Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41db90e0-ccf3-43b9-b736-50908eeb69cd.roa
File: 41db90e0-ccf3-43b9-b736-50908eeb69cd.roa (raw, json)
Hash identifier: a9qkjgsD4eeAhU2d7decv7rimyOXt/1nJI59x2uer8E=
Subject key identifier: 0F:39:D8:CE:4B:09:24:5B:04:D3:FB:4C:9D:1D:15:9C:A0:14:24:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B3508B878ECEDCD10C28CA1487086BE62F2D362
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41db90e0-ccf3-43b9-b736-50908eeb69cd.roa
Signing time: Tue 14 Oct 2025 22:02:57 +0000
ROA not before: Tue 14 Oct 2025 22:02:57 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:35:08:b8:78:ec:ed:cd:10:c2:8c:a1:48:70:86:be:62:f2:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:02:57 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9ce338eccd6411118f6c0c88aa8552e12e1657672bc90aa1fdd21ddebe8c6962, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ea:7f:66:4f:98:57:62:7b:ec:59:29:df:ed:
ad:c9:de:b9:da:3f:55:17:08:f7:a5:02:72:d2:53:
b0:7c:b2:42:4b:f0:ee:cc:5d:be:92:3d:d8:4b:ea:
87:43:89:82:d8:4a:8f:5b:20:41:b2:ef:7d:87:58:
be:3f:22:fd:3e:bb:4c:a9:e2:30:76:de:42:39:79:
24:a0:6d:8d:f5:a1:92:b3:d9:5a:72:91:51:0c:c3:
b4:cb:d7:75:70:f7:20:dc:5f:4c:d9:40:e9:7d:b6:
e5:a1:b9:29:e7:5b:0c:cd:37:19:9d:86:03:77:be:
f0:91:78:c1:7e:de:84:c2:61:e0:9f:93:63:80:9b:
cb:e4:0d:60:b2:4e:4c:91:eb:8a:da:0f:27:59:1a:
f1:26:37:62:35:ca:e3:7f:b3:44:82:a4:0a:b2:10:
a8:97:f3:9f:2c:ba:74:c3:bd:a8:d1:b3:c1:13:00:
32:16:c1:62:b3:15:49:05:8a:7c:59:0a:19:48:39:
17:54:1a:49:30:3d:51:54:b5:5f:a0:80:c7:a7:c8:
4c:53:04:90:ec:b9:5d:c2:17:6b:7f:97:90:97:8d:
16:d2:06:e1:cb:84:9a:24:50:53:2b:7d:52:ce:1a:
6f:cc:a4:61:8b:62:a1:67:1d:24:1c:4b:cf:5e:6d:
d4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:D8:CE:4B:09:24:5B:04:D3:FB:4C:9D:1D:15:9C:A0:14:24:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/41db90e0-ccf3-43b9-b736-50908eeb69cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.20.0/22
Signature Algorithm: sha256WithRSAEncryption
c8:7c:d2:97:0c:b8:75:f7:a3:48:1d:52:71:12:6c:08:c0:84:
68:07:4a:38:59:6f:1b:f9:12:2e:cf:e2:a9:9e:93:b3:84:b2:
17:60:b1:ad:cf:6c:42:84:9c:80:d2:2f:4b:81:fb:06:9b:25:
01:0e:0d:2d:e1:62:91:58:f1:d3:39:d6:7e:19:3e:b3:84:35:
87:6e:df:65:39:77:b0:18:66:e6:1f:39:ae:a2:9c:9f:e2:13:
23:8a:00:ae:8f:16:3a:62:e2:ae:63:d1:c0:1e:ce:0e:ff:e7:
f5:67:ad:b4:12:18:99:df:3c:c0:05:ef:59:3a:3c:59:5f:ec:
a1:71:39:ff:75:e9:9f:53:3c:62:5a:b1:df:a7:7f:60:6f:80:
97:24:6c:c8:b8:4f:b3:19:50:d5:41:5b:d4:21:dd:f1:d8:bd:
57:29:59:8f:10:66:ac:41:14:5f:5c:66:34:2f:e3:fd:80:1e:
38:3b:f2:7d:e5:e3:73:83:96:da:0d:14:80:21:5c:fa:41:65:
c1:0d:83:14:84:96:fd:cb:50:32:7c:39:d5:7c:ba:4b:1c:89:
59:eb:f7:d9:36:d9:56:5f:72:19:f2:5a:2f:24:21:c0:f0:b0:
b7:f5:7d:2d:66:d8:2f:3b:e2:84:47:02:5d:7d:32:e8:11:b8:
12:14:4b:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSzUIuHjs7c0QwoyhSHCGvmLy02IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIwMjU3WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Y2UzMzhlY2NkNjQxMTExOGY2YzBjODhhYTg1NTJlMTJl
MTY1NzY3MmJjOTBhYTFmZGQyMWRkZWJlOGM2OTYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDp6n9mT5hXYnvsWSnf7a3J3rnaP1UXCPelAnLSU7B8skJL
8O7MXb6SPdhL6odDiYLYSo9bIEGy732HWL4/Iv0+u0yp4jB23kI5eSSgbY31oZKz
2VpykVEMw7TL13Vw9yDcX0zZQOl9tuWhuSnnWwzNNxmdhgN3vvCReMF+3oTCYeCf
k2OAm8vkDWCyTkyR64raDydZGvEmN2I1yuN/s0SCpAqyEKiX858sunTDvajRs8ET
ADIWwWKzFUkFinxZChlIORdUGkkwPVFUtV+ggMenyExTBJDsuV3CF2t/l5CXjRbS
BuHLhJokUFMrfVLOGm/MpGGLYqFnHSQcS89ebdS/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUDznYzksJJFsE0/tMnR0VnKAUJGEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQxZGI5MGUwLWNjZjMtNDNiOS1iNzM2LTUwOTA4ZWViNjljZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjVBQwDQYJKoZIhvcNAQELBQADggEBAMh80pcMuHX3o0gdUnESbAjAhGgH
SjhZbxv5Ei7P4qmek7OEshdgsa3PbEKEnIDSL0uB+wabJQEODS3hYpFY8dM51n4Z
PrOENYdu32U5d7AYZuYfOa6inJ/iEyOKAK6PFjpi4q5j0cAezg7/5/VnrbQSGJnf
PMAF71k6PFlf7KFxOf916Z9TPGJasd+nf2BvgJckbMi4T7MZUNVBW9Qh3fHYvVcp
WY8QZqxBFF9cZjQv4/2AHjg78n3l43ODltoNFIAhXPpBZcENgxSElv3LUDJ8OdV8
uksciVnr99k22VZfchnyWi8kIcDwsLf1fS1m2C874oRHAl19MugRuBIUS88=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:39 2025 by rpki-client