Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa
File: e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa (raw, json)
Hash identifier: RyGWIK/Mw9BLh/iF4+gOc3iaQiOifMzGLbf9utanWvw=
Subject key identifier: 63:90:03:52:72:ED:DD:68:55:C2:65:5F:74:61:E4:1F:11:04:8A:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40A7DFD4F94D5ADD7826A02ADB5F5623D267CC89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa
Signing time: Thu 13 Nov 2025 00:30:21 +0000
ROA not before: Thu 13 Nov 2025 00:30:21 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a7:df:d4:f9:4d:5a:dd:78:26:a0:2a:db:5f:56:23:d2:67:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:30:21 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=574efd77e1cede4f8395d6343bfa6b17fce5456b7c6ec640d3979df309ab43d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:a6:ce:5f:a1:a5:ce:b7:02:03:70:34:5b:
15:b5:aa:bb:6a:bd:71:87:22:be:5b:9e:e5:88:da:
39:5b:81:a0:b2:8c:30:4d:40:56:17:80:cd:0c:dc:
3f:9c:e6:f3:dd:1d:57:cf:12:77:78:46:5e:dd:d1:
3f:32:eb:fd:8b:f0:b9:72:73:62:98:58:7f:b3:43:
c9:77:7a:80:d4:ed:c9:de:db:fd:b0:72:e8:16:80:
ec:b2:14:76:28:80:da:84:e8:80:66:2a:c1:15:25:
f9:af:22:b8:6e:45:8a:5b:a1:06:87:c6:8d:f2:47:
aa:c1:39:b6:91:07:9e:8c:4b:72:2c:62:ad:57:b3:
37:24:e1:29:0b:7e:31:ea:b6:73:bf:10:b0:5c:75:
bb:af:32:db:5a:a1:80:9f:27:c2:00:ea:65:61:66:
a1:94:eb:39:94:13:98:e3:b8:61:37:76:88:b3:de:
79:8f:9f:49:3b:04:51:76:4e:87:f4:53:96:58:51:
e1:18:6d:e8:8b:fb:57:4f:e0:8f:4a:8c:94:2f:50:
d2:c1:9a:31:bf:64:52:53:ca:e0:4d:e7:db:7e:c3:
f5:50:10:80:9e:65:bb:2a:b4:5d:a5:3c:3d:b5:c7:
fa:b8:1b:5a:b8:ab:00:56:63:e0:98:ad:f1:bd:62:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:03:52:72:ED:DD:68:55:C2:65:5F:74:61:E4:1F:11:04:8A:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9e1bae2-00e6-4453-8d5f-ae57e062b8e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.141.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:50:2b:a6:52:c0:80:86:1c:bd:6c:b8:c7:74:91:a7:c1:6a:
0f:a0:0a:21:cd:2b:3f:7d:cb:ea:11:29:27:23:9c:93:7f:7f:
48:ea:a7:a7:c1:98:bb:d2:bc:00:ac:34:66:97:90:e7:f1:db:
34:9c:ef:a7:bf:fa:62:d1:66:ed:7d:85:c9:8b:e4:e2:3d:a0:
59:d7:0e:3b:7e:75:62:f4:29:db:69:f1:99:14:43:03:85:3d:
8c:11:b5:9f:b5:b6:64:4f:52:83:52:57:90:9f:0f:77:a0:dd:
3f:e5:1a:da:49:83:fe:04:d4:9e:ef:83:91:13:31:13:99:9a:
5c:b9:98:4f:c6:28:70:3f:4d:7f:39:7b:73:75:15:a7:79:3d:
74:57:c0:d9:3a:e6:0f:f3:4b:63:07:c4:e1:ed:5c:4d:dd:aa:
99:33:d5:a2:76:3b:9f:9e:fa:69:f6:57:f6:c9:73:d4:2d:4a:
33:6d:cd:67:1c:11:49:2b:fd:10:0a:78:90:cb:72:97:e2:ef:
58:2a:77:6d:0b:41:4c:94:fe:40:41:2a:f2:6f:e0:41:4a:92:
1c:f9:1d:49:4b:02:5a:03:2a:fe:b8:ef:80:a6:c9:9c:66:f5:
51:9b:c4:f3:ac:23:b0:02:db:ac:a0:d8:eb:4d:f0:21:91:63:
01:0a:43:f1
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQKff1PlNWt14JqAq219WI9JnzIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEzMDAzMDIxWhcNMjUxMjE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NzRlZmQ3N2UxY2VkZTRmODM5NWQ2MzQzYmZhNmIxN2Zj
ZTU0NTZiN2M2ZWM2NDBkMzk3OWRmMzA5YWI0M2Q5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmRabOX6GlzrcCA3A0WxW1qrtqvXGHIr5bnuWI2jlbgaCy
jDBNQFYXgM0M3D+c5vPdHVfPEnd4Rl7d0T8y6/2L8Llyc2KYWH+zQ8l3eoDU7cne
2/2wcugWgOyyFHYogNqE6IBmKsEVJfmvIrhuRYpboQaHxo3yR6rBObaRB56MS3Is
Yq1Xszck4SkLfjHqtnO/ELBcdbuvMttaoYCfJ8IA6mVhZqGU6zmUE5jjuGE3doiz
3nmPn0k7BFF2Tof0U5ZYUeEYbeiL+1dP4I9KjJQvUNLBmjG/ZFJTyuBN59t+w/VQ
EICeZbsqtF2lPD21x/q4G1q4qwBWY+CYrfG9Yu43AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY5ADUnLt3WhVwmVfdGHkHxEEik0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U5ZTFiYWUyLTAwZTYtNDQ1My04ZDVmLWFlNTdlMDYyYjhlMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFAI0wDQYJKoZIhvcNAQELBQADggEBALxQK6ZSwICGHL1suMd0kafBag+g
CiHNKz99y+oRKScjnJN/f0jqp6fBmLvSvACsNGaXkOfx2zSc76e/+mLRZu19hcmL
5OI9oFnXDjt+dWL0Kdtp8ZkUQwOFPYwRtZ+1tmRPUoNSV5CfD3eg3T/lGtpJg/4E
1J7vg5ETMROZmly5mE/GKHA/TX85e3N1Fad5PXRXwNk65g/zS2MHxOHtXE3dqpkz
1aJ2O5+e+mn2V/bJc9QtSjNtzWccEUkr/RAKeJDLcpfi71gqd20LQUyU/kBBKvJv
4EFKkhz5HUlLAloDKv6474CmyZxm9VGbxPOsI7AC26yg2OtN8CGRYwEKQ/E=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:36:44 2025 by rpki-client