Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad26514d-8187-459d-8ba0-9068a8aa315b.roa
File: ad26514d-8187-459d-8ba0-9068a8aa315b.roa (raw, json)
Hash identifier: rcBES7ePPC420N2QywgPwKxuWSCDGUmIM5oNCU8+ZsY=
Subject key identifier: 1A:BB:03:05:A2:30:1A:F8:69:D3:FA:1B:C0:06:BC:A8:37:83:F6:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 032345274D58DB926190132E01BD0A7CBDA5DEE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad26514d-8187-459d-8ba0-9068a8aa315b.roa
Signing time: Sat 18 Oct 2025 04:50:52 +0000
ROA not before: Sat 18 Oct 2025 04:50:52 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:23:45:27:4d:58:db:92:61:90:13:2e:01:bd:0a:7c:bd:a5:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:50:52 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=7f65fc542b7e36f2bb8aa91e0cc95c8151203a96b5e6118ed4b1fc1ee01db6b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:12:c3:ea:99:e6:10:8c:ae:8d:4c:d7:71:54:
12:0d:d1:91:9b:ae:1f:66:3a:a7:3b:0d:3d:9c:a5:
a6:2e:0c:e0:a4:ce:98:43:95:23:44:f8:16:65:e3:
b1:30:a4:c9:a8:0a:db:71:97:33:c1:d0:83:3d:79:
2c:bc:e6:2b:be:ab:86:df:a4:a5:40:82:fe:95:3a:
c0:91:4e:32:97:2f:78:56:67:88:99:33:ae:b2:cf:
eb:23:cb:e1:85:f3:79:c6:a4:fd:2e:da:4b:3a:1d:
1f:8e:6b:aa:bd:3b:32:7f:99:84:d7:fe:2c:3c:97:
0e:1b:17:cb:24:6e:ac:40:7d:4b:6b:e0:07:87:cd:
87:9e:b2:37:a6:44:36:f1:1d:c8:69:54:86:1a:8e:
ff:59:44:a7:43:20:b4:4e:d0:89:b5:4c:23:6e:f6:
fe:2d:99:35:75:c4:36:d3:52:81:c5:55:a0:a5:32:
54:d7:85:0f:ff:bb:b6:a7:be:29:a3:5d:37:da:42:
02:31:89:c6:0a:6e:30:83:eb:6e:b6:1c:f9:6c:d6:
56:27:ed:b6:e5:2c:5e:c2:0b:b1:12:9b:b5:a4:7c:
42:d7:ca:e1:74:06:92:ea:e0:97:23:ee:34:a9:11:
82:54:44:62:7b:ae:d9:50:51:ef:70:25:16:25:ac:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:03:05:A2:30:1A:F8:69:D3:FA:1B:C0:06:BC:A8:37:83:F6:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad26514d-8187-459d-8ba0-9068a8aa315b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.118.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4f:41:8e:af:30:cc:e9:6b:e9:b8:93:94:b4:5b:0e:12:23:
a7:28:b6:5e:2e:96:4a:9e:63:ca:2b:1a:96:72:b5:94:23:8a:
e4:38:d2:f6:ee:c5:1d:d3:24:07:8f:59:8d:58:43:e9:03:a9:
f6:00:e4:12:b7:ce:b2:cb:f4:44:6b:b7:62:d3:c8:05:ac:51:
05:c7:40:b7:bc:75:cc:48:18:cf:56:ba:85:77:de:cb:8d:40:
9e:90:1a:f4:d4:9e:f7:f2:99:e6:33:11:1a:a2:2d:ff:d2:e4:
cb:19:ec:4b:47:bd:7f:d5:8a:ea:02:11:ea:ff:9a:22:a2:7c:
8d:17:58:0d:75:02:2c:2c:e9:8a:88:98:65:a3:ed:0a:dc:7b:
75:d9:ed:37:d3:80:40:04:04:ca:69:ed:ef:ff:77:14:7d:44:
02:3e:e2:20:46:55:2e:5f:d9:cf:7a:4e:80:6d:3c:1d:04:d5:
36:d4:ad:fe:4b:cf:51:15:1e:67:17:9e:59:37:f8:65:c2:2e:
4b:d5:b3:64:34:07:43:d7:05:ce:18:0d:cd:9e:f1:fc:cf:f0:
df:b3:2c:fd:25:a2:d9:0c:78:98:18:44:2d:46:da:90:06:8b:
af:b3:ca:6b:b2:71:b6:66:7b:00:5f:e7:f6:00:4d:6d:84:9f:
99:cf:53:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAyNFJ01Y25JhkBMuAb0KfL2l3uIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQ1MDUyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3ZjY1ZmM1NDJiN2UzNmYyYmI4YWE5MWUwY2M5NWM4MTUx
MjAzYTk2YjVlNjExOGVkNGIxZmMxZWUwMWRiNmI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdEsPqmeYQjK6NTNdxVBIN0ZGbrh9mOqc7DT2cpaYuDOCk
zphDlSNE+BZl47EwpMmoCttxlzPB0IM9eSy85iu+q4bfpKVAgv6VOsCRTjKXL3hW
Z4iZM66yz+sjy+GF83nGpP0u2ks6HR+Oa6q9OzJ/mYTX/iw8lw4bF8skbqxAfUtr
4AeHzYeesjemRDbxHchpVIYajv9ZRKdDILRO0Im1TCNu9v4tmTV1xDbTUoHFVaCl
MlTXhQ//u7anvimjXTfaQgIxicYKbjCD6262HPls1lYn7bblLF7CC7ESm7WkfELX
yuF0BpLq4Jcj7jSpEYJURGJ7rtlQUe9wJRYlrBJRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGrsDBaIwGvhp0/obwAa8qDeD9jswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkMjY1MTRkLTgxODctNDU5ZC04YmEwLTkwNjhhOGFhMzE1Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCXYwDQYJKoZIhvcNAQELBQADggEBAJNPQY6vMMzpa+m4k5S0Ww4SI6co
tl4ulkqeY8orGpZytZQjiuQ40vbuxR3TJAePWY1YQ+kDqfYA5BK3zrLL9ERrt2LT
yAWsUQXHQLe8dcxIGM9WuoV33suNQJ6QGvTUnvfymeYzERqiLf/S5MsZ7EtHvX/V
iuoCEer/miKifI0XWA11Aiws6YqImGWj7Qrce3XZ7TfTgEAEBMpp7e//dxR9RAI+
4iBGVS5f2c96ToBtPB0E1TbUrf5Lz1EVHmcXnlk3+GXCLkvVs2Q0B0PXBc4YDc2e
8fzP8N+zLP0lotkMeJgYRC1G2pAGi6+zymuycbZmewBf5/YATW2En5nPUzg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:33 2025 by rpki-client