Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
File: 6e7b3944-7311-4337-8436-836528b45a90.roa (raw, json)
Hash identifier: suD498rMuRjAY/t1LYizgZKKllV4TsUf4V+WOj1cfC4=
Subject key identifier: 51:F8:57:97:DF:6D:26:00:DC:C6:28:B2:16:A9:26:E3:02:D9:D6:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65DB1648B84652CE74BA1AA045FD6A1B9D730D0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
Signing time: Fri 07 Nov 2025 00:50:05 +0000
ROA not before: Fri 07 Nov 2025 00:50:05 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:db:16:48:b8:46:52:ce:74:ba:1a:a0:45:fd:6a:1b:9d:73:0d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:05 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=dc7abfb3578649f54a362d4128b317e014aea53a5bb019c442eb198bea0dcd93, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:e5:25:15:59:a1:b8:35:be:37:ac:a1:50:
35:32:ca:6a:bc:5e:7c:35:fe:8f:8f:25:0d:cf:58:
2b:75:27:e3:13:51:d7:2f:50:17:42:66:9c:e6:a2:
9d:bc:4a:a1:5e:d1:67:d1:6f:48:2d:cb:22:61:37:
13:18:54:99:cf:ba:ab:78:4a:1c:a2:82:85:99:8b:
f3:1a:db:da:ea:e0:7f:1a:1b:cd:66:e9:de:53:07:
d8:e1:63:9e:4c:a6:a5:7c:64:d1:d3:4b:d0:46:8c:
91:e9:31:5d:28:92:be:ed:d6:8e:cd:4c:5e:be:4d:
2c:07:e2:4b:65:f6:05:c1:b0:aa:50:f7:ae:7a:59:
1c:a4:54:57:9b:8a:b7:2f:16:e7:19:05:7f:a8:0d:
db:5a:dd:90:37:d4:78:09:bc:41:a6:32:a8:22:41:
3e:11:c4:61:6c:de:c9:66:4e:03:ba:1e:e7:ce:d9:
1b:51:d0:8b:b2:f7:d6:96:98:7e:a3:c0:15:9a:46:
88:75:2e:c8:ae:4c:10:78:ce:5b:e6:c9:b6:56:61:
ed:62:fd:b8:3b:82:e5:0b:54:f1:a0:29:d3:ab:0a:
40:9d:06:34:e8:c2:13:8a:dd:3f:28:d9:d8:6e:25:
73:b2:6a:5d:6d:e4:40:e1:90:64:f1:b7:38:93:5b:
e9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F8:57:97:DF:6D:26:00:DC:C6:28:B2:16:A9:26:E3:02:D9:D6:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e7b3944-7311-4337-8436-836528b45a90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.6.0/24
Signature Algorithm: sha256WithRSAEncryption
27:4a:f2:11:e8:be:fc:d5:33:8b:f3:31:34:ef:1d:13:4d:c6:
fb:fd:80:16:54:a4:2b:47:97:91:52:aa:83:5e:6a:c4:bc:42:
5a:c4:dc:41:dc:8d:da:f3:09:eb:a6:35:91:4f:1d:ff:3b:8b:
c1:f5:02:f2:38:4f:7c:1b:05:ac:e7:47:18:76:b2:63:48:26:
6e:f7:01:93:c1:c2:31:04:0d:6f:ee:e3:04:1e:82:03:0c:7f:
31:56:eb:1b:a4:1a:79:85:35:9c:e2:a1:6e:62:9a:f6:9e:16:
8a:fe:44:0a:f6:15:dd:a8:f5:6f:35:e4:01:ce:3f:8b:f2:b3:
bb:b7:bc:34:4b:5f:3a:24:a3:5b:c6:8b:ce:a7:23:a6:b7:aa:
e6:e1:a8:4e:dc:bc:c7:6c:83:74:bb:bc:a9:23:46:15:f7:2f:
cb:7d:cc:b5:69:f8:70:5e:5e:18:61:d5:8f:66:19:64:c7:d3:
6e:75:95:e9:ab:25:fb:99:34:1a:92:6f:ea:bb:db:29:5b:a4:
2b:3c:85:78:4f:01:78:51:a1:50:1b:d8:2b:ce:a6:77:55:f6:
8b:47:d4:65:6c:ab:a1:c6:4f:6e:35:95:2f:03:ce:b5:07:49:
59:a7:94:e2:55:94:49:fe:e4:e5:9e:cb:19:a9:d5:0b:9a:1f:
e0:a7:f1:56
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZdsWSLhGUs50uhqgRf1qG51zDQ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA3MDA1MDA1WhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzdhYmZiMzU3ODY0OWY1NGEzNjJkNDEyOGIzMTdlMDE0
YWVhNTNhNWJiMDE5YzQ0MmViMTk4YmVhMGRjZDkzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDPeUlFVmhuDW+N6yhUDUyymq8Xnw1/o+PJQ3PWCt1J+MT
UdcvUBdCZpzmop28SqFe0WfRb0gtyyJhNxMYVJnPuqt4ShyigoWZi/Ma29rq4H8a
G81m6d5TB9jhY55MpqV8ZNHTS9BGjJHpMV0okr7t1o7NTF6+TSwH4ktl9gXBsKpQ
9656WRykVFebircvFucZBX+oDdta3ZA31HgJvEGmMqgiQT4RxGFs3slmTgO6HufO
2RtR0Iuy99aWmH6jwBWaRoh1LsiuTBB4zlvmybZWYe1i/bg7guULVPGgKdOrCkCd
BjTowhOK3T8o2dhuJXOyal1t5EDhkGTxtziTW+lHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUfhXl99tJgDcxiiyFqkm4wLZ1pMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlN2IzOTQ0LTczMTEtNDMzNy04NDM2LTgzNjUyOGI0NWE5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWwYwDQYJKoZIhvcNAQELBQADggEBACdK8hHovvzVM4vzMTTvHRNNxvv9
gBZUpCtHl5FSqoNeasS8QlrE3EHcjdrzCeumNZFPHf87i8H1AvI4T3wbBaznRxh2
smNIJm73AZPBwjEEDW/u4wQeggMMfzFW6xukGnmFNZzioW5imvaeFor+RAr2Fd2o
9W815AHOP4vys7u3vDRLXzoko1vGi86nI6a3qubhqE7cvMdsg3S7vKkjRhX3L8t9
zLVp+HBeXhhh1Y9mGWTH0251lemrJfuZNBqSb+q72ylbpCs8hXhPAXhRoVAb2CvO
pndV9otH1GVsq6HGT241lS8DzrUHSVmnlOJVlEn+5OWeyxmp1QuaH+Cn8VY=
-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:26 2025 by rpki-client