Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd435ee3-fae5-4298-9acc-b9b8e2434819.roa
File: fd435ee3-fae5-4298-9acc-b9b8e2434819.roa (raw, json)
Hash identifier: kG3cSy1MvwGlzlb0dGcwON77Peh88d003lAQX0+nPrM=
Subject key identifier: 9A:79:15:CD:24:FE:05:29:F3:96:A4:06:AE:8E:3F:32:FF:D0:E8:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C6F4787B3A5E0BE13FE4EBDC0081FCA68567B1C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd435ee3-fae5-4298-9acc-b9b8e2434819.roa
Signing time: Tue 14 Oct 2025 21:52:00 +0000
ROA not before: Tue 14 Oct 2025 21:52:00 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6f:47:87:b3:a5:e0:be:13:fe:4e:bd:c0:08:1f:ca:68:56:7b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 21:52:00 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=798cf62761087f0a0a04ebab99863a90733cb77d91313a079836e6b32d92c9b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:90:6f:85:1b:b0:4e:10:e7:70:51:be:b1:
5e:31:db:30:c6:d2:d4:52:29:cc:03:37:47:e9:c2:
36:b3:c1:0d:da:67:64:91:89:e5:9c:a0:2c:67:9d:
39:9f:c6:75:25:ef:12:fa:32:8a:0b:17:6c:52:94:
f3:de:da:61:7a:4b:f1:d6:54:c7:b9:d9:98:65:17:
d3:3a:14:44:44:5b:79:c3:98:c9:e1:63:ea:25:14:
2b:cd:6f:03:11:ca:a3:99:66:21:ad:cd:ec:2e:7b:
9e:55:5c:8d:6f:eb:7e:fe:2f:83:06:fe:90:94:40:
9e:cf:0d:c7:fe:47:22:d6:6e:96:13:c6:fc:0b:e6:
67:12:07:4e:ff:37:5f:f3:e8:22:9c:f9:ee:f6:65:
ce:fa:19:f0:2e:29:7f:3a:c9:92:e1:be:73:2f:fe:
46:de:6a:a5:d8:4a:0f:6f:36:d1:9f:dd:c1:4a:f4:
f7:c2:c0:79:0c:e3:43:b9:d2:79:aa:4e:c0:b0:21:
85:ac:c5:ad:9f:86:a1:68:d3:03:a8:df:a3:79:32:
30:89:b5:07:00:2a:bb:32:39:34:6a:63:1e:a7:3b:
4b:e3:e8:21:33:75:4e:af:f9:0c:e0:4e:eb:2d:47:
b1:ef:c9:57:99:0b:3d:72:c1:a1:e2:05:63:a1:ca:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:79:15:CD:24:FE:05:29:F3:96:A4:06:AE:8E:3F:32:FF:D0:E8:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fd435ee3-fae5-4298-9acc-b9b8e2434819.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.28.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:84:60:48:66:6c:5f:56:cc:d1:ab:90:9f:03:11:2c:dc:53:
ac:62:0b:9c:22:3e:a8:d0:d1:64:b9:a6:4b:20:42:ae:f4:83:
6b:f7:35:31:db:45:ec:b7:b0:ea:45:aa:fa:61:98:e5:b7:04:
9d:9a:b0:37:17:3e:6c:a4:95:f8:1b:e7:61:96:cf:88:a8:45:
da:28:b3:7e:63:ab:51:e2:c6:36:c0:9a:41:2b:5f:fa:ce:8f:
08:39:03:bf:88:4c:54:11:3d:b0:24:36:fa:4e:f8:50:ff:68:
0e:08:f6:87:ec:ee:9f:06:fd:db:78:3b:5f:b6:1b:27:11:56:
2a:99:55:1b:1b:8e:90:cc:c4:12:5b:f1:ff:a1:af:cf:1f:55:
9f:2c:f8:12:ce:53:87:e4:59:e2:7f:8f:b8:28:44:57:a5:6b:
0c:ce:ba:98:b5:ad:ed:77:05:6c:ce:50:36:7b:e6:76:3e:f2:
90:4c:20:00:bf:29:e9:e1:22:ea:0e:39:db:d3:9b:9b:e4:b1:
6d:d5:ae:a3:b5:9e:91:f6:64:ac:78:7e:9a:24:6a:05:20:e9:
54:6f:0e:c3:53:b4:2c:bb:7f:48:cc:20:33:98:12:84:d3:85:
bc:26:78:19:c8:cf:c8:a4:7f:54:b4:04:26:d7:22:0c:b7:de:
a9:e0:ad:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfG9Hh7Ol4L4T/k69wAgfymhWexwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjE1MjAwWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3OThjZjYyNzYxMDg3ZjBhMGEwNGViYWI5OTg2M2E5MDcz
M2NiNzdkOTEzMTNhMDc5ODM2ZTZiMzJkOTJjOWIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRtJBvhRuwThDncFG+sV4x2zDG0tRSKcwDN0fpwjazwQ3a
Z2SRieWcoCxnnTmfxnUl7xL6MooLF2xSlPPe2mF6S/HWVMe52ZhlF9M6FEREW3nD
mMnhY+olFCvNbwMRyqOZZiGtzewue55VXI1v637+L4MG/pCUQJ7PDcf+RyLWbpYT
xvwL5mcSB07/N1/z6CKc+e72Zc76GfAuKX86yZLhvnMv/kbeaqXYSg9vNtGf3cFK
9PfCwHkM40O50nmqTsCwIYWsxa2fhqFo0wOo36N5MjCJtQcAKrsyOTRqYx6nO0vj
6CEzdU6v+QzgTustR7HvyVeZCz1ywaHiBWOhylRHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmnkVzST+BSnzlqQGro4/Mv/Q6NMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZkNDM1ZWUzLWZhZTUtNDI5OC05YWNjLWI5YjhlMjQzNDgxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjVBwwDQYJKoZIhvcNAQELBQADggEBANSEYEhmbF9WzNGrkJ8DESzcU6xi
C5wiPqjQ0WS5pksgQq70g2v3NTHbRey3sOpFqvphmOW3BJ2asDcXPmyklfgb52GW
z4ioRdoos35jq1HixjbAmkErX/rOjwg5A7+ITFQRPbAkNvpO+FD/aA4I9ofs7p8G
/dt4O1+2GycRViqZVRsbjpDMxBJb8f+hr88fVZ8s+BLOU4fkWeJ/j7goRFelawzO
upi1re13BWzOUDZ75nY+8pBMIAC/KenhIuoOOdvTm5vksW3VrqO1npH2ZKx4fpok
agUg6VRvDsNTtCy7f0jMIDOYEoTThbwmeBnIz8ikf1S0BCbXIgy33qngrYU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:51 2025 by rpki-client