Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
File: 18c5e828-21e1-417e-ac11-13a92ad7d891.roa (raw, json)
Hash identifier: 670Ra+eALi0pgwMWsK8F2sOnmoOZIZdCFpeY47yoJaw=
Subject key identifier: FB:EF:E7:3F:4B:A4:45:EE:C9:64:35:5F:23:66:6B:A5:0A:EB:BC:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AB16F23C6FAB58874F6E06B3ABC91BFFE376B60
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
Signing time: Fri 07 Nov 2025 00:50:07 +0000
ROA not before: Fri 07 Nov 2025 00:50:07 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b1:6f:23:c6:fa:b5:88:74:f6:e0:6b:3a:bc:91:bf:fe:37:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:07 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=1c6a79d41715366dabb17bf8d095f4fdb1641b076433ba2747e05659c839be4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:73:9c:a1:d5:27:b8:df:56:80:24:d4:b4:
b9:ec:36:53:2d:e7:f8:f6:d2:aa:0c:f3:2a:9b:f9:
d9:78:68:1c:f6:7d:8f:3a:03:e3:63:4f:e7:74:30:
e2:55:0c:76:44:eb:c6:da:01:86:74:c7:a0:f2:4a:
26:bb:f5:48:ed:59:f2:af:27:c4:32:1d:62:02:68:
c1:4d:e5:f0:5b:7c:8d:f7:c6:91:a7:a6:92:0f:fd:
fc:60:a8:18:ed:c6:bd:dd:6f:90:a5:60:b4:75:a1:
fa:bf:37:d7:9f:04:5e:7a:49:be:ec:12:e3:6c:38:
b3:49:4c:92:f6:3c:d8:57:e5:d2:9a:b7:96:10:0c:
5c:56:a3:8f:f4:54:14:d8:32:d7:be:70:07:94:03:
7d:56:e1:50:d8:0d:25:18:73:0e:75:c4:d1:53:66:
20:b2:13:ea:7c:d5:f0:10:b1:58:a0:59:55:90:7c:
3d:0a:bc:18:7a:09:3a:ac:af:d2:01:0b:de:ca:52:
aa:16:8f:ec:bc:9b:36:69:a1:89:e2:48:a6:10:7b:
a6:46:05:f3:74:6e:7f:bb:7f:3a:5a:79:4d:12:d9:
61:ba:9f:b8:9c:c0:78:e8:cb:84:a8:f2:db:d0:e3:
c2:62:2d:6b:e5:bd:5d:e2:02:ae:d8:6e:fb:fb:57:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:E7:3F:4B:A4:45:EE:C9:64:35:5F:23:66:6B:A5:0A:EB:BC:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18c5e828-21e1-417e-ac11-13a92ad7d891.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.35.0/24
Signature Algorithm: sha256WithRSAEncryption
40:35:df:81:14:54:40:bc:41:0d:e4:cb:44:6c:a9:f7:42:6f:
38:69:83:7c:32:b2:3f:4e:74:fb:0a:df:02:58:20:e3:9c:6c:
41:33:db:52:6a:09:c6:f3:a3:e4:c5:10:f4:f2:01:8a:6f:db:
af:77:ba:c0:ad:fe:66:b1:fa:69:b3:da:e5:5c:8a:84:0e:bc:
a3:31:e4:56:2d:28:73:d1:aa:7f:96:3d:80:14:4d:49:ce:e9:
c3:e1:62:a1:bf:7a:62:d3:4d:e9:5f:77:72:4c:1f:14:4a:c5:
8c:be:5f:c2:e1:e5:92:94:80:3e:42:0a:fd:2d:48:57:3d:45:
70:29:21:f5:27:6e:b6:a8:be:55:4d:dc:13:3e:12:21:64:f5:
ca:98:90:09:d8:6b:8e:73:d1:1b:1d:54:04:a7:7e:7d:ae:bf:
ca:85:68:b1:4b:38:90:2f:f1:34:54:72:61:b1:a4:72:b9:be:
74:ac:bb:c0:0b:7b:25:15:0d:eb:49:f7:c3:1b:50:7c:70:d1:
64:fe:81:7b:24:c5:f3:2f:1d:e6:33:e8:cd:8c:22:8b:ef:33:
8e:a4:c0:de:23:41:0f:54:f0:94:2f:22:a8:32:fc:08:04:80:
3e:f5:97:1b:b5:ff:2e:bd:7b:55:71:ba:e8:b1:c3:a5:11:96:
9f:01:be:7e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOrFvI8b6tYh09uBrOryRv/43a2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA3MDA1MDA3WhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYzZhNzlkNDE3MTUzNjZkYWJiMTdiZjhkMDk1ZjRmZGIx
NjQxYjA3NjQzM2JhMjc0N2UwNTY1OWM4MzliZTRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRyHOcodUnuN9WgCTUtLnsNlMt5/j20qoM8yqb+dl4aBz2
fY86A+NjT+d0MOJVDHZE68baAYZ0x6DySia79UjtWfKvJ8QyHWICaMFN5fBbfI33
xpGnppIP/fxgqBjtxr3db5ClYLR1ofq/N9efBF56Sb7sEuNsOLNJTJL2PNhX5dKa
t5YQDFxWo4/0VBTYMte+cAeUA31W4VDYDSUYcw51xNFTZiCyE+p81fAQsVigWVWQ
fD0KvBh6CTqsr9IBC97KUqoWj+y8mzZpoYniSKYQe6ZGBfN0bn+7fzpaeU0S2WG6
n7icwHjoy4So8tvQ48JiLWvlvV3iAq7Ybvv7V0KzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU++/nP0ukRe7JZDVfI2ZrpQrrvLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4YzVlODI4LTIxZTEtNDE3ZS1hYzExLTEzYTkyYWQ3ZDg5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAYbiMwDQYJKoZIhvcNAQELBQADggEBAEA134EUVEC8QQ3ky0RsqfdCbzhp
g3wysj9OdPsK3wJYIOOcbEEz21JqCcbzo+TFEPTyAYpv2693usCt/max+mmz2uVc
ioQOvKMx5FYtKHPRqn+WPYAUTUnO6cPhYqG/emLTTelfd3JMHxRKxYy+X8Lh5ZKU
gD5CCv0tSFc9RXApIfUnbraovlVN3BM+EiFk9cqYkAnYa45z0RsdVASnfn2uv8qF
aLFLOJAv8TRUcmGxpHK5vnSsu8ALeyUVDetJ98MbUHxw0WT+gXskxfMvHeYz6M2M
IovvM46kwN4jQQ9U8JQvIqgy/AgEgD71lxu1/y69e1Vxuuixw6URlp8Bvn4=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:42 2025 by rpki-client