Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e43404cf-7f4b-45f5-bfbb-76848aa45c6b.roa
File: e43404cf-7f4b-45f5-bfbb-76848aa45c6b.roa (raw, json)
Hash identifier: fhqQCF8dQCLlmy49Tpe7hbq9jAaQcZHnuw576qcU96w=
Subject key identifier: 41:11:50:B1:F7:1B:29:4D:DE:DE:34:47:69:2B:26:CC:85:1F:7A:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A85BA74FB8229F43C4C246828B1059B6B00A01D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e43404cf-7f4b-45f5-bfbb-76848aa45c6b.roa
Signing time: Fri 10 Oct 2025 13:06:47 +0000
ROA not before: Fri 10 Oct 2025 13:06:47 +0000
ROA not after: Fri 14 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 75.22.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:85:ba:74:fb:82:29:f4:3c:4c:24:68:28:b1:05:9b:6b:00:a0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 10 13:06:47 2025 GMT
Not After : Nov 14 23:59:59 2025 GMT
Subject: serialNumber=43acd2faeae39817c9240cd32cdebbb8b29da43cfe15de1761871dd355b8d22f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:b3:5e:c4:71:87:c0:c0:39:4c:8c:4f:2c:
83:59:e3:bf:0f:ee:2e:63:8b:6e:46:3b:e5:a4:e3:
ae:27:25:01:7a:d0:42:d8:e0:72:b7:98:93:e6:14:
de:cd:55:a1:16:a8:45:87:42:d3:f2:63:83:6f:45:
cd:79:a8:32:1b:59:1a:85:85:9d:59:d3:63:d1:bc:
31:f3:3c:ed:ca:c8:66:4d:b9:80:81:cd:a6:fe:8e:
97:0f:44:07:03:85:56:a7:e7:e8:82:a2:13:f7:a1:
d0:7d:73:98:4c:8a:49:36:5f:72:1c:3a:e2:be:40:
ad:9e:4b:52:b4:dc:d4:9a:f0:48:c4:07:76:3c:02:
a2:d6:79:42:68:88:89:f2:e4:dd:6f:d6:08:98:4d:
c3:43:f9:f2:a0:79:3e:29:43:7b:66:46:a6:62:76:
e6:87:f1:3e:69:9d:e9:0e:8c:3e:ca:74:4e:f2:be:
e7:60:80:fe:2b:a8:1a:a4:95:5f:4c:44:4c:5c:4c:
ea:84:a5:bc:b0:80:4e:51:f2:1c:74:0a:3e:98:21:
18:a5:40:ae:4d:03:c5:48:b7:58:7d:f8:3a:98:b3:
0c:e6:53:da:a5:a5:f5:b2:f7:78:c9:99:98:42:93:
7c:91:54:11:b6:e7:33:f0:9b:2b:02:a3:b8:3a:f0:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:50:B1:F7:1B:29:4D:DE:DE:34:47:69:2B:26:CC:85:1F:7A:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e43404cf-7f4b-45f5-bfbb-76848aa45c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.22.192.0/18
Signature Algorithm: sha256WithRSAEncryption
88:52:26:bb:8c:29:ba:ac:ec:03:7d:9b:53:4f:95:2c:42:ea:
65:45:53:2b:e1:d8:57:86:42:1d:2c:68:24:51:13:4f:c8:7e:
61:af:1c:dd:6c:aa:20:c9:09:26:82:b2:18:c6:ff:0b:7c:8e:
fa:60:e7:ba:8e:1d:70:0e:0f:29:8c:7c:34:82:4e:b5:18:5a:
fb:b6:71:41:d7:cd:e9:2c:ad:3a:8a:ec:2a:b4:4a:03:70:f6:
33:bb:1e:45:41:44:1f:36:81:68:62:62:35:48:c8:14:e1:0e:
c0:b1:da:ef:54:02:ef:a9:3a:f7:24:89:c4:00:7b:48:74:db:
ee:b7:66:02:9d:63:46:f6:88:d7:52:4e:bd:4f:f2:ad:a6:42:
9f:35:7f:92:6c:5c:20:e8:2d:b5:7a:ba:34:e1:7b:a2:14:b2:
8d:b0:2d:8a:28:bf:7a:2c:92:7b:a6:73:1a:6a:fe:bb:e9:db:
aa:71:b4:65:69:6d:93:1e:eb:81:01:b2:da:91:14:50:02:66:
5d:71:83:b7:27:50:93:30:57:66:cd:fa:68:e5:ab:61:3c:5b:
0b:61:44:e8:b8:ff:ef:97:82:47:83:8c:0c:8a:d3:32:29:de:
01:72:4b:b0:fc:31:98:56:bd:eb:6c:45:96:01:45:9a:55:69:
01:b8:05:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOoW6dPuCKfQ8TCRoKLEFm2sAoB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDEwMTMwNjQ3WhcNMjUxMTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0M2FjZDJmYWVhZTM5ODE3YzkyNDBjZDMyY2RlYmJiOGIy
OWRhNDNjZmUxNWRlMTc2MTg3MWRkMzU1YjhkMjJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDT9bNexHGHwMA5TIxPLINZ478P7i5ji25GO+Wk464nJQF6
0ELY4HK3mJPmFN7NVaEWqEWHQtPyY4NvRc15qDIbWRqFhZ1Z02PRvDHzPO3KyGZN
uYCBzab+jpcPRAcDhVan5+iCohP3odB9c5hMikk2X3IcOuK+QK2eS1K03NSa8EjE
B3Y8AqLWeUJoiIny5N1v1giYTcND+fKgeT4pQ3tmRqZiduaH8T5pnekOjD7KdE7y
vudggP4rqBqklV9MRExcTOqEpbywgE5R8hx0Cj6YIRilQK5NA8VIt1h9+DqYswzm
U9qlpfWy93jJmZhCk3yRVBG25zPwmysCo7g68HYBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQRFQsfcbKU3e3jRHaSsmzIUfej0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U0MzQwNGNmLTdmNGItNDVmNS1iZmJiLTc2ODQ4YWE0NWM2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZLFsAwDQYJKoZIhvcNAQELBQADggEBAIhSJruMKbqs7AN9m1NPlSxC6mVF
Uyvh2FeGQh0saCRRE0/IfmGvHN1sqiDJCSaCshjG/wt8jvpg57qOHXAODymMfDSC
TrUYWvu2cUHXzeksrTqK7Cq0SgNw9jO7HkVBRB82gWhiYjVIyBThDsCx2u9UAu+p
OvckicQAe0h02+63ZgKdY0b2iNdSTr1P8q2mQp81f5JsXCDoLbV6ujThe6IUso2w
LYoov3osknumcxpq/rvp26pxtGVpbZMe64EBstqRFFACZl1xg7cnUJMwV2bN+mjl
q2E8WwthROi4/++XgkeDjAyK0zIp3gFyS7D8MZhWvetsRZYBRZpVaQG4BQ0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:10 2025 by rpki-client