Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de017776-66c8-40cc-8d3e-04fdeea9f0f2.roa
File: de017776-66c8-40cc-8d3e-04fdeea9f0f2.roa (raw, json)
Hash identifier: 7LQGqQtRbizNpNIEqRpgWk1rRD+rvgK6stD8SOzSq9M=
Subject key identifier: BE:03:94:DE:F3:48:6B:AE:00:65:DB:FA:2E:C7:9B:C8:D6:24:E0:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A63C2BB0EB4A3DD4BB56FD43FE61C6C8A527474
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de017776-66c8-40cc-8d3e-04fdeea9f0f2.roa
Signing time: Sat 18 Oct 2025 04:30:20 +0000
ROA not before: Sat 18 Oct 2025 04:30:20 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:63:c2:bb:0e:b4:a3:dd:4b:b5:6f:d4:3f:e6:1c:6c:8a:52:74:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:30:20 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=277c2fc6d38345ab1891ffd873544e710d3adf8f2a122534d988302468f5ad38, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:3a:ac:9a:b7:53:13:52:1c:6a:bc:0d:0a:
a3:e3:ef:08:f5:4e:17:fb:18:4d:8c:5b:6d:d5:86:
23:b4:b6:f4:0f:7c:3d:fc:a3:f4:54:f3:3a:cf:f8:
3c:6e:31:97:05:db:f7:61:52:b3:48:c3:3f:84:72:
da:b4:b9:6e:39:f4:61:35:e0:e2:07:ea:4b:bb:eb:
3a:15:12:fe:b7:7d:de:0a:78:01:0a:1d:33:19:e0:
a8:78:5f:b3:dd:e1:0c:cd:66:2d:35:77:ec:28:29:
3d:ce:69:fa:74:26:10:7c:01:26:da:32:c1:99:9c:
0a:16:a7:b4:9d:86:26:b0:90:5e:76:29:51:32:27:
f0:aa:b7:b8:3f:ab:96:29:48:3f:c5:86:34:75:cc:
cc:25:d4:41:01:ff:8c:0d:4f:f1:aa:6d:4a:59:f0:
1a:8b:15:0a:53:43:e5:45:91:2c:b5:c4:fe:09:a2:
20:8e:6c:25:b8:c9:5b:b7:16:7b:98:ec:ca:fd:90:
e8:d4:ad:74:16:d4:71:60:64:c5:9b:49:59:93:f1:
a2:8e:07:c4:d1:fa:9f:e4:de:fa:bb:e5:b7:49:8d:
ce:69:12:d9:00:cf:98:5d:66:a6:e9:d8:c4:2e:9a:
1b:0d:57:36:12:f3:80:3f:43:f1:e5:8b:62:aa:b9:
1f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:94:DE:F3:48:6B:AE:00:65:DB:FA:2E:C7:9B:C8:D6:24:E0:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de017776-66c8-40cc-8d3e-04fdeea9f0f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.91.0/24
Signature Algorithm: sha256WithRSAEncryption
94:13:19:43:80:60:aa:12:dc:32:ef:2e:ad:0f:17:08:eb:c1:
aa:62:be:64:57:cb:92:3b:18:ab:b0:3f:31:96:97:bf:e6:6b:
bd:90:f7:c8:2e:18:0d:e7:df:fe:35:08:72:5b:23:31:f4:4c:
5a:5c:04:02:0f:6b:3b:6c:12:47:bd:9a:1e:1a:47:b8:e0:16:
90:06:4a:b1:ff:72:20:52:89:58:ce:ae:46:1d:24:6e:da:ac:
6e:17:26:e9:78:5d:b7:fa:23:6d:03:c1:06:4e:e6:41:db:2a:
80:29:25:7d:1f:75:26:28:18:22:4e:b1:6b:3b:df:89:2c:ee:
14:03:16:99:6a:68:2d:07:e1:c6:39:8d:79:44:c4:de:92:36:
fa:04:5e:df:7a:8e:d9:7c:90:37:dd:f1:df:15:6e:69:68:9f:
bf:46:4a:08:42:0d:dc:ac:43:61:6d:91:b7:0f:58:fd:17:c3:
38:df:db:3f:84:67:69:b4:26:90:95:b5:52:dc:ca:64:a1:2c:
0d:fc:8e:37:fb:3f:b4:85:5f:f8:6f:c1:fd:2f:16:20:b6:6a:
79:eb:87:e1:ab:3f:46:53:9a:e6:79:45:41:6a:51:1f:58:45:
78:e6:98:d4:d5:16:58:22:45:f8:f3:57:f3:35:11:18:b0:cc:
18:30:d9:ce
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSmPCuw60o91LtW/UP+YcbIpSdHQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQzMDIwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzdjMmZjNmQzODM0NWFiMTg5MWZmZDg3MzU0NGU3MTBk
M2FkZjhmMmExMjI1MzRkOTg4MzAyNDY4ZjVhZDM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZ3jqsmrdTE1IcarwNCqPj7wj1Thf7GE2MW23VhiO0tvQP
fD38o/RU8zrP+DxuMZcF2/dhUrNIwz+Ectq0uW459GE14OIH6ku76zoVEv63fd4K
eAEKHTMZ4Kh4X7Pd4QzNZi01d+woKT3Oafp0JhB8ASbaMsGZnAoWp7SdhiawkF52
KVEyJ/Cqt7g/q5YpSD/FhjR1zMwl1EEB/4wNT/GqbUpZ8BqLFQpTQ+VFkSy1xP4J
oiCObCW4yVu3FnuY7Mr9kOjUrXQW1HFgZMWbSVmT8aKOB8TR+p/k3vq75bdJjc5p
EtkAz5hdZqbp2MQumhsNVzYS84A/Q/Hli2KquR8XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvgOU3vNIa64AZdv6LsebyNYk4OMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RlMDE3Nzc2LTY2YzgtNDBjYy04ZDNlLTA0ZmRlZWE5ZjBmMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCVswDQYJKoZIhvcNAQELBQADggEBAJQTGUOAYKoS3DLvLq0PFwjrwapi
vmRXy5I7GKuwPzGWl7/ma72Q98guGA3n3/41CHJbIzH0TFpcBAIPaztsEke9mh4a
R7jgFpAGSrH/ciBSiVjOrkYdJG7arG4XJul4Xbf6I20DwQZO5kHbKoApJX0fdSYo
GCJOsWs734ks7hQDFplqaC0H4cY5jXlExN6SNvoEXt96jtl8kDfd8d8Vbmlon79G
SghCDdysQ2FtkbcPWP0Xwzjf2z+EZ2m0JpCVtVLcymShLA38jjf7P7SFX/hvwf0v
FiC2annrh+GrP0ZTmuZ5RUFqUR9YRXjmmNTVFlgiRfjzV/M1ERiwzBgw2c4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:02 2025 by rpki-client