Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5ce826-e620-42e3-a740-c50334dfe510.roa
File: fa5ce826-e620-42e3-a740-c50334dfe510.roa (raw, json)
Hash identifier: 3UfWejwMBt9Ghp83SIS/GPdrcp5cnp3AD+Y5EL561eA=
Subject key identifier: C5:3E:B1:3A:83:C9:B6:6F:1B:DA:90:93:39:37:FB:BF:88:6E:98:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E356374FFD60304475B6EF99DC5AC230AA8C3DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5ce826-e620-42e3-a740-c50334dfe510.roa
Signing time: Wed 15 Oct 2025 17:12:56 +0000
ROA not before: Wed 15 Oct 2025 17:12:56 +0000
ROA not after: Wed 19 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:35:63:74:ff:d6:03:04:47:5b:6e:f9:9d:c5:ac:23:0a:a8:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 17:12:56 2025 GMT
Not After : Nov 19 23:59:59 2025 GMT
Subject: serialNumber=b0a3b85fa2b5f8533447739ea6c15c99594b453743b852512647109eda3b6538, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:d9:38:3a:99:ef:dc:61:26:fa:33:49:c5:
42:c4:8b:a6:ac:87:12:4b:1f:36:99:c7:78:05:d1:
f6:dc:5d:45:78:f1:01:be:b8:c8:31:1f:9b:ce:77:
0c:e7:c9:72:a6:44:03:31:24:de:a4:25:07:32:59:
f8:31:5a:f3:b0:8e:cb:4f:09:c0:43:f4:0a:aa:88:
c7:0f:e5:db:df:93:49:f5:55:12:20:ad:6b:07:d0:
3c:d4:67:bb:5b:7f:f5:ba:28:c6:eb:d2:59:23:de:
a0:17:e0:9b:7a:f6:c1:25:9f:b6:5d:38:96:7e:c7:
28:62:c2:9a:d5:e2:2d:a3:2a:8a:c1:b3:69:ff:b3:
2d:1a:fd:13:9a:43:61:95:9f:a1:3b:ef:30:c2:51:
a9:96:c5:c8:c4:53:47:a8:8a:4c:f8:b9:70:e3:fe:
99:10:2c:76:d2:68:4f:48:b3:bb:f8:60:0a:f1:2e:
38:98:92:3d:5f:b0:0a:e6:a3:1f:39:a4:d0:98:5c:
61:63:14:29:32:0a:6a:53:11:5b:52:dc:19:08:bc:
37:95:1d:5c:3a:bb:79:58:bb:9e:40:8b:0f:ec:b0:
51:b4:2d:fc:5f:9c:4b:30:f1:23:2f:29:85:be:0a:
bf:bc:c5:31:46:bc:6c:ce:1a:b4:b2:0c:9e:39:04:
ef:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:B1:3A:83:C9:B6:6F:1B:DA:90:93:39:37:FB:BF:88:6E:98:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa5ce826-e620-42e3-a740-c50334dfe510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.110.0/24
Signature Algorithm: sha256WithRSAEncryption
75:f7:1e:1b:d0:40:7f:64:ba:3e:15:7c:71:d7:af:98:4b:6b:
75:32:c2:e3:5d:56:cb:0f:89:70:e7:27:6d:65:f4:77:66:66:
8d:df:2a:9d:aa:ed:93:de:00:7a:b3:7f:12:a8:14:2d:a5:fc:
36:ae:92:69:4c:fc:a7:e9:14:06:17:4b:87:70:34:36:fc:e4:
12:4f:d8:6e:70:ee:86:65:db:a2:72:22:04:77:68:ae:25:88:
eb:2b:8b:9d:f9:c4:cc:a9:6d:50:f1:20:83:d2:7c:5f:07:01:
82:ac:a3:ee:0c:52:b3:62:9e:1c:08:5a:66:52:de:a8:3a:24:
37:a8:b7:45:b5:5f:0b:03:d7:45:c7:a2:92:c8:68:13:bc:ab:
15:dc:1d:81:d5:c4:13:7a:6f:89:30:cd:18:00:b4:61:5b:5d:
e6:86:70:0e:99:10:d5:72:00:9b:e2:d9:89:d5:da:a9:c9:e5:
9e:7a:34:46:8c:a4:55:e0:08:ec:f6:5d:dc:75:5b:d2:aa:b7:
d8:e3:da:da:3a:13:4c:30:01:50:ba:68:d8:5d:e5:9d:48:81:
3f:43:32:21:d6:8f:9c:a7:e7:96:da:86:2b:95:71:99:8a:20:
42:f0:b0:e5:0c:65:47:9e:a5:bf:0c:32:ab:cb:f0:c3:8e:64:
22:b1:5a:44
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDjVjdP/WAwRHW275ncWsIwqow9owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE1MTcxMjU2WhcNMjUxMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMGEzYjg1ZmEyYjVmODUzMzQ0NzczOWVhNmMxNWM5OTU5
NGI0NTM3NDNiODUyNTEyNjQ3MTA5ZWRhM2I2NTM4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCr7tk4Opnv3GEm+jNJxULEi6ashxJLHzaZx3gF0fbcXUV4
8QG+uMgxH5vOdwznyXKmRAMxJN6kJQcyWfgxWvOwjstPCcBD9AqqiMcP5dvfk0n1
VRIgrWsH0DzUZ7tbf/W6KMbr0lkj3qAX4Jt69sEln7ZdOJZ+xyhiwprV4i2jKorB
s2n/sy0a/ROaQ2GVn6E77zDCUamWxcjEU0eoikz4uXDj/pkQLHbSaE9Is7v4YArx
LjiYkj1fsArmox85pNCYXGFjFCkyCmpTEVtS3BkIvDeVHVw6u3lYu55Aiw/ssFG0
LfxfnEsw8SMvKYW+Cr+8xTFGvGzOGrSyDJ45BO9xAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxT6xOoPJtm8b2pCTOTf7v4humK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhNWNlODI2LWU2MjAtNDJlMy1hNzQwLWM1MDMzNGRmZTUxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVm4wDQYJKoZIhvcNAQELBQADggEBAHX3HhvQQH9kuj4VfHHXr5hLa3Uy
wuNdVssPiXDnJ21l9HdmZo3fKp2q7ZPeAHqzfxKoFC2l/DaukmlM/KfpFAYXS4dw
NDb85BJP2G5w7oZl26JyIgR3aK4liOsri535xMypbVDxIIPSfF8HAYKso+4MUrNi
nhwIWmZS3qg6JDeot0W1XwsD10XHopLIaBO8qxXcHYHVxBN6b4kwzRgAtGFbXeaG
cA6ZENVyAJvi2YnV2qnJ5Z56NEaMpFXgCOz2Xdx1W9Kqt9jj2to6E0wwAVC6aNhd
5Z1IgT9DMiHWj5yn55bahiuVcZmKIELwsOUMZUeepb8MMqvL8MOOZCKxWkQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:42 2025 by rpki-client