Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa
File: cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa (raw, json)
Hash identifier: WXmwgTsXXvm25h/mIciNQAQlnborf2aUrkupFkMdGEE=
Subject key identifier: AA:E4:68:3D:AE:F9:92:7E:71:85:2D:34:22:D3:69:10:62:3E:BA:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E9F94CF191BB882245DE8251A80BFA56FEF2449
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa
Signing time: Fri 03 Oct 2025 00:41:41 +0000
ROA not before: Fri 03 Oct 2025 00:41:41 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 96.0.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9f:94:cf:19:1b:b8:82:24:5d:e8:25:1a:80:bf:a5:6f:ef:24:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:41:41 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=cb70ac9e564e0a4e474b1b978536a3445091bc5bd32092eeab3b389b6037d4c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:8e:22:4f:af:b4:c9:2b:b2:fc:02:0c:3b:
0b:95:f8:ec:89:a5:f4:01:e0:7e:88:48:52:05:6d:
53:d1:8f:73:3d:65:57:5e:93:6c:4a:88:9d:71:c2:
71:83:ad:e8:fe:58:8f:5e:30:e3:7c:37:72:44:ab:
eb:4e:9d:aa:78:82:36:4f:b6:08:31:9f:dc:50:02:
a8:38:ad:62:98:67:88:9c:21:64:99:2b:6c:3e:fc:
26:ef:af:d8:36:b9:06:af:50:d2:cd:65:6e:bd:ed:
55:62:31:27:8a:5a:7b:91:41:ca:37:d9:c4:e4:41:
e3:d9:3c:83:0e:24:69:6c:f0:ee:f9:21:37:b0:ce:
c4:8f:79:fd:2b:8c:67:44:2a:6c:9f:c4:ca:2f:37:
8b:82:3e:16:34:cc:e4:1c:9c:25:6e:1e:f6:92:5a:
b9:57:9f:99:3b:05:69:d7:d7:a4:4a:7b:ce:08:4d:
32:5e:bd:c2:88:8b:ec:08:8f:c8:65:b0:75:c5:de:
80:19:78:4a:da:d1:93:f7:68:b3:5e:6a:9e:57:d0:
4c:e4:6f:56:31:e3:1e:17:88:b1:eb:90:a6:25:16:
19:81:ee:73:1c:c3:ad:4a:c0:ea:b9:af:cf:ce:7b:
16:97:b6:9d:22:b0:a9:1c:0f:02:d9:a8:42:78:85:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E4:68:3D:AE:F9:92:7E:71:85:2D:34:22:D3:69:10:62:3E:BA:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cc5cd5cf-3949-4b2d-9b8e-f2e740346129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.131.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:9a:b6:6a:6b:72:e0:e9:41:09:e7:94:2d:eb:9f:d8:1b:27:
b1:ea:4a:3b:1e:54:5a:08:47:dd:f6:bb:20:90:bc:5d:f8:31:
c9:89:16:5a:9f:a5:ff:c3:d5:9e:d3:92:48:74:bd:dd:0d:bd:
de:ed:99:a5:5f:f2:f5:56:9d:ff:b9:0e:b1:9c:9c:7c:21:60:
d3:4f:4b:04:6c:d8:2b:c0:47:b8:9b:b7:f7:92:3e:62:74:5a:
a5:46:31:51:25:89:b4:35:6f:3b:2b:ca:4c:03:70:02:74:95:
ae:4e:12:ca:bf:f7:9d:cf:4c:99:03:1a:09:95:e2:7d:25:b6:
88:30:4d:da:50:dd:20:fd:13:73:08:9f:ea:5a:f3:81:2a:bf:
b5:d2:f8:f8:ca:a1:c6:2e:e3:6e:a7:8b:d2:b0:61:f6:af:fa:
80:fd:39:6a:dc:e0:24:ab:88:5e:75:19:89:16:65:b4:ea:a7:
ad:ee:a5:22:06:4b:12:ee:e7:0b:e4:76:8a:82:bb:03:3b:a6:
50:72:d4:95:57:9d:17:bd:21:2f:a3:58:0c:33:00:24:3b:8b:
b2:fc:13:17:f3:ae:3b:63:36:ae:f1:50:b1:95:15:f9:ab:76:
1b:d8:0d:8d:e9:d6:4e:82:89:61:d4:92:f1:86:33:63:13:62:
08:53:13:5f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTp+UzxkbuIIkXeglGoC/pW/vJEkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDA0MTQxWhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYjcwYWM5ZTU2NGUwYTRlNDc0YjFiOTc4NTM2YTM0NDUw
OTFiYzViZDMyMDkyZWVhYjNiMzg5YjYwMzdkNGMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKNY4iT6+0ySuy/AIMOwuV+OyJpfQB4H6ISFIFbVPRj3M9
ZVdek2xKiJ1xwnGDrej+WI9eMON8N3JEq+tOnap4gjZPtggxn9xQAqg4rWKYZ4ic
IWSZK2w+/Cbvr9g2uQavUNLNZW697VViMSeKWnuRQco32cTkQePZPIMOJGls8O75
ITewzsSPef0rjGdEKmyfxMovN4uCPhY0zOQcnCVuHvaSWrlXn5k7BWnX16RKe84I
TTJevcKIi+wIj8hlsHXF3oAZeEra0ZP3aLNeap5X0Ezkb1Yx4x4XiLHrkKYlFhmB
7nMcw61KwOq5r8/OexaXtp0isKkcDwLZqEJ4hT2FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUquRoPa75kn5xhS00ItNpEGI+uvYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjNWNkNWNmLTM5NDktNGIyZC05YjhlLWYyZTc0MDM0NjEyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABgAIMwDQYJKoZIhvcNAQELBQADggEBAMSatmprcuDpQQnnlC3rn9gbJ7Hq
SjseVFoIR932uyCQvF34McmJFlqfpf/D1Z7Tkkh0vd0Nvd7tmaVf8vVWnf+5DrGc
nHwhYNNPSwRs2CvAR7ibt/eSPmJ0WqVGMVElibQ1bzsrykwDcAJ0la5OEsq/953P
TJkDGgmV4n0ltogwTdpQ3SD9E3MIn+pa84Eqv7XS+PjKocYu426ni9KwYfav+oD9
OWrc4CSriF51GYkWZbTqp63upSIGSxLu5wvkdoqCuwM7plBy1JVXnRe9IS+jWAwz
ACQ7i7L8ExfzrjtjNq7xULGVFfmrdhvYDY3p1k6CiWHUkvGGM2MTYghTE18=
-----END CERTIFICATE-----
Generated at Wed Oct 8 19:45:04 2025 by rpki-client