Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
File: 001d631f-3920-4b24-a9e8-b7d40e1c5971.roa (raw, json)
Hash identifier: KoSv6KFNrAtDGRqLNMkVj7nAJDiLd2ms9LHA6FyUML0=
Subject key identifier: CE:DA:75:4F:02:E4:50:FF:7F:A5:07:FE:F1:A6:CC:1C:D4:73:B7:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54FFA71283A6F4D36235EDEB5C7AB1396779BDF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
Signing time: Tue 28 Oct 2025 00:41:27 +0000
ROA not before: Tue 28 Oct 2025 00:41:27 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ff:a7:12:83:a6:f4:d3:62:35:ed:eb:5c:7a:b1:39:67:79:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:41:27 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=c4f84d8efaa4d2e2105828fbc5e621fed075aaeffb0bba3e9070748b0b47ab34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:9f:5e:91:be:00:c9:27:6a:30:3e:2a:3d:
38:ab:fb:62:3a:03:ad:cb:05:bb:60:01:d0:d3:0b:
1a:2f:5c:b0:f7:b2:b5:03:c9:f7:1c:52:4c:1b:85:
23:cd:3f:14:b9:99:15:a4:91:67:f5:89:e1:66:e7:
80:f1:75:1f:9f:f2:0f:4e:a9:4f:61:27:fa:80:b8:
35:b4:b9:54:89:af:49:b4:72:83:78:5c:92:89:e6:
6b:f0:a3:15:ca:e2:34:93:e7:6e:2f:55:e7:d0:0d:
31:9c:11:a0:5c:ef:74:1a:b2:43:7d:6c:b7:0e:95:
85:6e:1a:73:73:1f:a9:fc:b6:23:4c:bb:24:c4:4d:
1e:69:de:77:0f:98:83:be:48:6a:74:12:5f:55:65:
ad:7f:12:dc:11:be:37:d6:f7:75:02:e0:69:e0:3b:
4c:d0:5f:08:2a:f1:6b:16:cd:59:00:fa:df:df:7c:
d9:a4:0f:57:59:a9:b0:52:02:42:a0:a7:60:7a:1a:
71:11:58:89:4e:c1:2f:ba:98:83:cf:6a:e3:1a:ed:
c8:09:80:25:4b:6d:c5:6d:ea:4f:68:62:6c:44:ce:
e1:02:07:49:74:55:33:ec:cd:5b:66:21:33:ad:b4:
ac:9c:9b:45:a8:69:d9:45:8e:c5:10:91:4b:b8:95:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DA:75:4F:02:E4:50:FF:7F:A5:07:FE:F1:A6:CC:1C:D4:73:B7:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/001d631f-3920-4b24-a9e8-b7d40e1c5971.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.109.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:20:c1:81:8b:ff:42:ea:aa:47:32:d6:00:13:ac:f1:b5:37:
2c:99:e2:a5:13:e6:31:73:a8:50:17:6d:4c:2c:38:b2:d4:97:
8f:a1:4c:6a:c9:5a:39:92:5d:0e:09:a7:cc:a2:56:01:1f:ee:
eb:f9:f3:54:6a:9b:4d:66:9f:f3:0f:3c:af:f3:9b:44:18:fd:
e0:91:94:b0:03:24:2c:10:18:63:dd:1e:a7:9a:17:29:5c:3e:
f2:5e:33:71:08:cb:cd:d0:56:23:2c:a9:38:7e:e1:bd:38:3e:
76:85:d4:36:39:7c:b8:8f:13:8d:e1:e2:cf:7f:07:aa:89:4a:
b6:55:f3:95:cd:1f:41:cb:17:15:6a:dc:91:61:50:fb:7d:e9:
fc:c7:aa:30:78:ec:75:64:f4:72:fb:cf:7e:32:8b:f9:b2:f7:
50:01:5b:7c:a8:a2:74:ed:bd:c3:7d:b1:be:e9:72:a3:4e:42:
d8:af:18:3c:36:0a:cf:ab:0b:7c:f9:db:5f:c4:96:29:90:95:
3c:0b:55:00:04:a0:8e:a2:d7:eb:8d:0a:9a:00:52:8c:78:f9:
57:2a:69:32:26:a8:f5:e7:2c:cc:bf:8e:5f:09:a3:b2:91:45:
87:09:48:de:7c:ea:cc:24:72:65:9b:d9:24:95:86:5c:71:68:
00:6d:5b:f6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVP+nEoOm9NNiNe3rXHqxOWd5vfQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDA0MTI3WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNGY4NGQ4ZWZhYTRkMmUyMTA1ODI4ZmJjNWU2MjFmZWQw
NzVhYWVmZmIwYmJhM2U5MDcwNzQ4YjBiNDdhYjM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtJJ9ekb4AySdqMD4qPTir+2I6A63LBbtgAdDTCxovXLD3
srUDyfccUkwbhSPNPxS5mRWkkWf1ieFm54DxdR+f8g9OqU9hJ/qAuDW0uVSJr0m0
coN4XJKJ5mvwoxXK4jST524vVefQDTGcEaBc73QaskN9bLcOlYVuGnNzH6n8tiNM
uyTETR5p3ncPmIO+SGp0El9VZa1/EtwRvjfW93UC4GngO0zQXwgq8WsWzVkA+t/f
fNmkD1dZqbBSAkKgp2B6GnERWIlOwS+6mIPPauMa7cgJgCVLbcVt6k9oYmxEzuEC
B0l0VTPszVtmITOttKycm0WoadlFjsUQkUu4lRezAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUztp1TwLkUP9/pQf+8abMHNRzt/IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAwMWQ2MzFmLTM5MjAtNGIyNC1hOWU4LWI3ZDQwZTFjNTk3MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/G0wDQYJKoZIhvcNAQELBQADggEBANUgwYGL/0Lqqkcy1gATrPG1NyyZ
4qUT5jFzqFAXbUwsOLLUl4+hTGrJWjmSXQ4Jp8yiVgEf7uv581Rqm01mn/MPPK/z
m0QY/eCRlLADJCwQGGPdHqeaFylcPvJeM3EIy83QViMsqTh+4b04PnaF1DY5fLiP
E43h4s9/B6qJSrZV85XNH0HLFxVq3JFhUPt96fzHqjB47HVk9HL7z34yi/my91AB
W3yoonTtvcN9sb7pcqNOQtivGDw2Cs+rC3z521/ElimQlTwLVQAEoI6i1+uNCpoA
Uox4+VcqaTImqPXnLMy/jl8Jo7KRRYcJSN586swkcmWb2SSVhlxxaABtW/Y=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:31 2025 by rpki-client