Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9407cd-3b60-4279-92f1-71b679bba8aa.roa
File: fa9407cd-3b60-4279-92f1-71b679bba8aa.roa (raw, json)
Hash identifier: Sm4dKldrH94LHn/6HLWy4MGBuahuH1oKO059x+PgN24=
Subject key identifier: EA:75:5A:5D:D4:75:DE:A4:42:22:13:17:4E:5B:3D:BE:32:39:6F:8E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DDD3951129225EFB83E09569F49F173621A144D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9407cd-3b60-4279-92f1-71b679bba8aa.roa
Signing time: Sat 18 Oct 2025 05:22:05 +0000
ROA not before: Sat 18 Oct 2025 05:22:05 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:dd:39:51:12:92:25:ef:b8:3e:09:56:9f:49:f1:73:62:1a:14:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:22:05 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=b56dff6dcb7691a2a5692da660b9a02d8b2b2092a8ab87717257a65831c96776, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:f7:30:a3:d4:f8:01:23:c6:46:d9:fc:1b:
0b:55:a1:b2:34:c0:77:e2:cb:1c:c8:e5:e5:6f:de:
36:32:b0:a7:b4:4f:8d:7e:c5:ab:15:c5:ae:79:6a:
1f:39:d2:e6:42:e8:93:46:67:17:e4:3d:d7:2b:8c:
fa:00:3b:53:4a:75:0d:59:29:45:47:27:0e:24:d0:
2e:5b:a1:27:5a:64:e2:9c:8b:19:95:88:0f:b5:87:
12:ab:61:82:84:15:90:f5:ae:9f:1f:99:ac:85:94:
76:af:65:4e:31:06:36:01:97:cf:17:0f:2a:77:31:
b7:90:aa:b6:29:b5:56:e6:bf:fe:b3:55:33:a2:36:
39:3f:fb:b6:71:f8:38:3c:ad:22:5a:c7:f8:2c:2e:
93:22:65:0d:2c:7a:45:4e:b2:47:ee:aa:80:80:29:
00:d3:a2:da:eb:df:23:6b:ee:7c:a5:69:46:3d:ac:
84:ea:de:55:7f:91:0f:96:fc:f0:d6:6a:4a:ed:79:
84:7c:9b:14:ad:df:dd:6e:79:9e:00:17:d8:d3:ee:
b3:84:f0:e2:46:ed:5b:93:3e:df:80:e1:af:e6:35:
44:da:19:2c:0b:3c:8e:9f:22:9c:11:b1:20:d5:50:
44:02:1d:86:59:1d:98:30:02:46:36:29:1f:b5:6a:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:75:5A:5D:D4:75:DE:A4:42:22:13:17:4E:5B:3D:BE:32:39:6F:8E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa9407cd-3b60-4279-92f1-71b679bba8aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.110.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:df:b7:b6:f0:be:6a:46:27:a5:95:1f:33:9a:96:4e:f6:87:
66:b5:46:2b:51:21:93:55:c3:ba:dd:31:1c:48:ac:c8:b4:43:
70:6d:31:3b:fe:36:d7:6e:ef:12:05:37:4b:4d:34:7c:8f:41:
a6:db:20:00:0d:8e:d3:bb:5d:41:5c:88:fd:4b:d3:86:67:4c:
d0:1b:4e:58:7c:74:6e:8f:a8:49:a8:ac:e6:5c:a0:3e:f3:01:
5a:2e:86:8a:f8:db:96:35:94:6a:59:8a:ba:65:44:60:a4:84:
54:21:9c:3f:b7:c8:01:67:f5:04:63:65:d5:99:60:1d:f7:9f:
b6:4c:0f:62:90:8f:f9:33:4f:63:1a:59:ec:ce:98:56:df:02:
2b:dc:73:d6:80:87:9a:4d:d4:e0:03:3b:03:7e:d3:71:e5:c5:
7d:7b:df:6e:a4:75:ca:46:ab:d9:58:dd:57:e4:d7:b9:32:31:
6d:52:9e:5b:b3:1f:1c:05:0b:ab:cd:1c:46:11:04:af:85:a0:
38:41:73:00:6b:f1:4b:7a:fd:15:2a:28:a0:b1:35:a4:b8:c6:
dc:44:9d:f2:ff:8f:db:6d:17:e2:f6:e0:4e:9e:72:52:0f:5d:
f9:2b:0f:46:02:5e:df:c7:69:33:a4:08:48:81:cd:f5:fc:84:
82:b6:3d:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPd05URKSJe+4PglWn0nxc2IaFE0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDUyMjA1WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiNTZkZmY2ZGNiNzY5MWEyYTU2OTJkYTY2MGI5YTAyZDhi
MmIyMDkyYThhYjg3NzE3MjU3YTY1ODMxYzk2Nzc2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDn9Pcwo9T4ASPGRtn8GwtVobI0wHfiyxzI5eVv3jYysKe0
T41+xasVxa55ah850uZC6JNGZxfkPdcrjPoAO1NKdQ1ZKUVHJw4k0C5boSdaZOKc
ixmViA+1hxKrYYKEFZD1rp8fmayFlHavZU4xBjYBl88XDyp3MbeQqrYptVbmv/6z
VTOiNjk/+7Zx+Dg8rSJax/gsLpMiZQ0sekVOskfuqoCAKQDTotrr3yNr7nylaUY9
rITq3lV/kQ+W/PDWakrteYR8mxSt391ueZ4AF9jT7rOE8OJG7VuTPt+A4a/mNUTa
GSwLPI6fIpwRsSDVUEQCHYZZHZgwAkY2KR+1as+lAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6nVaXdR13qRCIhMXTls9vjI5b44wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhOTQwN2NkLTNiNjAtNDI3OS05MmYxLTcxYjY3OWJiYThhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCG4wDQYJKoZIhvcNAQELBQADggEBAKHft7bwvmpGJ6WVHzOalk72h2a1
RitRIZNVw7rdMRxIrMi0Q3BtMTv+Ntdu7xIFN0tNNHyPQabbIAANjtO7XUFciP1L
04ZnTNAbTlh8dG6PqEmorOZcoD7zAVouhor425Y1lGpZirplRGCkhFQhnD+3yAFn
9QRjZdWZYB33n7ZMD2KQj/kzT2MaWezOmFbfAivcc9aAh5pN1OADOwN+03HlxX17
326kdcpGq9lY3Vfk17kyMW1SnluzHxwFC6vNHEYRBK+FoDhBcwBr8Ut6/RUqKKCx
NaS4xtxEnfL/j9ttF+L24E6eclIPXfkrD0YCXt/HaTOkCEiBzfX8hIK2Pc8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:32 2025 by rpki-client