Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed31f44a-22f0-4b78-b1ce-e54904f3852e.roa
File: ed31f44a-22f0-4b78-b1ce-e54904f3852e.roa (raw, json)
Hash identifier: a1U7ZKLeoDbvYMj2s4w2drJ0hpTFuDbsCJ4hPWuwPeU=
Subject key identifier: B2:81:B0:B7:29:57:20:C4:DB:57:F5:81:57:A0:EB:A5:EA:58:8D:80
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: D40B09AA41A391BBF404E1595D4CDB92CCE8FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed31f44a-22f0-4b78-b1ce-e54904f3852e.roa
Signing time: Tue 14 Oct 2025 17:39:22 +0000
ROA not before: Tue 14 Oct 2025 17:39:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 70.132.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d4:0b:09:aa:41:a3:91:bb:f4:04:e1:59:5d:4c:db:92:cc:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 17:39:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=543497e2ceba475c681a0abcb0e74b798413193206f1df47e4ad591570324f28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:9d:05:7d:a1:c5:38:93:06:5e:95:af:52:
0a:96:7e:07:d7:fa:1d:62:1f:c2:6b:e7:ef:6f:a7:
6b:19:0c:ab:0f:fa:38:5a:66:93:95:68:19:08:10:
49:29:9e:cf:d9:02:15:31:bc:38:93:6b:eb:cd:c2:
48:e1:1f:a2:eb:5e:bb:d7:cd:6c:fb:b5:eb:82:62:
20:1f:77:07:a4:31:18:d2:92:71:19:29:05:c1:01:
74:2a:1c:4c:64:01:4e:01:a8:07:fc:f6:31:a9:fd:
de:0f:84:f0:d6:ea:0d:7d:7d:3b:48:8e:19:ba:5a:
75:0f:e1:89:9e:40:35:33:48:93:d6:32:17:51:0a:
35:7e:47:06:d4:ba:b6:f3:70:a8:bc:6c:92:2b:2e:
8a:f7:ec:84:b6:ca:70:d2:f0:c6:32:86:03:37:7c:
dd:11:a8:45:ad:f5:4f:e4:20:0d:e2:e8:b1:a1:85:
d9:3f:80:94:0b:eb:9a:c0:32:65:f7:da:c3:01:22:
9c:82:c0:8a:f0:f8:a1:16:18:87:51:58:7b:37:2c:
13:04:85:fb:38:66:92:54:64:8c:e6:64:c7:69:ee:
8a:92:9c:89:ff:09:60:6e:21:2f:23:39:db:ae:84:
2d:1d:8f:7b:ca:82:48:54:97:b1:e8:b6:04:32:53:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:81:B0:B7:29:57:20:C4:DB:57:F5:81:57:A0:EB:A5:EA:58:8D:80
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed31f44a-22f0-4b78-b1ce-e54904f3852e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.132.35.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:c4:83:5f:d3:17:fd:2c:af:43:74:ff:05:f8:bb:06:b6:72:
f7:a2:94:4c:e4:82:49:ac:0c:c7:10:ad:b4:7b:59:52:84:e6:
ed:a5:a4:4a:7a:47:54:1b:04:6b:60:eb:ad:96:de:df:4f:9a:
75:7e:b3:ba:41:58:74:71:44:8a:78:14:a1:3b:6e:f9:be:65:
05:58:71:1b:42:b8:27:c7:fa:31:2c:33:f5:6d:66:ee:a9:b5:
f7:10:fd:45:94:49:d8:64:a3:7c:31:50:f9:5c:24:32:58:9a:
db:1a:ed:9a:b9:b2:f5:37:1c:cc:f1:85:e9:34:9b:cc:32:55:
20:e1:ce:5e:01:22:d1:be:f7:49:e0:48:5d:fb:78:c4:dd:65:
be:89:d3:8b:25:a6:6b:e4:0b:22:3a:79:7c:7e:28:e2:0d:cb:
c3:d4:8c:ae:38:5c:cc:02:a0:80:39:6a:eb:2f:33:3c:9f:29:
8e:b5:63:ed:7d:2b:81:b4:04:41:a9:0a:81:71:7e:3b:ea:6f:
17:cc:4c:06:b9:fe:ee:00:35:c9:4c:be:af:7f:f7:05:29:bb:
0b:89:81:1c:3f:90:6b:50:b0:23:e3:a3:f4:cd:60:a9:07:a3:
c1:88:95:b4:1d:f2:b1:ea:36:94:0d:29:1b:45:a6:b9:95:57:
12:3a:19:64
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUANQLCapBo5G79AThWV1M25LM6P0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTczOTIyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDM0OTdlMmNlYmE0NzVjNjgxYTBhYmNiMGU3NGI3OTg0
MTMxOTMyMDZmMWRmNDdlNGFkNTkxNTcwMzI0ZjI4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWXZ0FfaHFOJMGXpWvUgqWfgfX+h1iH8Jr5+9vp2sZDKsP
+jhaZpOVaBkIEEkpns/ZAhUxvDiTa+vNwkjhH6LrXrvXzWz7teuCYiAfdwekMRjS
knEZKQXBAXQqHExkAU4BqAf89jGp/d4PhPDW6g19fTtIjhm6WnUP4YmeQDUzSJPW
MhdRCjV+RwbUurbzcKi8bJIrLor37IS2ynDS8MYyhgM3fN0RqEWt9U/kIA3i6LGh
hdk/gJQL65rAMmX32sMBIpyCwIrw+KEWGIdRWHs3LBMEhfs4ZpJUZIzmZMdp7oqS
nIn/CWBuIS8jOduuhC0dj3vKgkhUl7HotgQyU+0xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsoGwtylXIMTbV/WBV6DrpepYjYAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkMzFmNDRhLTIyZjAtNGI3OC1iMWNlLWU1NDkwNGYzODUyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABGhCMwDQYJKoZIhvcNAQELBQADggEBAMzEg1/TF/0sr0N0/wX4uwa2cvei
lEzkgkmsDMcQrbR7WVKE5u2lpEp6R1QbBGtg662W3t9PmnV+s7pBWHRxRIp4FKE7
bvm+ZQVYcRtCuCfH+jEsM/VtZu6ptfcQ/UWUSdhko3wxUPlcJDJYmtsa7Zq5svU3
HMzxhek0m8wyVSDhzl4BItG+90ngSF37eMTdZb6J04slpmvkCyI6eXx+KOINy8PU
jK44XMwCoIA5ausvMzyfKY61Y+19K4G0BEGpCoFxfjvqbxfMTAa5/u4ANclMvq9/
9wUpuwuJgRw/kGtQsCPjo/TNYKkHo8GIlbQd8rHqNpQNKRtFprmVVxI6GWQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:11 2025 by rpki-client