Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b852b9-f7ed-445d-82c6-9caa807d513f.roa
File: f5b852b9-f7ed-445d-82c6-9caa807d513f.roa (raw, json)
Hash identifier: XXVCmN7X9jOlidf0rT3ztEMbaZ9IdX+Q5jP1DFzWBDU=
Subject key identifier: 23:AA:77:16:12:C1:80:41:0C:B0:DB:7F:0B:57:D7:05:3C:BC:1D:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69918A297A3930C859469B3164BCE399A757BF82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b852b9-f7ed-445d-82c6-9caa807d513f.roa
Signing time: Sat 18 Oct 2025 00:50:06 +0000
ROA not before: Sat 18 Oct 2025 00:50:06 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 65.8.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:91:8a:29:7a:39:30:c8:59:46:9b:31:64:bc:e3:99:a7:57:bf:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 00:50:06 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=6fde055a91011e0c1ae174b9335781dccc37e8583cdd5bb4a81910ad9ab8b249, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e4:95:2b:9e:84:57:1b:fb:e5:3a:48:55:cc:
07:c6:54:98:17:58:78:77:a1:37:63:0c:a8:4b:de:
5c:cb:9e:dd:7d:09:13:17:d6:72:49:b3:e8:50:3b:
12:55:9a:5c:6e:8b:9c:71:69:0e:8e:52:f3:65:97:
1d:ee:c9:5a:b5:91:08:47:46:6a:52:d1:74:bc:5a:
9c:4c:fc:8b:30:1e:5f:97:8e:98:0b:86:55:9d:60:
8b:26:0f:fe:46:26:18:07:56:76:b2:c0:3c:52:be:
e2:b5:1d:4f:5a:67:d0:fb:7e:9c:74:77:2a:35:61:
d3:f1:a6:3c:ba:1a:49:e2:da:c9:c1:d9:d2:3b:a8:
95:43:7d:87:1d:68:49:e3:0a:d2:64:a5:4b:e4:3a:
56:0f:42:1d:b3:27:80:3c:68:fc:af:a9:96:8c:d3:
04:0e:54:a7:f7:b9:1a:fd:0a:5c:a1:21:9a:2f:ca:
78:55:b3:5a:37:c7:10:8f:ed:47:e7:a9:0c:ab:48:
07:e1:e9:b8:62:88:92:2a:bc:79:39:c2:83:2d:be:
7a:ba:6b:28:0f:73:be:8b:1f:6e:21:cc:09:d8:e8:
a7:cb:3d:32:12:b5:73:3f:b4:23:d7:2d:26:4b:8e:
1c:a2:ab:d6:04:99:93:c9:4e:26:7c:b0:5f:94:2c:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AA:77:16:12:C1:80:41:0C:B0:DB:7F:0B:57:D7:05:3C:BC:1D:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f5b852b9-f7ed-445d-82c6-9caa807d513f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.8.53.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f4:be:29:72:42:04:c3:08:c0:d7:f1:32:6e:b9:7e:39:37:
b0:d8:5d:fe:80:c8:eb:52:17:8c:c3:f0:f8:5e:a5:ee:6e:9c:
b5:a4:b6:a6:64:9d:d9:cd:29:e8:8e:c2:3d:0a:3d:46:46:92:
0c:fe:a6:0b:3d:ca:63:95:12:1d:43:40:79:a3:21:03:63:1f:
64:79:8c:9b:e3:e8:d5:98:2d:73:21:6a:35:51:d2:e5:76:c3:
56:b5:42:94:31:59:5d:76:e9:c3:6a:a8:53:3f:79:b4:16:7e:
31:9b:a3:97:60:66:86:95:19:87:c5:7a:a0:73:c8:ff:ae:b2:
41:05:e5:79:ad:6c:e0:59:98:b2:5c:56:f3:67:70:44:ca:97:
e8:f7:d0:50:74:4c:2d:b8:a4:8f:e4:86:6e:1c:38:c7:21:d6:
f5:be:3f:a9:63:c3:2f:d8:4b:fb:15:1c:7d:83:7d:11:f6:20:
05:27:3e:3f:e7:a8:10:00:c9:20:3a:94:31:69:7b:7d:73:93:
77:96:a2:c6:e1:30:85:aa:a1:65:0e:2b:83:39:55:d9:d0:bb:
1d:14:4a:ff:25:f9:9d:8d:3c:06:43:55:8e:14:8f:86:b0:19:
ca:9d:7f:df:f3:0a:df:0f:3d:29:f0:bf:cf:82:aa:7e:6e:0b:
cd:73:80:b4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaZGKKXo5MMhZRpsxZLzjmadXv4IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDA1MDA2WhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZmRlMDU1YTkxMDExZTBjMWFlMTc0YjkzMzU3ODFkY2Nj
MzdlODU4M2NkZDViYjRhODE5MTBhZDlhYjhiMjQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDj5JUrnoRXG/vlOkhVzAfGVJgXWHh3oTdjDKhL3lzLnt19
CRMX1nJJs+hQOxJVmlxui5xxaQ6OUvNllx3uyVq1kQhHRmpS0XS8WpxM/IswHl+X
jpgLhlWdYIsmD/5GJhgHVnaywDxSvuK1HU9aZ9D7fpx0dyo1YdPxpjy6Gkni2snB
2dI7qJVDfYcdaEnjCtJkpUvkOlYPQh2zJ4A8aPyvqZaM0wQOVKf3uRr9ClyhIZov
ynhVs1o3xxCP7UfnqQyrSAfh6bhiiJIqvHk5woMtvnq6aygPc76LH24hzAnY6KfL
PTIStXM/tCPXLSZLjhyiq9YEmZPJTiZ8sF+ULKUZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUI6p3FhLBgEEMsNt/C1fXBTy8HYEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y1Yjg1MmI5LWY3ZWQtNDQ1ZC04MmM2LTljYWE4MDdkNTEzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABBCDUwDQYJKoZIhvcNAQELBQADggEBADH0vilyQgTDCMDX8TJuuX45N7DY
Xf6AyOtSF4zD8Phepe5unLWktqZkndnNKeiOwj0KPUZGkgz+pgs9ymOVEh1DQHmj
IQNjH2R5jJvj6NWYLXMhajVR0uV2w1a1QpQxWV126cNqqFM/ebQWfjGbo5dgZoaV
GYfFeqBzyP+uskEF5XmtbOBZmLJcVvNncETKl+j30FB0TC24pI/khm4cOMch1vW+
P6ljwy/YS/sVHH2DfRH2IAUnPj/nqBAAySA6lDFpe31zk3eWosbhMIWqoWUOK4M5
VdnQux0USv8l+Z2NPAZDVY4Uj4awGcqdf9/zCt8PPSnwv8+Cqn5uC81zgLQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:27 2025 by rpki-client