Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089efa17-6763-42ee-bd08-501795ddbc37.roa
File: 089efa17-6763-42ee-bd08-501795ddbc37.roa (raw, json)
Hash identifier: U4dHB5SThHdDtye8Zua6Mhay6cIFFJMFEV3l6zVwPZc=
Subject key identifier: FA:93:3B:A4:D5:43:15:14:4B:52:70:CB:4A:51:C5:09:46:19:1A:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 29057D76EF451701C6FD2F469A9A582F7599D71C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089efa17-6763-42ee-bd08-501795ddbc37.roa
Signing time: Sat 18 Oct 2025 03:30:20 +0000
ROA not before: Sat 18 Oct 2025 03:30:20 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:05:7d:76:ef:45:17:01:c6:fd:2f:46:9a:9a:58:2f:75:99:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 03:30:20 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=635e01c2ba974fc9dddbe78309388ca3680aab77a3706e019668cbe99b092026, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:17:f2:f3:6c:e7:30:14:02:99:56:77:58:
29:67:2c:3f:c2:fe:37:f0:ad:99:0b:36:04:8f:5b:
e0:c6:98:ec:d1:d7:ff:89:32:da:f2:10:5e:4f:57:
59:fd:cb:57:86:ea:cd:19:64:07:4b:16:2c:7a:33:
15:e1:63:ee:ff:68:16:21:ef:b2:27:e7:c4:c0:cb:
60:27:6d:98:2a:35:e2:c7:9d:1f:85:05:c2:24:58:
23:4d:f8:09:6b:45:7e:3a:fc:a3:f7:d7:6a:71:9f:
af:39:6b:d8:2a:9d:06:a7:43:62:f2:ac:9f:0a:27:
5b:d8:2a:38:58:11:03:be:ba:d9:94:29:cc:37:f1:
6d:54:64:a1:3c:cb:ee:34:7d:8f:ef:86:29:22:db:
36:aa:63:19:c3:f0:8b:b4:97:25:1a:2e:3f:c0:de:
ef:eb:54:e2:74:41:f3:58:5a:07:75:93:9a:51:0b:
c1:60:a9:d6:ed:93:5e:84:e8:34:a1:ad:60:be:15:
14:1a:15:c1:4d:92:20:17:a4:da:01:0a:cd:f6:3e:
7e:09:20:b2:8a:e5:2c:15:36:83:11:a4:b0:e6:4f:
f9:1f:8f:bb:a9:e6:1f:ab:dd:1a:22:84:eb:26:68:
e9:87:ab:ba:e7:20:6f:d7:44:ae:b3:16:89:75:f9:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:93:3B:A4:D5:43:15:14:4B:52:70:CB:4A:51:C5:09:46:19:1A:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089efa17-6763-42ee-bd08-501795ddbc37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.164.0/23
Signature Algorithm: sha256WithRSAEncryption
76:e4:b8:20:f4:cd:23:92:80:1d:78:c4:99:21:dc:08:d6:d0:
83:74:a0:70:e5:88:85:f2:95:32:21:c4:33:3c:eb:ac:fa:ec:
5d:00:b0:2a:db:6c:be:98:7c:83:ea:29:32:c6:c3:f4:91:6e:
06:e6:61:80:af:5c:45:51:b8:dd:8c:07:fb:31:b5:5a:c3:1d:
82:16:48:2b:6c:f4:29:e1:4b:1f:a0:f5:b5:19:fc:76:77:f4:
be:da:fe:10:8f:3d:7f:75:b9:61:e5:cc:53:90:65:b2:8b:7c:
8a:9d:b5:d1:8e:94:2f:c8:96:ea:e7:9d:ad:3a:cb:14:45:92:
71:65:05:f2:6a:ea:16:eb:74:a2:20:bb:83:3a:0e:b5:ee:a1:
97:88:5b:c5:0d:0c:95:60:47:7a:69:0b:01:05:64:14:ed:89:
56:89:55:e9:65:e7:b2:4c:7d:5a:b5:f6:af:5a:63:99:78:28:
47:96:07:39:a2:f1:55:42:a1:a7:01:27:59:5a:db:66:bb:eb:
a9:75:e5:8a:05:42:a3:76:c0:38:73:07:7f:5c:89:9d:14:ce:
f9:5f:61:77:1d:be:3b:51:c1:71:ef:76:1e:d5:93:a6:6e:94:
be:1e:0b:e1:26:f9:6c:40:e0:bb:34:ce:79:db:f9:fa:06:39:
9e:8c:61:db
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKQV9du9FFwHG/S9GmppYL3WZ1xwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDMzMDIwWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzVlMDFjMmJhOTc0ZmM5ZGRkYmU3ODMwOTM4OGNhMzY4
MGFhYjc3YTM3MDZlMDE5NjY4Y2JlOTliMDkyMDI2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4zxfy82znMBQCmVZ3WClnLD/C/jfwrZkLNgSPW+DGmOzR
1/+JMtryEF5PV1n9y1eG6s0ZZAdLFix6MxXhY+7/aBYh77In58TAy2AnbZgqNeLH
nR+FBcIkWCNN+AlrRX46/KP312pxn685a9gqnQanQ2LyrJ8KJ1vYKjhYEQO+utmU
Kcw38W1UZKE8y+40fY/vhiki2zaqYxnD8Iu0lyUaLj/A3u/rVOJ0QfNYWgd1k5pR
C8Fgqdbtk16E6DShrWC+FRQaFcFNkiAXpNoBCs32Pn4JILKK5SwVNoMRpLDmT/kf
j7up5h+r3RoihOsmaOmHq7rnIG/XRK6zFol1+QXdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+pM7pNVDFRRLUnDLSlHFCUYZGjgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4OWVmYTE3LTY3NjMtNDJlZS1iZDA4LTUwMTc5NWRkYmMzNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFBCaQwDQYJKoZIhvcNAQELBQADggEBAHbkuCD0zSOSgB14xJkh3AjW0IN0
oHDliIXylTIhxDM866z67F0AsCrbbL6YfIPqKTLGw/SRbgbmYYCvXEVRuN2MB/sx
tVrDHYIWSCts9CnhSx+g9bUZ/HZ39L7a/hCPPX91uWHlzFOQZbKLfIqdtdGOlC/I
lurnna06yxRFknFlBfJq6hbrdKIgu4M6DrXuoZeIW8UNDJVgR3ppCwEFZBTtiVaJ
Vell57JMfVq19q9aY5l4KEeWBzmi8VVCoacBJ1la22a766l15YoFQqN2wDhzB39c
iZ0UzvlfYXcdvjtRwXHvdh7Vk6ZulL4eC+Em+WxA4Ls0znnb+foGOZ6MYds=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:30 2025 by rpki-client