Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd43b333-e42f-4da9-bccf-6159022cc641.roa
File: dd43b333-e42f-4da9-bccf-6159022cc641.roa (raw, json)
Hash identifier: u/j3y/Z1kY6j6AeyHpyuj/not+qqp5A8ZRU2ETh5TTY=
Subject key identifier: 9C:1B:5D:7E:8D:98:BE:1E:D3:B1:73:F0:8B:82:28:04:02:5F:A8:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C994F9BBBE946D5FB8E115C83E61D5C5D53FA9A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd43b333-e42f-4da9-bccf-6159022cc641.roa
Signing time: Tue 14 Oct 2025 16:22:48 +0000
ROA not before: Tue 14 Oct 2025 16:22:48 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:99:4f:9b:bb:e9:46:d5:fb:8e:11:5c:83:e6:1d:5c:5d:53:fa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 16:22:48 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=248351f2253a432d2f0e4167e70ee271b31e4a89c948da3a269bac801f9f64b8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:60:1b:e6:97:5d:e7:d7:5d:a9:10:b2:8c:50:
d8:e5:00:e5:da:0d:75:e2:b0:ac:dc:5e:1a:54:b8:
ea:5c:45:b3:04:10:9e:b6:bc:f3:37:4d:4b:3c:39:
db:a2:aa:fe:d0:c7:90:f4:77:fa:e5:d2:b0:20:11:
40:f5:3f:f9:f5:2b:b0:a9:c8:f4:4c:85:60:a4:fa:
cc:8a:15:7f:49:64:88:ad:98:f7:5c:cc:3a:58:6c:
7f:ad:f2:cf:8e:eb:88:ee:6f:d0:49:99:f5:40:e5:
d4:7c:38:d6:6d:b1:3b:74:7e:78:35:10:34:13:8c:
5c:8a:b4:24:1f:0d:79:e6:5a:70:e7:02:9c:49:6b:
cb:e0:28:a5:45:fe:e8:f8:07:45:cd:2b:e6:f3:68:
04:2d:92:1e:89:3d:24:11:6f:e9:92:e6:83:4d:f1:
a7:0d:34:26:e5:64:21:1c:8a:99:a7:af:27:cf:f2:
23:55:1b:3c:93:b4:b4:69:c8:47:38:0f:91:6d:7b:
25:2e:22:d8:58:3b:06:7c:67:56:0a:1d:15:81:10:
2f:d8:70:c2:d6:ee:f7:1f:57:a5:fc:a3:0b:ed:9f:
b4:d4:98:7e:9f:af:29:22:2e:55:91:57:42:d5:c1:
1d:cb:b1:53:8c:ad:80:f3:c9:61:5e:e7:28:79:0a:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1B:5D:7E:8D:98:BE:1E:D3:B1:73:F0:8B:82:28:04:02:5F:A8:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dd43b333-e42f-4da9-bccf-6159022cc641.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.139.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c7:58:bc:38:07:e1:2a:22:8c:8c:6e:f8:cf:10:7c:f9:33:
4a:66:53:08:81:99:29:5e:c1:ed:a1:30:20:35:ba:9e:67:ce:
0b:f5:fd:69:67:51:1c:c4:74:4e:92:4e:f9:60:c0:0a:bd:18:
b0:30:e0:5d:da:93:a1:9b:22:34:d7:5d:26:7f:b2:b7:4d:67:
0f:57:a3:5b:fb:97:17:ed:e0:9c:f8:d9:b1:30:f4:29:94:1a:
a8:7c:91:b4:05:c7:b9:5c:74:cc:2b:70:d0:b2:7e:09:90:d0:
d8:61:b4:cd:b0:bb:4a:98:c6:fa:f6:6c:c8:6b:db:f7:25:4f:
e7:9f:42:20:34:8f:1d:96:a6:b5:e4:57:cf:b5:f9:4d:e5:ef:
8a:33:ed:b0:94:55:28:27:de:16:b6:a9:dd:54:6c:61:45:cc:
35:f1:ce:c9:ba:db:60:2d:c0:ca:51:54:86:31:25:7d:cf:db:
9c:70:db:e3:37:3c:08:e0:fd:17:c6:6a:78:79:57:e6:d1:90:
6d:77:09:f3:47:94:34:75:f6:12:c7:29:91:ee:fb:86:d9:78:
81:2a:fb:a8:67:56:99:bf:b3:ed:8e:b8:c0:16:03:8f:45:3e:
05:f0:02:33:78:56:42:6d:a9:a2:2c:30:e4:66:2e:af:f2:9f:
a2:22:e2:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDJlPm7vpRtX7jhFcg+YdXF1T+powDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTYyMjQ4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNDgzNTFmMjI1M2E0MzJkMmYwZTQxNjdlNzBlZTI3MWIz
MWU0YTg5Yzk0OGRhM2EyNjliYWM4MDFmOWY2NGI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDjYBvml13n112pELKMUNjlAOXaDXXisKzcXhpUuOpcRbME
EJ62vPM3TUs8Oduiqv7Qx5D0d/rl0rAgEUD1P/n1K7CpyPRMhWCk+syKFX9JZIit
mPdczDpYbH+t8s+O64jub9BJmfVA5dR8ONZtsTt0fng1EDQTjFyKtCQfDXnmWnDn
ApxJa8vgKKVF/uj4B0XNK+bzaAQtkh6JPSQRb+mS5oNN8acNNCblZCEcipmnryfP
8iNVGzyTtLRpyEc4D5FteyUuIthYOwZ8Z1YKHRWBEC/YcMLW7vcfV6X8owvtn7TU
mH6frykiLlWRV0LVwR3LsVOMrYDzyWFe5yh5CoNZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnBtdfo2Yvh7TsXPwi4IoBAJfqB0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RkNDNiMzMzLWU0MmYtNGRhOS1iY2NmLTYxNTkwMjJjYzY0MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/IswDQYJKoZIhvcNAQELBQADggEBACDHWLw4B+EqIoyMbvjPEHz5M0pm
UwiBmSlewe2hMCA1up5nzgv1/WlnURzEdE6STvlgwAq9GLAw4F3ak6GbIjTXXSZ/
srdNZw9Xo1v7lxft4Jz42bEw9CmUGqh8kbQFx7lcdMwrcNCyfgmQ0NhhtM2wu0qY
xvr2bMhr2/clT+efQiA0jx2WprXkV8+1+U3l74oz7bCUVSgn3ha2qd1UbGFFzDXx
zsm622AtwMpRVIYxJX3P25xw2+M3PAjg/RfGanh5V+bRkG13CfNHlDR19hLHKZHu
+4bZeIEq+6hnVpm/s+2OuMAWA49FPgXwAjN4VkJtqaIsMORmLq/yn6Ii4mM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:54 2025 by rpki-client