Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16640c32-a06b-4d73-9636-5180d05bfeb7.roa
File: 16640c32-a06b-4d73-9636-5180d05bfeb7.roa (raw, json)
Hash identifier: 8eU5AXlKwgYy1ftlT2ctJMcBIgl/UedYwQNzcGjaMak=
Subject key identifier: 60:15:BD:D8:B0:0E:D2:6F:DD:EB:57:E9:F8:46:11:97:E7:EB:E3:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1934FF18D0B491485B3BF72F0CBEE1A51694CC27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16640c32-a06b-4d73-9636-5180d05bfeb7.roa
Signing time: Sat 18 Oct 2025 02:00:53 +0000
ROA not before: Sat 18 Oct 2025 02:00:53 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:34:ff:18:d0:b4:91:48:5b:3b:f7:2f:0c:be:e1:a5:16:94:cc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 02:00:53 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=ec873a5088276bbd97d4393c99c16227e53ffd80b6470cebd10e40b28d6f92fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f0:70:b8:57:ca:5a:c2:1a:45:fe:42:5e:55:
61:99:f4:7c:b1:f4:09:80:44:cc:28:fe:d2:98:d6:
98:39:b8:1b:4e:c1:c9:d5:ed:af:86:21:55:0a:3b:
c9:df:57:be:9a:e4:ad:f4:c4:6e:5f:51:fc:d5:fd:
ff:78:8a:a2:7a:31:cb:0b:a8:b9:76:68:f0:69:33:
a6:7a:7b:e5:4d:8b:32:b5:8d:8c:0d:bf:ff:a5:0a:
8d:a4:86:91:d9:d0:ef:3a:8e:8e:c3:f7:02:59:36:
15:61:ad:f2:b8:12:56:06:c4:1f:85:fe:8c:d1:af:
2f:df:a8:bf:4f:e4:e6:aa:0c:ed:5e:c9:58:b2:8c:
4e:46:c6:ee:79:55:cf:82:50:c0:32:39:e7:87:8c:
ea:db:28:92:16:28:9b:17:55:14:15:31:2e:57:74:
3f:28:cf:06:4b:54:8f:c3:7d:41:2a:e8:2b:91:29:
5a:7f:d7:4b:0e:82:53:1d:ff:73:b4:a6:ff:63:7e:
35:89:9c:22:c6:3e:02:9e:53:66:1c:e7:11:9a:53:
0e:ee:11:a5:8b:64:4c:9b:32:f9:c2:5c:30:91:3b:
16:bb:2e:cc:fa:3d:db:f7:96:5e:b2:91:7c:e8:2b:
91:18:18:62:9b:c6:04:df:aa:ca:fd:2a:a6:e7:4f:
b5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:BD:D8:B0:0E:D2:6F:DD:EB:57:E9:F8:46:11:97:E7:EB:E3:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16640c32-a06b-4d73-9636-5180d05bfeb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:9e:7c:d3:1e:5c:71:f7:b5:85:e7:fc:d2:6e:13:c1:0b:82:
1d:c6:f0:fd:b0:fd:e3:00:8b:b3:f1:6f:b0:20:eb:e9:b4:0b:
91:ab:0b:d1:c9:91:46:b5:53:44:73:2e:3a:26:1e:cf:20:6c:
cb:ed:bc:2d:e4:70:8a:61:23:26:06:5a:28:42:fe:1f:ff:be:
cb:71:60:c1:70:a0:40:60:12:88:b9:35:92:68:6a:e2:8b:94:
b4:46:51:83:c1:60:73:09:53:4a:f5:d6:61:45:0c:46:01:f8:
10:90:17:b7:a9:0a:19:c7:b1:84:15:d3:59:8f:cf:06:11:e0:
24:75:76:ff:17:4b:d9:b8:04:5f:f0:8e:97:ac:24:d7:bf:2e:
af:a0:23:c0:37:93:fc:9e:ab:a3:7d:5e:e0:11:fa:20:d2:6e:
6d:88:05:3d:58:26:ac:37:19:c4:b5:a5:fd:56:91:3e:c3:31:
22:a9:2d:2c:6b:88:1d:48:b4:4f:43:30:0c:ae:4f:d8:fb:62:
b9:d0:7a:44:a5:8f:b0:66:8e:5c:45:02:b0:71:dd:ef:be:4b:
cd:71:6c:d9:de:a3:31:3a:3d:f7:03:0a:6c:7d:8a:4e:71:e3:
80:10:e2:7a:cd:da:71:d7:b3:71:dd:a1:4a:31:2e:a6:17:ea:
c7:6c:4f:66
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGTT/GNC0kUhbO/cvDL7hpRaUzCcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDIwMDUzWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlYzg3M2E1MDg4Mjc2YmJkOTdkNDM5M2M5OWMxNjIyN2U1
M2ZmZDgwYjY0NzBjZWJkMTBlNDBiMjhkNmY5MmZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCU8HC4V8pawhpF/kJeVWGZ9Hyx9AmARMwo/tKY1pg5uBtO
wcnV7a+GIVUKO8nfV76a5K30xG5fUfzV/f94iqJ6McsLqLl2aPBpM6Z6e+VNizK1
jYwNv/+lCo2khpHZ0O86jo7D9wJZNhVhrfK4ElYGxB+F/ozRry/fqL9P5OaqDO1e
yViyjE5Gxu55Vc+CUMAyOeeHjOrbKJIWKJsXVRQVMS5XdD8ozwZLVI/DfUEq6CuR
KVp/10sOglMd/3O0pv9jfjWJnCLGPgKeU2Yc5xGaUw7uEaWLZEybMvnCXDCROxa7
Lsz6Pdv3ll6ykXzoK5EYGGKbxgTfqsr9KqbnT7VfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYBW92LAO0m/d61fp+EYRl+fr48YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2NjQwYzMyLWEwNmItNGQ3My05NjM2LTUxODBkMDViZmViNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCQkwDQYJKoZIhvcNAQELBQADggEBALyefNMeXHH3tYXn/NJuE8ELgh3G
8P2w/eMAi7Pxb7Ag6+m0C5GrC9HJkUa1U0RzLjomHs8gbMvtvC3kcIphIyYGWihC
/h//vstxYMFwoEBgEoi5NZJoauKLlLRGUYPBYHMJU0r11mFFDEYB+BCQF7epChnH
sYQV01mPzwYR4CR1dv8XS9m4BF/wjpesJNe/Lq+gI8A3k/yeq6N9XuAR+iDSbm2I
BT1YJqw3GcS1pf1WkT7DMSKpLSxriB1ItE9DMAyuT9j7YrnQekSlj7BmjlxFArBx
3e++S81xbNneozE6PfcDCmx9ik5x44AQ4nrN2nHXs3HdoUoxLqYX6sdsT2Y=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:20:09 2025 by rpki-client