Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcd94b09-794f-4828-919c-049532ec939d.roa
File: fcd94b09-794f-4828-919c-049532ec939d.roa (raw, json)
Hash identifier: xtC5FJzTxnQ75LZ6cmevz0EOme/LTVDTVNsHmwgHWt4=
Subject key identifier: 66:3C:C9:C0:CF:91:89:74:71:18:BC:C7:EE:E3:EF:C1:73:39:91:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69FD9BA2E0274E9957D3BB5C1A6442BD03A1851F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcd94b09-794f-4828-919c-049532ec939d.roa
Signing time: Tue 14 Oct 2025 18:42:24 +0000
ROA not before: Tue 14 Oct 2025 18:42:24 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:fd:9b:a2:e0:27:4e:99:57:d3:bb:5c:1a:64:42:bd:03:a1:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:42:24 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=d97b9540665816c3c458cb276ba29b87d97234d4adc8bfd1f07e8fb5177ae4d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:7e:d2:de:66:41:27:42:74:4d:32:0d:84:
cf:0b:b8:36:25:b4:0c:22:dc:f1:b7:10:05:0f:0c:
ca:06:ed:69:c7:a5:10:14:81:2b:1f:ea:cd:c6:d9:
19:e2:76:64:ec:28:04:a3:0a:4d:5d:d9:c0:81:24:
f7:c8:c2:7d:5c:5c:0c:69:60:13:3a:ac:3b:83:13:
43:0f:fc:20:80:85:3e:58:97:fe:18:99:e9:de:92:
f7:b5:dd:50:e0:82:3e:30:7b:cd:1b:4d:c2:74:46:
63:3e:89:58:21:ee:97:53:bd:1a:1d:f3:d2:3b:24:
03:af:56:bc:18:82:70:ac:05:a9:48:99:91:d3:0f:
be:f5:85:d1:9a:5d:6b:b5:38:a6:cd:ef:1f:95:60:
2f:7c:cc:a0:8d:f8:35:e2:9f:e6:34:c0:c3:37:ae:
2e:36:f6:5f:83:ca:74:d5:da:fe:41:5c:7e:05:8e:
74:07:9f:5b:97:72:ea:1b:6e:1d:6b:a0:67:84:fa:
6d:1f:5a:b8:02:c8:33:0f:a4:d4:1c:14:b2:25:6f:
6b:28:34:77:98:d4:fd:b7:bc:c2:8c:10:e5:22:f4:
5a:0e:31:2f:d7:4e:89:53:56:07:b8:2e:24:40:49:
8d:e5:24:6f:b6:d4:8a:11:58:57:81:a8:d4:4b:eb:
be:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3C:C9:C0:CF:91:89:74:71:18:BC:C7:EE:E3:EF:C1:73:39:91:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcd94b09-794f-4828-919c-049532ec939d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.236.0/24
Signature Algorithm: sha256WithRSAEncryption
92:52:7d:08:af:65:a7:54:4b:04:08:57:b9:49:aa:f7:20:0c:
93:82:7a:b0:cb:09:58:1e:4d:da:63:ba:64:a5:6c:27:94:47:
7d:36:79:5c:39:e1:af:ce:f2:d1:c4:25:d1:bc:79:2a:e1:b9:
59:0b:4c:65:cc:55:14:4a:31:40:a6:46:e5:14:2d:16:1c:ca:
fb:45:41:ab:f5:d0:b4:3d:38:8c:6c:aa:cb:23:26:e5:e1:ea:
49:70:66:27:e7:6d:bd:54:d7:bf:d0:f0:06:b9:1d:ff:45:b5:
8b:fe:98:b0:28:d9:2e:cb:76:a3:f9:67:ee:ee:e9:82:b0:12:
14:d0:a8:2b:ea:f4:ac:4f:4d:a7:fb:a4:e8:b2:88:30:65:57:
56:ca:bf:de:76:1e:1a:ce:72:d5:a7:db:a2:05:82:ab:de:41:
76:17:44:4a:4a:33:01:35:9d:73:31:06:fe:a2:3b:f2:3f:2d:
6b:0a:9b:c5:2c:28:63:62:27:30:88:7d:3e:2a:b1:f8:45:b6:
87:88:c5:27:f0:e3:23:6f:7d:4c:d7:a9:fa:98:40:b1:0a:09:
09:e0:35:de:78:59:03:dd:3d:e7:bd:b5:2d:a8:49:10:d7:9c:
3b:8c:0c:eb:c5:04:1e:7f:c1:6f:1f:44:77:09:d2:f9:c9:71:
1a:52:e8:c8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaf2bouAnTplX07tcGmRCvQOhhR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTg0MjI0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTdiOTU0MDY2NTgxNmMzYzQ1OGNiMjc2YmEyOWI4N2Q5
NzIzNGQ0YWRjOGJmZDFmMDdlOGZiNTE3N2FlNGQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC04X7S3mZBJ0J0TTINhM8LuDYltAwi3PG3EAUPDMoG7WnH
pRAUgSsf6s3G2RnidmTsKASjCk1d2cCBJPfIwn1cXAxpYBM6rDuDE0MP/CCAhT5Y
l/4Ymenekve13VDggj4we80bTcJ0RmM+iVgh7pdTvRod89I7JAOvVrwYgnCsBalI
mZHTD771hdGaXWu1OKbN7x+VYC98zKCN+DXin+Y0wMM3ri429l+DynTV2v5BXH4F
jnQHn1uXcuobbh1roGeE+m0fWrgCyDMPpNQcFLIlb2soNHeY1P23vMKMEOUi9FoO
MS/XTolTVge4LiRASY3lJG+21IoRWFeBqNRL675TAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZjzJwM+RiXRxGLzH7uPvwXM5kUMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZjZDk0YjA5LTc5NGYtNDgyOC05MTljLTA0OTUzMmVjOTM5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVOwwDQYJKoZIhvcNAQELBQADggEBAJJSfQivZadUSwQIV7lJqvcgDJOC
erDLCVgeTdpjumSlbCeUR302eVw54a/O8tHEJdG8eSrhuVkLTGXMVRRKMUCmRuUU
LRYcyvtFQav10LQ9OIxsqssjJuXh6klwZifnbb1U17/Q8Aa5Hf9FtYv+mLAo2S7L
dqP5Z+7u6YKwEhTQqCvq9KxPTaf7pOiyiDBlV1bKv952HhrOctWn26IFgqveQXYX
REpKMwE1nXMxBv6iO/I/LWsKm8UsKGNiJzCIfT4qsfhFtoeIxSfw4yNvfUzXqfqY
QLEKCQngNd54WQPdPee9tS2oSRDXnDuMDOvFBB5/wW8fRHcJ0vnJcRpS6Mg=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:39 2025 by rpki-client