Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa
File: f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa (raw, json)
Hash identifier: kR46eQ/tj4Y6Ug9HcoC2NY+AjMShS9eFo/xhOCicRWA=
Subject key identifier: B9:94:88:4B:7D:A1:E7:EE:B6:5F:DA:C2:15:C6:95:0D:BA:CD:37:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 315C02B323B09006EFE933817B14C658F3F25437
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa
Signing time: Fri 07 Nov 2025 00:50:07 +0000
ROA not before: Fri 07 Nov 2025 00:50:07 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5c:02:b3:23:b0:90:06:ef:e9:33:81:7b:14:c6:58:f3:f2:54:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:07 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=6d8c9ee0c057d3d22dd961c9b5f4cecb1f1aa4784df7abf65ab36ad34c75bc4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e1:12:1f:e3:74:96:45:97:15:b3:b1:58:c8:
5a:80:99:7d:d5:91:23:04:5a:2f:fa:44:ff:f3:84:
26:97:bf:61:55:1f:27:9e:02:06:18:32:a6:b8:55:
33:48:ed:c4:53:2b:c8:81:a0:1a:f6:4d:45:c1:a0:
d5:85:6b:96:78:7a:51:0a:d9:22:08:a0:e3:d9:5f:
dc:5a:2d:04:e7:a4:68:b4:9e:94:73:62:b0:bc:52:
ad:c8:7b:8e:d7:9c:64:86:14:e5:00:dd:f9:4c:b7:
05:34:66:88:88:0a:01:c3:21:41:e1:12:08:26:3e:
92:a8:88:ef:b6:b8:a5:c6:3a:ca:a1:b6:66:09:c6:
32:ae:97:30:0f:53:04:aa:d4:aa:97:f4:75:68:06:
a0:40:60:bf:ed:75:ef:f0:9f:f1:bd:07:2d:00:89:
7a:92:50:40:f2:b4:60:99:77:90:87:d9:f4:51:1c:
06:76:fe:af:68:8b:82:83:3e:6d:af:4a:44:73:67:
de:66:ea:f3:7c:07:8b:10:48:49:c2:a4:da:be:43:
e8:1e:15:be:46:1e:c0:96:fb:d5:ad:06:69:3a:f2:
fe:2c:ac:0c:87:8f:4d:66:70:e8:4c:75:bc:c0:e1:
6d:55:d8:12:d7:a0:b0:50:c4:a7:2f:b6:ad:3b:53:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:94:88:4B:7D:A1:E7:EE:B6:5F:DA:C2:15:C6:95:0D:BA:CD:37:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8708d37-30dd-4bc4-8a9e-e27b02d8da69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.31.0/24
Signature Algorithm: sha256WithRSAEncryption
35:c4:fd:6e:28:e6:31:30:b3:42:71:eb:b9:e4:85:d1:ec:2a:
56:d8:be:36:6f:a2:5a:0e:b4:33:30:2f:8a:f1:82:c0:11:d8:
1d:45:51:08:f3:4b:1b:43:34:92:8a:50:9e:f0:60:47:ad:51:
db:03:e9:e2:c5:1b:e1:6b:59:e2:75:1b:6a:ed:f9:61:c7:99:
26:d8:6a:17:3d:74:09:71:b6:fb:96:16:0c:1f:ca:4a:63:b0:
ff:b3:57:56:78:9b:53:c9:67:78:54:9c:50:dc:29:62:fa:fc:
99:01:03:5f:32:13:31:b4:d4:6c:80:18:4d:a2:dd:3f:5d:5e:
68:ea:ee:3f:55:73:14:4c:9e:28:c4:44:7d:79:d9:29:eb:eb:
5c:5c:69:94:39:cc:f4:dd:20:7c:30:1e:a2:9e:b8:a4:4d:3f:
f1:63:9b:52:85:c8:d0:e2:35:40:d4:5c:b6:d8:72:14:00:66:
49:9c:36:26:76:4a:ee:55:c2:20:ba:ea:52:e5:a7:b1:48:20:
bd:50:cd:a7:81:4e:76:1d:18:57:44:af:fe:d7:3c:07:a1:9e:
e9:cb:13:fc:61:3e:6b:97:b2:9b:cf:9c:ca:66:65:a6:a1:68:
29:a1:dc:1b:2c:a6:75:97:89:01:a0:7b:ef:bb:09:c3:75:29:
7e:a1:40:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMVwCsyOwkAbv6TOBexTGWPPyVDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA3MDA1MDA3WhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDhjOWVlMGMwNTdkM2QyMmRkOTYxYzliNWY0Y2VjYjFm
MWFhNDc4NGRmN2FiZjY1YWIzNmFkMzRjNzViYzRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu4RIf43SWRZcVs7FYyFqAmX3VkSMEWi/6RP/zhCaXv2FV
HyeeAgYYMqa4VTNI7cRTK8iBoBr2TUXBoNWFa5Z4elEK2SIIoOPZX9xaLQTnpGi0
npRzYrC8Uq3Ie47XnGSGFOUA3flMtwU0ZoiICgHDIUHhEggmPpKoiO+2uKXGOsqh
tmYJxjKulzAPUwSq1KqX9HVoBqBAYL/tde/wn/G9By0AiXqSUEDytGCZd5CH2fRR
HAZ2/q9oi4KDPm2vSkRzZ95m6vN8B4sQSEnCpNq+Q+geFb5GHsCW+9WtBmk68v4s
rAyHj01mcOhMdbzA4W1V2BLXoLBQxKcvtq07U3hBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUuZSIS32h5+62X9rCFcaVDbrNN/AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y4NzA4ZDM3LTMwZGQtNGJjNC04YTllLWUyN2IwMmQ4ZGE2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWx8wDQYJKoZIhvcNAQELBQADggEBADXE/W4o5jEws0Jx67nkhdHsKlbY
vjZvoloOtDMwL4rxgsAR2B1FUQjzSxtDNJKKUJ7wYEetUdsD6eLFG+FrWeJ1G2rt
+WHHmSbYahc9dAlxtvuWFgwfykpjsP+zV1Z4m1PJZ3hUnFDcKWL6/JkBA18yEzG0
1GyAGE2i3T9dXmjq7j9VcxRMnijERH152Snr61xcaZQ5zPTdIHwwHqKeuKRNP/Fj
m1KFyNDiNUDUXLbYchQAZkmcNiZ2Su5VwiC66lLlp7FIIL1QzaeBTnYdGFdEr/7X
PAehnunLE/xhPmuXspvPnMpmZaahaCmh3BsspnWXiQGge++7CcN1KX6hQHI=
-----END CERTIFICATE-----
Generated at Tue Nov 18 10:39:37 2025 by rpki-client