Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa
File: c01ab0fb-a853-4925-93fd-d23412f0342f.roa (raw, json)
Hash identifier: RpYw8KVR+AtdmMQSBz3M7vNbvlQRnIgx5iE2uaU5GUQ=
Subject key identifier: FA:F8:5C:CD:97:9C:5E:A2:CA:37:B3:74:23:AF:88:EF:68:42:D6:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0776811EF53C34E9A57FCCA77528C362B410D997
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa
Signing time: Sun 16 Nov 2025 00:20:09 +0000
ROA not before: Sun 16 Nov 2025 00:20:09 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:76:81:1e:f5:3c:34:e9:a5:7f:cc:a7:75:28:c3:62:b4:10:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:20:09 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=c077633d4cc60763f45d8d04c924cb3a29ba8633e27b584ecd8ae35f4a4f31cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:82:47:2a:27:10:f4:94:3f:b8:6a:a7:93:
48:ce:18:6a:6d:5d:9e:50:e3:49:8d:e0:39:36:a1:
45:15:bf:52:b4:c9:1c:47:00:bd:cd:62:16:cf:f9:
74:4b:e8:d0:50:61:be:c1:34:0c:cc:19:fb:20:c4:
67:40:59:9c:f7:36:b0:55:48:69:dd:75:59:8b:09:
7b:82:6c:f0:16:dd:99:a8:fb:d1:d8:fd:7a:5e:c5:
e7:5e:0b:50:e8:df:8d:b3:d9:ac:c5:1f:0e:3a:e0:
30:16:99:3f:d9:30:38:74:41:3e:c1:42:b5:46:95:
e7:39:20:9d:29:10:b1:b3:7a:2a:41:89:75:ed:6f:
c3:fa:f3:39:0a:c9:09:1a:ba:34:66:54:81:6e:09:
f2:0f:12:82:3a:0c:aa:91:fb:59:25:ef:be:e0:74:
17:75:79:a4:66:4c:63:37:92:31:7a:e5:1c:61:45:
d5:83:0a:f4:5f:63:27:a1:53:f0:dd:92:37:c5:cf:
51:a9:85:c7:4d:8d:a8:87:5f:73:9e:4f:5b:de:c4:
d2:5c:df:5f:66:37:86:ca:e4:68:c8:90:57:34:6c:
2b:f2:22:27:ce:09:0f:b9:76:45:c1:d5:e4:54:20:
d6:0f:89:a3:2a:fb:78:1e:81:be:b1:34:8c:cc:56:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:5C:CD:97:9C:5E:A2:CA:37:B3:74:23:AF:88:EF:68:42:D6:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c01ab0fb-a853-4925-93fd-d23412f0342f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.56.0/24
Signature Algorithm: sha256WithRSAEncryption
16:6c:75:c8:0d:9c:56:5f:5f:e9:1f:49:8f:8a:08:e7:2f:b3:
25:74:98:de:b3:e6:52:35:75:67:b0:6e:32:59:bb:1e:f1:45:
a1:4e:6d:9b:8d:0e:4e:90:c1:b3:21:3d:0c:8a:b1:59:f7:22:
2a:5f:f0:e5:5b:0d:d5:4d:f0:b1:c9:84:a1:24:af:15:dd:70:
8c:d4:d6:8b:a3:e1:ae:1c:44:7e:47:fd:ef:f2:03:19:f2:95:
57:43:e9:7f:5d:b6:45:32:c4:23:c0:ea:ab:d9:98:7f:2c:21:
8d:10:b9:02:28:7e:58:58:23:0f:40:0f:8b:20:01:49:04:fb:
55:5d:47:6f:a7:4f:18:2c:13:e3:e7:28:49:11:9e:aa:b3:94:
fd:07:2f:03:fb:5c:7d:96:d4:cb:8c:d8:62:df:0c:b3:10:14:
08:05:ad:91:61:df:b7:fb:d0:c5:2b:13:1a:cc:19:51:b4:3c:
ba:1a:19:b8:dd:98:ce:a0:4f:e8:a3:f9:71:08:7c:ba:ca:72:
a6:1e:8e:24:5e:f2:bc:1d:21:43:6d:a1:7d:a2:2a:97:b3:ab:
cc:d5:b6:4c:57:98:23:78:d9:54:16:fd:93:0f:fa:98:a9:e7:
a0:76:bd:55:0d:a7:43:31:70:b4:8e:75:5a:80:7a:84:99:fa:
c7:8e:d0:0e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB3aBHvU8NOmlf8yndSjDYrQQ2ZcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE2MDAyMDA5WhcNMjUxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMDc3NjMzZDRjYzYwNzYzZjQ1ZDhkMDRjOTI0Y2IzYTI5
YmE4NjMzZTI3YjU4NGVjZDhhZTM1ZjRhNGYzMWNiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpmIJHKicQ9JQ/uGqnk0jOGGptXZ5Q40mN4Dk2oUUVv1K0
yRxHAL3NYhbP+XRL6NBQYb7BNAzMGfsgxGdAWZz3NrBVSGnddVmLCXuCbPAW3Zmo
+9HY/XpexedeC1Do342z2azFHw464DAWmT/ZMDh0QT7BQrVGlec5IJ0pELGzeipB
iXXtb8P68zkKyQkaujRmVIFuCfIPEoI6DKqR+1kl777gdBd1eaRmTGM3kjF65Rxh
RdWDCvRfYyehU/DdkjfFz1GphcdNjaiHX3OeT1vexNJc319mN4bK5GjIkFc0bCvy
IifOCQ+5dkXB1eRUINYPiaMq+3gegb6xNIzMVo4XAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+vhczZecXqLKN7N0I6+I72hC1l8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwMWFiMGZiLWE4NTMtNDkyNS05M2ZkLWQyMzQxMmYwMzQyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjgwDQYJKoZIhvcNAQELBQADggEBABZsdcgNnFZfX+kfSY+KCOcvsyV0
mN6z5lI1dWewbjJZux7xRaFObZuNDk6QwbMhPQyKsVn3Iipf8OVbDdVN8LHJhKEk
rxXdcIzU1ouj4a4cRH5H/e/yAxnylVdD6X9dtkUyxCPA6qvZmH8sIY0QuQIoflhY
Iw9AD4sgAUkE+1VdR2+nTxgsE+PnKEkRnqqzlP0HLwP7XH2W1MuM2GLfDLMQFAgF
rZFh37f70MUrExrMGVG0PLoaGbjdmM6gT+ij+XEIfLrKcqYejiRe8rwdIUNtoX2i
Kpezq8zVtkxXmCN42VQW/ZMP+pip56B2vVUNp0MxcLSOdVqAeoSZ+seO0A4=
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:27 2025 by rpki-client