Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
File: 53ccc235-9729-41cb-9421-026c1d944b56.roa (raw, json)
Hash identifier: YLyPB2g61zUgOb7PL/pmPxVTPdwiSIPnYBMD1mSmCjw=
Subject key identifier: E5:4E:E8:E2:B8:59:74:34:D0:88:40:72:28:51:FD:B0:B6:13:D6:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 123B0083F0A2073A6B15432F1B306EDA8C275144
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
Signing time: Tue 14 Oct 2025 18:02:03 +0000
ROA not before: Tue 14 Oct 2025 18:02:03 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:3b:00:83:f0:a2:07:3a:6b:15:43:2f:1b:30:6e:da:8c:27:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 18:02:03 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=32af83da7bf37d7fecc38dfd00798b700111576738231e107827af1f71be6eb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:56:88:02:96:ef:20:75:a5:d6:03:cd:f3:e4:
ae:7f:15:3f:9b:d6:1a:e2:a2:57:fa:c3:ba:59:9e:
53:0b:33:f1:9c:c2:02:a6:dd:df:25:7c:5c:c1:ad:
be:b9:8d:d9:5a:64:9d:a2:cf:75:87:48:91:8e:7c:
26:1a:15:18:3d:26:37:50:1c:81:b2:2d:56:96:48:
ad:15:3f:ff:40:f0:3e:96:7f:d0:59:fe:30:cc:dd:
69:5c:2c:e9:8a:97:63:06:38:70:ee:de:a1:4a:63:
e4:1e:a9:ad:7a:8b:80:fc:80:77:eb:da:34:64:27:
96:04:e0:01:f6:0b:d7:cb:f0:fe:dc:5f:c3:ca:50:
17:0a:0b:15:65:bc:96:8f:a4:aa:cf:6d:a9:7e:21:
be:fc:44:d7:98:0e:d0:2a:65:f9:bd:70:a3:e0:55:
b6:9a:08:f1:45:0b:65:4d:d1:02:57:fa:4b:bf:e1:
7b:f6:1c:fb:77:9e:db:be:89:4c:54:4b:2d:ec:74:
ad:29:36:01:0f:fa:a3:7d:67:cf:6e:03:7e:18:18:
1e:3c:f3:90:a2:83:20:b1:95:37:43:31:cc:6e:fe:
7b:6e:dd:a9:80:f1:e2:47:df:e3:76:c6:75:5d:b4:
7b:82:70:21:98:5b:d2:66:c2:da:4f:8f:1b:9f:16:
00:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:E8:E2:B8:59:74:34:D0:88:40:72:28:51:FD:B0:B6:13:D6:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53ccc235-9729-41cb-9421-026c1d944b56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.79.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:37:7d:f0:4c:58:5f:85:3a:16:f8:20:90:9e:3e:e2:89:f4:
80:e0:fc:70:81:f7:3c:33:b5:dd:4d:a8:7a:2e:7e:b5:f2:01:
d0:e6:a4:1c:cf:70:c5:ff:c0:e8:f3:f2:71:e4:25:47:5d:cd:
d3:93:c1:c4:90:12:9b:31:cf:68:52:e4:c4:26:f1:88:99:b1:
49:07:92:92:5c:2b:cc:02:a4:b1:5d:65:90:2e:a3:bd:e8:57:
97:45:34:ad:6e:15:7c:cd:01:69:04:7f:7c:49:38:d5:a0:a9:
0f:2f:c0:7d:e5:3e:2a:e6:38:de:81:9f:45:e8:4f:ac:05:52:
0e:0b:2a:6a:ba:e0:59:36:cf:35:0f:44:f0:ff:97:9f:6e:40:
47:10:43:30:18:01:87:ae:40:92:c4:1b:7d:dd:27:c6:3a:cf:
b0:23:dd:2a:9e:0b:c3:65:74:b1:f2:27:2e:a6:31:4d:53:51:
6c:de:ff:aa:03:5a:d1:32:cc:57:ea:1f:2f:4f:05:4e:26:8d:
f4:28:ee:e3:09:04:09:91:30:8a:03:97:38:26:11:49:6a:81:
7b:8c:5e:1f:59:f6:0a:e0:9c:8f:ea:38:17:e6:72:23:80:07:
d4:60:d6:4c:a4:5b:a3:f1:c4:17:e6:63:a0:ce:2a:f9:bd:fb:
67:6a:6c:e7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEjsAg/CiBzprFUMvGzBu2ownUUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTgwMjAzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMmFmODNkYTdiZjM3ZDdmZWNjMzhkZmQwMDc5OGI3MDAx
MTE1NzY3MzgyMzFlMTA3ODI3YWYxZjcxYmU2ZWI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxVogClu8gdaXWA83z5K5/FT+b1hriolf6w7pZnlMLM/Gc
wgKm3d8lfFzBrb65jdlaZJ2iz3WHSJGOfCYaFRg9JjdQHIGyLVaWSK0VP/9A8D6W
f9BZ/jDM3WlcLOmKl2MGOHDu3qFKY+Qeqa16i4D8gHfr2jRkJ5YE4AH2C9fL8P7c
X8PKUBcKCxVlvJaPpKrPbal+Ib78RNeYDtAqZfm9cKPgVbaaCPFFC2VN0QJX+ku/
4Xv2HPt3ntu+iUxUSy3sdK0pNgEP+qN9Z89uA34YGB4885CigyCxlTdDMcxu/ntu
3amA8eJH3+N2xnVdtHuCcCGYW9JmwtpPjxufFgBHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5U7o4rhZdDTQiEByKFH9sLYT1kQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzY2NjMjM1LTk3MjktNDFjYi05NDIxLTAyNmMxZDk0NGI1Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmE8wDQYJKoZIhvcNAQELBQADggEBAD83ffBMWF+FOhb4IJCePuKJ9IDg
/HCB9zwztd1NqHoufrXyAdDmpBzPcMX/wOjz8nHkJUddzdOTwcSQEpsxz2hS5MQm
8YiZsUkHkpJcK8wCpLFdZZAuo73oV5dFNK1uFXzNAWkEf3xJONWgqQ8vwH3lPirm
ON6Bn0XoT6wFUg4LKmq64Fk2zzUPRPD/l59uQEcQQzAYAYeuQJLEG33dJ8Y6z7Aj
3SqeC8NldLHyJy6mMU1TUWze/6oDWtEyzFfqHy9PBU4mjfQo7uMJBAmRMIoDlzgm
EUlqgXuMXh9Z9grgnI/qOBfmciOAB9Rg1kykW6PxxBfmY6DOKvm9+2dqbOc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:46 2025 by rpki-client