGYtNDczYi1iMDk2LWRjZmY2ZWViYWU4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJBCCgwDQYJKoZIhvcNAQELBQADggEBAKKlA0YSM0SdHs/PRr2PVI9YOxg2
ftKLGwvR3iRUnKmP4P+3qsN6D/t69xNBaNcWuwI00SdfMsiY5pfGzSc62Cy0WiFx
Q7wbKuz3dCl5AXX8h5xc+RgVr2pJ0T5M6ri0X6l9Tp0uIVsxkI6N5DkyW2ZIoXlX
HJfQ6TKmg3CejZ79q1gXY0ciKS+FTcw63+UqHTrWWfrguWe0isZ6sWqzlmtN+UP/
eK9wxJQf5xVz0+mWkFIEReEjitnlCf0HvZszpGZGL0AA8+bB/X2W0K62B78+sb97
v10z5oGmjL7I1VB+zX6B2YiNCOamYZJudMPCva3DtI1kJbVK50QV0JA3XXw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:18 2025 by rpki-client