Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa
File: 1ca07e02-81c0-42bd-b83a-ff51138805a0.roa (raw, json)
Hash identifier: hgnkXIDmRS2AJ2y+/Sd5xDeD59HsGtET5LHc7+C/kG4=
Subject key identifier: AA:1D:C0:2F:A6:5F:50:D4:9C:33:70:C9:BA:8E:07:FF:44:CB:D0:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 689AEB8B20643F27124B43C97F64B9F64B32AA40
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa
Signing time: Thu 13 Nov 2025 00:51:22 +0000
ROA not before: Thu 13 Nov 2025 00:51:22 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:9a:eb:8b:20:64:3f:27:12:4b:43:c9:7f:64:b9:f6:4b:32:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:51:22 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=a33fcd2c475bc513e33ed48da00a298b391c27bcb4857a8b3a903dce4ef0753c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ab:1b:c8:1c:e8:3d:7b:17:65:43:58:7d:dd:
b2:eb:ac:26:4d:3a:e9:2b:c4:ff:82:04:d9:c7:d3:
85:13:d5:b3:bb:f6:cc:d7:6f:b1:e2:9c:e1:8e:81:
0d:98:3d:03:c5:cb:1d:76:bf:4e:7e:24:6b:10:0f:
ed:a9:14:06:fb:cb:28:bb:9c:39:b2:33:e3:10:ae:
62:d0:82:78:09:08:7c:cc:86:27:4f:85:a4:39:87:
d1:45:6e:57:73:5a:23:48:69:2b:e7:27:02:4b:ec:
02:a2:ff:4f:5a:0f:16:dd:bc:cd:7c:1a:75:a1:c5:
d7:9f:4b:8f:cf:42:bc:5f:33:1c:4d:b5:b7:b3:f0:
86:d4:ba:fa:8b:21:12:3e:c6:7c:8e:84:3f:39:31:
61:8c:19:3d:09:1d:65:73:73:7d:15:0f:5c:e9:82:
3e:7f:df:a7:91:03:51:6b:11:b7:ea:3d:66:d0:7b:
7a:db:fa:d8:a0:df:ff:cf:68:98:1a:00:7e:af:3a:
dc:44:48:ef:d1:40:b2:3e:e1:77:fc:45:81:d9:45:
fd:d2:29:6f:97:73:44:ba:1a:b5:60:5e:3f:5c:af:
0b:a8:5d:e7:4c:60:3b:ae:90:f6:04:5d:26:d5:84:
ae:f1:9a:d3:14:0e:d8:57:6c:94:36:52:78:13:6a:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1D:C0:2F:A6:5F:50:D4:9C:33:70:C9:BA:8E:07:FF:44:CB:D0:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ca07e02-81c0-42bd-b83a-ff51138805a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.214.0/24
Signature Algorithm: sha256WithRSAEncryption
41:27:14:3c:c9:4e:1e:2e:33:c5:0f:1d:58:8e:2a:44:d6:a0:
ff:bf:ff:3f:b5:8d:22:2c:3a:be:b7:c5:42:07:49:18:0c:3b:
a5:c5:27:bf:28:77:49:04:a8:67:79:a7:ea:7c:4a:33:d5:64:
63:80:65:21:3c:a7:08:7a:06:dd:ca:a1:6f:13:5a:15:fb:ad:
51:18:98:44:02:c0:7e:83:b1:2c:33:ef:e0:28:82:c6:c1:7a:
9c:17:c1:b6:1b:7d:bd:f3:7f:7d:48:dc:84:7d:5d:e9:f9:07:
b5:3c:1b:64:9e:94:a4:e6:22:bd:61:ec:f9:93:dc:72:5b:17:
d1:22:c8:6d:c8:59:fe:ce:d9:0a:b0:14:26:f9:9c:95:fa:59:
7b:92:01:92:e7:31:58:ab:3c:8d:1b:bd:ac:56:34:f4:b8:83:
9c:66:5f:f8:74:55:99:ba:3a:3e:ac:f7:fc:ce:1c:8f:61:55:
ef:f9:29:32:84:fd:56:1e:9c:74:a0:a5:a1:6c:1f:f7:98:8e:
fc:12:f0:17:1b:d9:af:86:da:f8:02:d5:2c:6d:ba:11:b7:88:
2f:b7:be:d6:58:bc:6f:db:62:35:12:f6:b8:86:bd:ea:e3:ae:
22:d7:e2:af:61:d1:72:01:04:23:3a:4d:72:c6:fe:44:11:93:
8a:ce:03:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaJrriyBkPycSS0PJf2S59ksyqkAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDA1MTIyWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzNmY2QyYzQ3NWJjNTEzZTMzZWQ0OGRhMDBhMjk4YjM5
MWMyN2JjYjQ4NTdhOGIzYTkwM2RjZTRlZjA3NTNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrqxvIHOg9exdlQ1h93bLrrCZNOukrxP+CBNnH04UT1bO7
9szXb7HinOGOgQ2YPQPFyx12v05+JGsQD+2pFAb7yyi7nDmyM+MQrmLQgngJCHzM
hidPhaQ5h9FFbldzWiNIaSvnJwJL7AKi/09aDxbdvM18GnWhxdefS4/PQrxfMxxN
tbez8IbUuvqLIRI+xnyOhD85MWGMGT0JHWVzc30VD1zpgj5/36eRA1FrEbfqPWbQ
e3rb+tig3//PaJgaAH6vOtxESO/RQLI+4Xf8RYHZRf3SKW+Xc0S6GrVgXj9crwuo
XedMYDuukPYEXSbVhK7xmtMUDthXbJQ2UngTaiUPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqh3AL6ZfUNScM3DJuo4H/0TL0GMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFjYTA3ZTAyLTgxYzAtNDJiZC1iODNhLWZmNTExMzg4MDVhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFANYwDQYJKoZIhvcNAQELBQADggEBAEEnFDzJTh4uM8UPHViOKkTWoP+/
/z+1jSIsOr63xUIHSRgMO6XFJ78od0kEqGd5p+p8SjPVZGOAZSE8pwh6Bt3KoW8T
WhX7rVEYmEQCwH6DsSwz7+AogsbBepwXwbYbfb3zf31I3IR9Xen5B7U8G2SelKTm
Ir1h7PmT3HJbF9EiyG3IWf7O2QqwFCb5nJX6WXuSAZLnMVirPI0bvaxWNPS4g5xm
X/h0VZm6Oj6s9/zOHI9hVe/5KTKE/VYenHSgpaFsH/eYjvwS8Bcb2a+G2vgC1Sxt
uhG3iC+3vtZYvG/bYjUS9riGverjriLX4q9h0XIBBCM6TXLG/kQRk4rOA3I=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:13 2025 by rpki-client