Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa
File: 8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa (raw, json)
Hash identifier: 0aFo7Q89xG1n93DSgFFqyuBsRq1jTOtDbC50HAvSRro=
Subject key identifier: F3:B2:EA:AC:F1:01:8D:66:90:42:6C:EE:6B:B9:45:B9:38:19:25:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06C59C3856B771AF5344049DF155542DFF291981
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa
Signing time: Thu 13 Nov 2025 00:30:43 +0000
ROA not before: Thu 13 Nov 2025 00:30:43 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.60.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:c5:9c:38:56:b7:71:af:53:44:04:9d:f1:55:54:2d:ff:29:19:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:30:43 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=c83b8443b0d75bd7d37644ac4f0e6a5b2f2088e787096d69e1d72257317e5439, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:ab:a4:e1:46:06:6f:88:b4:e1:51:b7:d2:
dc:3a:a8:df:91:ee:2c:e3:7b:d1:57:d0:ff:01:5a:
96:3b:78:88:e2:28:6f:29:97:62:4e:1d:7e:56:67:
c1:1f:9d:07:c9:5b:de:4a:f6:0a:1f:21:18:5f:e9:
a5:ff:41:79:19:34:56:fe:7f:dd:22:99:bd:39:4a:
87:d5:43:f0:ba:38:ad:6c:0b:01:44:b4:63:da:a8:
f5:11:7a:90:51:2e:b6:0e:d3:d8:0f:73:73:49:43:
bf:50:3a:f5:86:46:05:1f:96:2b:f0:6c:3b:29:fb:
72:69:2d:bc:18:91:5d:5c:06:c4:17:5b:8f:7c:4e:
a8:89:4c:2d:c7:d3:1a:34:a8:d2:c3:14:9c:e2:1b:
d2:bd:36:81:19:86:d1:fa:60:58:95:58:1d:39:cf:
fb:b9:5e:9e:03:09:59:77:8a:77:ae:bf:ba:ae:a4:
1e:6f:6d:20:6b:15:1d:47:35:71:68:dc:3a:a0:77:
35:52:d4:2b:bc:49:ab:98:ff:4f:8a:38:7f:5b:2c:
85:c8:c9:dd:01:f5:e5:09:3b:7e:c2:f3:b2:76:ca:
63:bf:2b:b6:1a:e3:ce:22:ce:ca:93:ac:02:87:5d:
4e:be:65:27:4b:ad:74:31:ac:7e:7e:91:ba:f9:3c:
0a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:EA:AC:F1:01:8D:66:90:42:6C:EE:6B:B9:45:B9:38:19:25:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a8012-08dd-46d2-a6ee-88911c87f1a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
02:b1:3f:6d:f4:37:d3:a2:eb:71:72:46:fa:1c:54:8d:af:b5:
62:b1:56:e2:3c:28:92:ad:2c:cb:a9:42:eb:1c:bd:c1:7e:fc:
05:11:1f:ac:28:b0:91:db:09:ae:f3:da:32:7d:4e:37:f1:29:
24:5e:02:c6:69:9d:16:a1:66:b8:01:3d:17:cd:20:0b:c1:3c:
71:40:91:59:9e:f7:5b:a9:50:b0:d5:29:3b:2b:cc:e8:b5:9c:
06:bc:47:6b:5e:f5:bb:ad:e9:5d:e9:75:b0:a5:16:7d:3f:1d:
4c:c2:43:c6:99:dd:93:3f:18:e4:64:a2:67:27:97:be:f1:87:
2a:77:54:3a:a0:14:ed:46:7a:14:a9:03:1d:c9:79:74:32:1e:
32:65:00:22:36:a1:ea:26:bc:c7:a8:f9:1b:47:63:a6:1f:78:
78:22:3a:ef:03:8e:e1:cc:b2:bb:f3:26:05:c0:b2:74:fd:df:
77:06:17:a2:a1:a6:32:be:62:dc:f9:cf:22:b5:6d:f1:20:0e:
b6:0c:49:12:ba:27:bf:bc:c2:2c:a4:f6:15:b0:87:fc:47:33:
d9:2f:f4:7a:60:9e:10:cc:c9:42:67:b1:b2:37:ea:3a:98:e6:
a2:c5:8e:16:f5:07:9c:02:32:2e:1f:5b:51:c8:27:41:b6:a6:
be:9b:a9:1d
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBsWcOFa3ca9TRASd8VVULf8pGYEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAzMDQzWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjODNiODQ0M2IwZDc1YmQ3ZDM3NjQ0YWM0ZjBlNmE1YjJm
MjA4OGU3ODcwOTZkNjllMWQ3MjI1NzMxN2U1NDM5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIHquk4UYGb4i04VG30tw6qN+R7izje9FX0P8BWpY7eIji
KG8pl2JOHX5WZ8EfnQfJW95K9gofIRhf6aX/QXkZNFb+f90imb05SofVQ/C6OK1s
CwFEtGPaqPURepBRLrYO09gPc3NJQ79QOvWGRgUflivwbDsp+3JpLbwYkV1cBsQX
W498TqiJTC3H0xo0qNLDFJziG9K9NoEZhtH6YFiVWB05z/u5Xp4DCVl3ineuv7qu
pB5vbSBrFR1HNXFo3DqgdzVS1Cu8SauY/0+KOH9bLIXIyd0B9eUJO37C87J2ymO/
K7Ya484izsqTrAKHXU6+ZSdLrXQxrH5+kbr5PAqHAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU87LqrPEBjWaQQmzua7lFuTgZJdcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhkNmE4MDEyLTA4ZGQtNDZkMi1hNmVlLTg4OTExYzg3ZjFhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4PDANBgkqhkiG9w0BAQsFAAOCAQEAArE/bfQ306LrcXJG+hxUja+1YrFW
4jwokq0sy6lC6xy9wX78BREfrCiwkdsJrvPaMn1ON/EpJF4CxmmdFqFmuAE9F80g
C8E8cUCRWZ73W6lQsNUpOyvM6LWcBrxHa171u63pXel1sKUWfT8dTMJDxpndkz8Y
5GSiZyeXvvGHKndUOqAU7UZ6FKkDHcl5dDIeMmUAIjah6ia8x6j5G0djph94eCI6
7wOO4cyyu/MmBcCydP3fdwYXoqGmMr5i3PnPIrVt8SAOtgxJEronv7zCLKT2FbCH
/Ecz2S/0emCeEMzJQmexsjfqOpjmosWOFvUHnAIyLh9bUcgnQbamvpupHQ==
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:48 2025 by rpki-client