Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2280c87-d043-46c7-8cbf-0978ac3df894.roa
File: f2280c87-d043-46c7-8cbf-0978ac3df894.roa (raw, json)
Hash identifier: JLo1KeXI7rWSzHWW6LxOB3YGMrGz22mVhZShENWZh3c=
Subject key identifier: 1C:D1:69:75:4A:57:4E:F2:D8:82:AA:BA:91:E3:83:42:69:45:3C:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 03CA8034E8EA959024311950062C0E1E894ED421
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2280c87-d043-46c7-8cbf-0978ac3df894.roa
Signing time: Tue 14 Oct 2025 22:22:43 +0000
ROA not before: Tue 14 Oct 2025 22:22:43 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ca:80:34:e8:ea:95:90:24:31:19:50:06:2c:0e:1e:89:4e:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:22:43 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=720780388d6060f4f3d9b0044f1cab147c8027e9ab652294cad11ef93c2789f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:6b:e5:50:ce:3e:61:e3:69:2c:26:e6:80:
8c:3b:f5:c6:1c:ad:07:6c:4f:f3:47:8d:d1:2b:a5:
8d:b8:a8:b3:83:71:93:f9:de:b5:9b:b9:2f:94:3b:
0f:bb:ed:b6:ac:3d:74:3c:00:32:2f:23:62:b1:33:
a0:b7:a4:08:d6:6b:b1:5e:9f:d5:d1:cc:d7:0f:ce:
d5:6a:10:e3:12:e8:40:08:0f:66:05:10:66:f7:36:
76:ac:89:54:52:d2:df:57:cb:15:39:bd:a9:00:95:
f0:54:32:a6:76:b6:e7:da:19:04:45:09:e7:0c:61:
42:06:28:85:d0:1e:f9:32:9a:69:75:92:f0:3c:cd:
af:42:5e:f0:54:36:73:ac:e4:56:31:fe:0e:63:a4:
3f:01:bb:a8:91:17:5c:e6:cc:c3:74:e9:09:c8:be:
c5:a9:19:d7:94:36:68:6b:f1:3e:f6:1f:d4:8a:db:
84:b3:1b:8c:01:03:0d:06:ff:e4:9b:67:d6:03:c4:
12:ef:ef:1b:18:53:b4:ad:f4:3e:14:8a:6d:6a:26:
b7:11:68:ca:da:ad:68:8a:1e:29:3d:34:b2:bd:20:
b6:1d:35:c7:4a:61:d6:32:4a:52:3c:e8:88:fa:2e:
90:ef:fd:65:b2:0d:b1:03:9d:ae:8a:c9:62:95:cc:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:69:75:4A:57:4E:F2:D8:82:AA:BA:91:E3:83:42:69:45:3C:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2280c87-d043-46c7-8cbf-0978ac3df894.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.248.0/22
Signature Algorithm: sha256WithRSAEncryption
19:9e:06:51:9b:41:06:d7:ac:3a:fc:a7:b1:f2:c7:a5:12:5c:
1c:2a:14:33:7a:d4:38:a2:8e:96:65:bc:b0:c5:6f:21:c2:dd:
25:dc:35:5c:dd:b5:46:88:2f:cf:33:e7:98:49:22:b7:06:57:
6c:90:8a:08:e3:9e:ea:6c:46:15:89:cc:a7:f1:30:65:d3:fc:
0d:55:a9:f3:4e:96:aa:0e:91:ba:ab:83:7e:f9:c6:ee:d1:0a:
f6:b6:08:0e:56:a9:a6:53:e5:a6:8a:e3:b4:0c:63:01:fb:c8:
67:20:56:d1:0d:0c:c5:68:12:07:7c:e4:ac:15:4a:df:2f:c0:
af:88:a1:ba:18:ac:41:18:5a:80:1d:3d:6e:1a:19:46:96:5e:
a4:31:02:dc:71:c2:57:05:55:9b:98:f9:80:fe:00:75:ee:30:
4d:6d:95:57:ef:df:2b:0d:84:a9:d5:55:30:7d:df:58:79:6f:
b1:06:c8:b7:79:07:f3:cc:48:78:e6:c7:16:64:55:4d:c6:80:
88:c7:8d:00:00:bd:27:dd:b0:d0:33:d4:e3:c0:01:be:38:a5:
2f:3b:3a:a6:6b:af:42:b1:96:9f:68:fc:c5:fb:95:1a:e4:13:
1e:73:75:23:e7:df:3d:80:db:15:b8:52:db:4b:10:dc:4d:d6:
2e:c9:d7:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA8qANOjqlZAkMRlQBiwOHolO1CEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIyMjQzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjA3ODAzODhkNjA2MGY0ZjNkOWIwMDQ0ZjFjYWIxNDdj
ODAyN2U5YWI2NTIyOTRjYWQxMWVmOTNjMjc4OWY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDaimvlUM4+YeNpLCbmgIw79cYcrQdsT/NHjdErpY24qLOD
cZP53rWbuS+UOw+77basPXQ8ADIvI2KxM6C3pAjWa7Fen9XRzNcPztVqEOMS6EAI
D2YFEGb3NnasiVRS0t9XyxU5vakAlfBUMqZ2tufaGQRFCecMYUIGKIXQHvkymml1
kvA8za9CXvBUNnOs5FYx/g5jpD8Bu6iRF1zmzMN06QnIvsWpGdeUNmhr8T72H9SK
24SzG4wBAw0G/+SbZ9YDxBLv7xsYU7St9D4Uim1qJrcRaMrarWiKHik9NLK9ILYd
NcdKYdYySlI86Ij6LpDv/WWyDbEDna6KyWKVzD4LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHNFpdUpXTvLYgqq6keODQmlFPAAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyMjgwYzg3LWQwNDMtNDZjNy04Y2JmLTA5NzhhYzNkZjg5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjVPgwDQYJKoZIhvcNAQELBQADggEBABmeBlGbQQbXrDr8p7Hyx6USXBwq
FDN61DiijpZlvLDFbyHC3SXcNVzdtUaIL88z55hJIrcGV2yQigjjnupsRhWJzKfx
MGXT/A1VqfNOlqoOkbqrg375xu7RCva2CA5WqaZT5aaK47QMYwH7yGcgVtENDMVo
Egd85KwVSt8vwK+IoboYrEEYWoAdPW4aGUaWXqQxAtxxwlcFVZuY+YD+AHXuME1t
lVfv3ysNhKnVVTB931h5b7EGyLd5B/PMSHjmxxZkVU3GgIjHjQAAvSfdsNAz1OPA
Ab44pS87OqZrr0Kxlp9o/MX7lRrkEx5zdSPn3z2A2xW4UttLENxN1i7J158=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:19 2025 by rpki-client