Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa
File: 3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa (raw, json)
Hash identifier: tqdMOwlxSue7OX2j5f8cr3SJpmXK5x8uIIvXZh8tzmE=
Subject key identifier: 4F:44:80:67:FA:59:55:7D:14:FC:81:40:67:F5:3F:1E:83:15:1A:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58856D52D96E97A3A1C774040CA9D43E180CBF06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa
Signing time: Sun 16 Nov 2025 00:30:44 +0000
ROA not before: Sun 16 Nov 2025 00:30:44 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:85:6d:52:d9:6e:97:a3:a1:c7:74:04:0c:a9:d4:3e:18:0c:bf:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:30:44 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=844ea76315cbdf60afa11ac5863f1fefb816b1945dfa74b2531e1c8eff65e1c6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:16:94:b4:a6:77:e9:10:42:03:76:b2:36:
9d:6f:b4:2b:97:a0:10:c6:ba:85:c6:2c:cb:d7:89:
18:1d:d0:4c:a5:53:97:8f:ba:57:cf:8a:34:56:63:
5d:11:d4:e9:ad:24:c4:51:aa:97:d9:9d:05:8c:a9:
16:28:20:c5:20:c1:af:6d:9a:14:58:ac:47:eb:4b:
b8:4a:6f:6d:e0:1b:86:77:a9:1e:52:ec:20:99:a3:
28:5c:99:ba:66:68:ca:1a:a8:cb:aa:90:eb:76:ff:
63:8e:70:c3:09:de:be:c4:f4:3f:5a:aa:1e:12:87:
02:e5:99:81:6f:0c:2e:97:ef:04:48:a0:b6:f0:08:
72:f4:ae:0d:28:f3:12:21:93:8d:f7:90:22:68:36:
ee:49:6c:71:ff:26:81:83:f0:8f:80:9e:be:c6:9e:
0f:8c:97:2b:54:b9:a7:d6:bd:fe:d9:49:0d:01:cb:
a2:e2:b9:16:ed:ac:b3:2c:8b:24:69:92:c6:4c:98:
39:73:49:59:32:27:92:54:01:c9:8b:75:6b:e0:50:
e8:a1:ea:b8:69:d0:bb:a5:7e:e0:8f:c0:5f:34:29:
91:f1:a5:bc:9c:ab:1c:3d:de:e3:9b:c9:e5:81:54:
79:ad:55:ba:aa:0b:3a:24:6b:7f:05:da:aa:1f:1e:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:80:67:FA:59:55:7D:14:FC:81:40:67:F5:3F:1E:83:15:1A:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a03dc88-1a7e-468f-a6f8-04c75ddfd98c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.53.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:73:bb:2c:be:93:f8:63:87:47:b4:13:40:1e:ac:29:f7:e9:
ec:0d:37:39:ed:fd:62:71:31:09:20:c5:27:df:30:8b:78:0f:
a2:8a:46:31:e4:d3:68:d9:cd:5f:85:cd:48:d3:c8:84:09:8b:
52:d8:a7:28:90:77:04:ba:d4:b2:1e:d1:be:49:1d:cb:9c:a9:
8e:3d:45:c2:1f:a2:48:43:96:35:47:82:ea:f4:46:d7:fa:78:
98:82:68:99:d0:5f:50:d5:0b:38:c6:8e:97:b6:f0:d5:a5:1f:
77:c6:d8:01:b1:1b:09:03:60:6e:49:a9:bf:08:05:1b:dd:44:
6e:ca:42:88:d0:e5:5c:f3:67:80:8c:7f:8f:ab:70:e3:43:b3:
c9:cd:80:8a:a0:3d:f7:dc:af:8a:5a:7f:78:ed:f4:2e:03:ff:
1f:7c:2e:ce:e5:e0:b1:7b:4e:05:fa:5f:26:59:3e:d7:71:e3:
88:c5:5f:cd:8c:ab:7b:9b:b1:02:b9:e1:67:25:e2:73:8b:74:
52:25:c8:f1:e2:bb:fd:7c:b8:f4:f5:87:98:d4:66:93:51:c7:
10:ac:41:de:9a:30:43:8d:ad:6b:94:5c:a8:1d:36:e3:dd:4a:
86:0b:c2:48:ce:eb:d8:91:ec:47:ae:1f:ca:93:3d:09:e9:c7:
54:35:f4:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWIVtUtlul6Ohx3QEDKnUPhgMvwYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE2MDAzMDQ0WhcNMjUxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDRlYTc2MzE1Y2JkZjYwYWZhMTFhYzU4NjNmMWZlZmI4
MTZiMTk0NWRmYTc0YjI1MzFlMWM4ZWZmNjVlMWM2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2AxaUtKZ36RBCA3ayNp1vtCuXoBDGuoXGLMvXiRgd0Eyl
U5ePulfPijRWY10R1OmtJMRRqpfZnQWMqRYoIMUgwa9tmhRYrEfrS7hKb23gG4Z3
qR5S7CCZoyhcmbpmaMoaqMuqkOt2/2OOcMMJ3r7E9D9aqh4ShwLlmYFvDC6X7wRI
oLbwCHL0rg0o8xIhk433kCJoNu5JbHH/JoGD8I+Anr7Gng+MlytUuafWvf7ZSQ0B
y6LiuRbtrLMsiyRpksZMmDlzSVkyJ5JUAcmLdWvgUOih6rhp0LulfuCPwF80KZHx
pbycqxw93uObyeWBVHmtVbqqCzoka38F2qofHpXvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUT0SAZ/pZVX0U/IFAZ/U/HoMVGrIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNhMDNkYzg4LTFhN2UtNDY4Zi1hNmY4LTA0Yzc1ZGRmZDk4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjUwDQYJKoZIhvcNAQELBQADggEBACpzuyy+k/hjh0e0E0AerCn36ewN
Nznt/WJxMQkgxSffMIt4D6KKRjHk02jZzV+FzUjTyIQJi1LYpyiQdwS61LIe0b5J
HcucqY49RcIfokhDljVHgur0Rtf6eJiCaJnQX1DVCzjGjpe28NWlH3fG2AGxGwkD
YG5Jqb8IBRvdRG7KQojQ5VzzZ4CMf4+rcONDs8nNgIqgPffcr4paf3jt9C4D/x98
Ls7l4LF7TgX6XyZZPtdx44jFX82Mq3ubsQK54Wcl4nOLdFIlyPHiu/18uPT1h5jU
ZpNRxxCsQd6aMEONrWuUXKgdNuPdSoYLwkjO69iR7EeuH8qTPQnpx1Q19PY=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:49:46 2025 by rpki-client