Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e431a9a7-137a-4c7b-97eb-9bf37c0150c3.roa
File: e431a9a7-137a-4c7b-97eb-9bf37c0150c3.roa (raw, json)
Hash identifier: /EpHwDeZElLnCCPvmslj7dogpx9VnNXm5h5V+YiTsbA=
Subject key identifier: D8:52:1E:D7:F0:30:B1:B4:44:DA:81:C4:43:F8:00:AD:9D:09:4B:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 085EB00ED069572D270108988FB632584D25117F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e431a9a7-137a-4c7b-97eb-9bf37c0150c3.roa
Signing time: Sat 18 Oct 2025 02:31:10 +0000
ROA not before: Sat 18 Oct 2025 02:31:10 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:5e:b0:0e:d0:69:57:2d:27:01:08:98:8f:b6:32:58:4d:25:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:31:10 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=6c48b336b303b24e9178e654482dc1b5e2147857158a2d4c0f7b749005691790, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:6b:80:e0:8c:c7:2e:02:24:33:cf:43:1b:
78:31:2b:1e:17:98:87:dd:b4:7e:4a:43:13:12:1d:
9c:7e:d0:a2:7d:ad:ce:3e:26:90:2b:31:39:f4:9e:
0d:3f:95:69:7e:e5:be:3c:02:1e:33:db:7e:43:7f:
94:b4:e9:85:b9:d3:af:d7:e8:70:a1:e1:56:ac:08:
8d:eb:c8:63:3c:63:0d:6a:8d:83:90:74:ae:58:59:
b6:af:d4:f2:e2:b8:57:3e:72:d1:40:d5:65:6e:92:
8c:1b:9d:9d:ac:68:b8:2c:4a:fd:ba:73:00:63:2b:
92:44:39:29:9d:82:79:fa:80:8c:91:67:0d:0d:24:
95:d2:7a:43:cd:76:57:ac:2d:43:08:40:dc:b1:ec:
de:b2:69:17:5a:36:18:32:6e:75:a6:6f:fb:2a:4f:
4e:44:d7:4f:37:de:7a:a0:27:3f:95:24:4b:93:15:
d3:ca:14:24:d0:09:a7:41:4e:da:26:09:a4:fb:ff:
6b:8d:31:93:f0:62:af:81:0e:51:f6:cd:b1:31:7d:
73:f2:7a:f8:d7:b9:d1:2b:cc:5d:8b:e5:a3:6a:0d:
8e:18:3a:f4:42:f5:51:07:95:6f:0d:7a:ea:63:62:
89:c0:5e:6d:48:89:18:bf:a5:32:7d:10:bd:6a:86:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:52:1E:D7:F0:30:B1:B4:44:DA:81:C4:43:F8:00:AD:9D:09:4B:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e431a9a7-137a-4c7b-97eb-9bf37c0150c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:af:dc:3a:d0:71:07:1a:96:b1:78:de:45:a2:81:5f:68:ad:
e5:a5:ee:19:93:42:da:af:9f:84:f3:09:d5:69:2b:2f:ca:43:
5e:e9:c1:12:1f:34:7e:25:0e:9f:b8:2e:65:86:14:d9:73:96:
f2:21:71:57:29:a8:c2:ef:07:74:76:46:15:d9:47:60:2a:19:
d7:37:78:37:c1:c1:24:52:ea:e6:fa:9e:9a:a8:23:c5:6d:9f:
4d:de:ed:8e:05:4a:38:f1:2e:27:c3:33:37:ee:12:99:6b:b6:
e0:9b:db:fd:da:6c:b7:87:cf:5e:39:95:39:9f:ed:1f:2f:03:
6f:f0:3f:20:8d:60:d5:f9:02:b6:e0:24:d9:c4:12:d6:f2:02:
10:5a:c9:4d:c1:46:b3:ad:92:71:5e:ff:f9:cf:0d:20:c1:13:
1b:d9:c3:bc:0f:00:12:e7:bc:57:1c:df:aa:25:b5:cf:9d:ad:
e5:25:70:53:70:0c:df:2e:40:90:25:e8:3a:78:18:01:8b:fa:
ae:7c:b6:b5:99:82:8b:07:e7:f3:9f:84:85:82:7b:0d:8a:0c:
59:26:55:f9:09:97:9c:76:32:1f:19:f1:4f:6a:fd:ae:72:67:
40:d3:58:83:53:00:6b:d7:32:56:31:6c:6b:fb:4f:20:68:ed:
9b:80:ce:e7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCF6wDtBpVy0nAQiYj7YyWE0lEX8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIzMTEwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzQ4YjMzNmIzMDNiMjRlOTE3OGU2NTQ0ODJkYzFiNWUy
MTQ3ODU3MTU4YTJkNGMwZjdiNzQ5MDA1NjkxNzkwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt7muA4IzHLgIkM89DG3gxKx4XmIfdtH5KQxMSHZx+0KJ9
rc4+JpArMTn0ng0/lWl+5b48Ah4z235Df5S06YW506/X6HCh4VasCI3ryGM8Yw1q
jYOQdK5YWbav1PLiuFc+ctFA1WVukowbnZ2saLgsSv26cwBjK5JEOSmdgnn6gIyR
Zw0NJJXSekPNdlesLUMIQNyx7N6yaRdaNhgybnWmb/sqT05E10833nqgJz+VJEuT
FdPKFCTQCadBTtomCaT7/2uNMZPwYq+BDlH2zbExfXPyevjXudErzF2L5aNqDY4Y
OvRC9VEHlW8NeupjYonAXm1IiRi/pTJ9EL1qhl5BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2FIe1/AwsbRE2oHEQ/gArZ0JS78wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0MzFhOWE3LTEzN2EtNGM3Yi05N2ViLTliZjM3YzAxNTBjMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCB4wDQYJKoZIhvcNAQELBQADggEBAMSv3DrQcQcalrF43kWigV9oreWl
7hmTQtqvn4TzCdVpKy/KQ17pwRIfNH4lDp+4LmWGFNlzlvIhcVcpqMLvB3R2RhXZ
R2AqGdc3eDfBwSRS6ub6npqoI8Vtn03e7Y4FSjjxLifDMzfuEplrtuCb2/3abLeH
z145lTmf7R8vA2/wPyCNYNX5ArbgJNnEEtbyAhBayU3BRrOtknFe//nPDSDBExvZ
w7wPABLnvFcc36oltc+dreUlcFNwDN8uQJAl6Dp4GAGL+q58trWZgosH5/OfhIWC
ew2KDFkmVfkJl5x2Mh8Z8U9q/a5yZ0DTWINTAGvXMlYxbGv7TyBo7ZuAzuc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:47 2025 by rpki-client