Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa
File: 961075b0-0601-4672-a02a-3745102a7d23.roa (raw, json)
Hash identifier: YcJOqNJWR4+lm/KOqShPV6sm3yJMJuGlu9xWAR+E4DI=
Subject key identifier: 9F:18:A4:34:BE:B3:86:49:58:E0:42:A7:48:71:CD:4C:37:DD:67:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 469500D52D688DB82BBC6F32A9554E4C7DF27656
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa
Signing time: Mon 22 Sep 2025 15:50:25 +0000
ROA not before: Mon 22 Sep 2025 15:50:25 +0000
ROA not after: Mon 27 Oct 2025 23:59:59 +0000
asID: 14618
IP address blocks: 16.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:95:00:d5:2d:68:8d:b8:2b:bc:6f:32:a9:55:4e:4c:7d:f2:76:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 22 15:50:25 2025 GMT
Not After : Oct 27 23:59:59 2025 GMT
Subject: serialNumber=87eb902a447ccf8c8f31739ca30207ea6677c18d80d590d45ac2de08fbbae96d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:b9:2d:20:43:b0:26:e0:d0:3c:e8:1f:35:
61:0f:30:eb:9c:d9:ab:5f:4e:7d:95:5d:57:21:b1:
8d:af:48:6a:15:48:98:8a:19:b6:99:03:51:e3:15:
12:f0:5f:74:39:d3:ee:09:a8:48:fc:31:6a:cd:1c:
b7:38:52:8f:8d:29:f0:e6:1f:a6:9e:b6:97:05:2b:
b3:e0:6c:fb:25:78:5d:ba:e1:00:a6:16:26:3b:cb:
c1:1f:2f:97:47:5e:6d:1c:ff:86:3a:a2:fd:ff:93:
53:11:36:e7:8a:6e:d6:21:e1:fc:de:a9:13:05:fc:
94:01:94:fc:f9:29:6d:ed:d7:54:37:5d:8e:f5:d0:
fd:44:73:f2:cd:3b:6c:03:db:54:39:29:e4:3a:b8:
ad:81:16:6f:fb:a1:76:85:cc:24:f4:bc:d9:5f:3a:
87:24:a7:68:32:94:77:2f:1b:20:58:f0:14:6c:d0:
ed:60:80:95:c3:f3:b5:ec:e8:83:b6:0a:6b:1e:35:
4c:13:87:96:49:ee:82:9d:b2:74:14:a1:dc:14:0a:
0a:69:b9:f6:24:0f:45:a2:24:26:ac:35:83:c5:3c:
de:85:e6:f1:5b:d9:3d:46:53:3f:cf:93:2e:5b:06:
08:bd:ca:14:d8:8e:f6:c1:d7:9e:cf:f9:6d:ea:d0:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:A4:34:BE:B3:86:49:58:E0:42:A7:48:71:CD:4C:37:DD:67:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/961075b0-0601-4672-a02a-3745102a7d23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
80:d2:a2:06:60:cf:17:12:77:50:38:38:cf:ce:82:9f:fd:a0:
4e:88:e9:1b:b5:06:95:a1:b5:b7:6d:70:1d:96:78:48:48:55:
70:1b:b6:a7:28:e0:0b:45:c9:31:da:06:91:01:c2:2e:7f:16:
0b:28:a2:19:73:78:66:75:d2:d5:3e:dd:4a:27:00:f9:6b:5e:
c0:97:b8:53:36:8b:a2:2b:39:22:9f:8b:32:c2:3a:52:78:89:
5f:27:87:b2:92:4b:59:82:27:f1:8b:a2:87:07:33:cb:a3:e6:
7d:f5:fe:d6:15:12:22:85:84:ba:95:3d:d6:66:d0:52:38:f5:
93:48:3c:ee:06:3f:89:6c:cc:6d:35:fd:3d:a0:42:63:60:90:
30:94:52:21:5e:62:8e:ba:e7:25:02:f0:33:07:15:c2:d7:6f:
9e:f7:9d:29:23:be:c1:83:29:d0:c0:67:c8:7b:87:0d:ef:c0:
d6:8b:1a:d4:76:2b:9b:7b:fc:89:fb:58:70:7d:6b:9a:4b:6b:
9f:df:ad:e6:ea:30:eb:45:fa:01:77:6f:de:15:60:c6:a2:b7:
f5:f1:83:18:c0:cd:49:20:4c:c0:83:4a:e9:de:61:1d:08:cf:
f0:e8:30:ae:96:1f:e8:fd:24:9b:05:ea:a6:18:3a:65:49:c8:
b2:6e:fe:77
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURpUA1S1ojbgrvG8yqVVOTH3ydlYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTIyMTU1MDI1WhcNMjUxMDI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4N2ViOTAyYTQ0N2NjZjhjOGYzMTczOWNhMzAyMDdlYTY2
NzdjMThkODBkNTkwZDQ1YWMyZGUwOGZiYmFlOTZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwbbktIEOwJuDQPOgfNWEPMOuc2atfTn2VXVchsY2vSGoV
SJiKGbaZA1HjFRLwX3Q50+4JqEj8MWrNHLc4Uo+NKfDmH6aetpcFK7PgbPsleF26
4QCmFiY7y8EfL5dHXm0c/4Y6ov3/k1MRNueKbtYh4fzeqRMF/JQBlPz5KW3t11Q3
XY710P1Ec/LNO2wD21Q5KeQ6uK2BFm/7oXaFzCT0vNlfOockp2gylHcvGyBY8BRs
0O1ggJXD87Xs6IO2CmseNUwTh5ZJ7oKdsnQUodwUCgppufYkD0WiJCasNYPFPN6F
5vFb2T1GUz/Pky5bBgi9yhTYjvbB157P+W3q0KmPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUnxikNL6zhklY4EKnSHHNTDfdZ+MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk2MTA3NWIwLTA2MDEtNDY3Mi1hMDJhLTM3NDUxMDJhN2QyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQazANBgkqhkiG9w0BAQsFAAOCAQEAgNKiBmDPFxJ3UDg4z86Cn/2gTojp
G7UGlaG1t21wHZZ4SEhVcBu2pyjgC0XJMdoGkQHCLn8WCyiiGXN4ZnXS1T7dSicA
+WtewJe4UzaLois5Ip+LMsI6UniJXyeHspJLWYIn8Yuihwczy6PmffX+1hUSIoWE
upU91mbQUjj1k0g87gY/iWzMbTX9PaBCY2CQMJRSIV5ijrrnJQLwMwcVwtdvnved
KSO+wYMp0MBnyHuHDe/A1osa1HYrm3v8iftYcH1rmktrn9+t5uow60X6AXdv3hVg
xqK39fGDGMDNSSBMwINK6d5hHQjP8OgwrpYf6P0kmwXqphg6ZUnIsm7+dw==
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:53 2025 by rpki-client