Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
File: 26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa (raw, json)
Hash identifier: XRIT6BXxxXSiUN218e/POvRloutkfHLQf47qCTeqZBI=
Subject key identifier: 46:22:EA:2A:B6:0A:8F:8D:C4:09:5A:46:F4:39:4B:C2:06:9B:33:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6553E572B27E5009BECB49C0E850C8535B9FC79C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
Signing time: Wed 22 Oct 2025 00:31:01 +0000
ROA not before: Wed 22 Oct 2025 00:31:01 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:53:e5:72:b2:7e:50:09:be:cb:49:c0:e8:50:c8:53:5b:9f:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:31:01 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=862d41dad7a44d2408b10716076b0b315ecd67764272a05aa0202acefbc404fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:f2:84:7f:3e:ee:5f:e5:1e:3a:5c:9d:e7:
24:37:87:24:5d:8b:9e:7c:94:9e:a4:4f:e9:a1:f3:
80:6b:08:5f:01:0a:d5:17:69:16:5f:c5:61:60:85:
ab:93:28:e1:2f:8e:7e:4e:19:cb:bb:3f:4c:a2:b1:
f8:66:a0:fa:55:3b:16:d8:0b:4c:38:77:21:d5:c2:
63:ee:9f:5c:59:2a:28:2e:40:69:74:61:c0:3c:af:
1a:1e:2b:04:8a:cc:e4:6a:31:c2:61:c3:a0:14:4f:
c3:b3:8a:79:c3:25:ea:ab:22:24:bc:c7:27:8a:57:
c5:dc:78:53:e0:5a:e7:ae:56:19:f0:18:2d:54:e1:
b2:4c:d4:b0:24:6d:de:13:2c:91:0f:cc:7f:b8:7c:
cf:c5:ad:ee:1e:e8:8a:8d:31:35:2e:3c:9f:4c:02:
2b:cb:30:1d:c3:20:9f:04:b2:7f:6e:20:08:bb:f8:
dc:f9:f8:1d:c1:12:f9:6d:d2:01:5a:6b:5d:f0:77:
af:b3:97:99:55:ba:63:c3:ed:dc:bd:54:8d:94:de:
2e:fa:c7:92:70:1c:38:6a:24:80:c4:65:25:91:92:
43:b9:a5:68:4f:5e:93:fb:6c:e0:de:ce:56:44:7b:
5f:a9:36:0c:15:bf:9a:dd:eb:cd:47:be:0b:a1:05:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:EA:2A:B6:0A:8F:8D:C4:09:5A:46:F4:39:4B:C2:06:9B:33:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.52.0/24
Signature Algorithm: sha256WithRSAEncryption
45:87:45:3d:6c:2e:b4:8d:0d:ed:61:76:72:72:44:90:38:0f:
61:9f:06:fb:80:fe:94:d3:ab:06:be:22:51:c4:23:3e:46:e3:
fc:2f:ee:29:4d:25:bf:4f:03:33:7e:d0:6c:47:98:b9:47:10:
1e:0b:02:e2:5a:88:46:b2:1a:84:20:ce:5c:2e:33:ae:4c:b1:
7f:c0:03:f9:e9:1a:5f:59:5a:39:aa:6d:fe:3d:0b:3d:0c:ad:
7e:85:9a:e3:cb:9e:ca:b1:30:cc:e6:be:8b:26:a2:ca:e1:b7:
61:06:58:a3:8f:3d:93:46:6b:96:19:49:dd:02:a6:be:7b:b9:
b4:4c:ac:36:92:10:3c:3b:0b:5d:58:2c:81:67:62:36:33:6c:
0c:eb:32:53:d7:26:70:85:5e:b9:c0:44:ce:a5:c5:6d:eb:bd:
52:c8:7d:f1:cb:db:69:5a:47:0a:ae:80:b4:9f:f2:57:26:c1:
75:60:70:f6:46:78:b3:d9:c7:b7:ee:78:da:a3:a5:a6:f5:81:
bc:ea:b7:3b:93:47:00:33:45:23:09:e9:e9:6f:0d:69:79:da:
cf:b9:7b:3a:32:b1:68:e7:8a:a5:4a:48:c6:36:8b:6f:e4:c6:
6a:eb:79:8e:db:3f:81:da:32:70:2d:b4:63:21:04:b2:05:03:
b1:98:05:1e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZVPlcrJ+UAm+y0nA6FDIU1ufx5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIyMDAzMTAxWhcNMjUxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjJkNDFkYWQ3YTQ0ZDI0MDhiMTA3MTYwNzZiMGIzMTVl
Y2Q2Nzc2NDI3MmEwNWFhMDIwMmFjZWZiYzQwNGZlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKUPKEfz7uX+UeOlyd5yQ3hyRdi558lJ6kT+mh84BrCF8B
CtUXaRZfxWFghauTKOEvjn5OGcu7P0yisfhmoPpVOxbYC0w4dyHVwmPun1xZKigu
QGl0YcA8rxoeKwSKzORqMcJhw6AUT8OzinnDJeqrIiS8xyeKV8XceFPgWueuVhnw
GC1U4bJM1LAkbd4TLJEPzH+4fM/Fre4e6IqNMTUuPJ9MAivLMB3DIJ8Esn9uIAi7
+Nz5+B3BEvlt0gFaa13wd6+zl5lVumPD7dy9VI2U3i76x5JwHDhqJIDEZSWRkkO5
pWhPXpP7bODezlZEe1+pNgwVv5rd681HvguhBYRRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURiLqKrYKj43ECVpG9DlLwgabMzEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2Yjg5YzRjLTQwODctNDFmYS04NWIxLWJhOWZjYTUwYWQ4NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjQwDQYJKoZIhvcNAQELBQADggEBAEWHRT1sLrSNDe1hdnJyRJA4D2Gf
BvuA/pTTqwa+IlHEIz5G4/wv7ilNJb9PAzN+0GxHmLlHEB4LAuJaiEayGoQgzlwu
M65MsX/AA/npGl9ZWjmqbf49Cz0MrX6FmuPLnsqxMMzmvosmosrht2EGWKOPPZNG
a5YZSd0Cpr57ubRMrDaSEDw7C11YLIFnYjYzbAzrMlPXJnCFXrnARM6lxW3rvVLI
ffHL22laRwqugLSf8lcmwXVgcPZGeLPZx7fueNqjpab1gbzqtzuTRwAzRSMJ6elv
DWl52s+5ezoysWjniqVKSMY2i2/kxmrreY7bP4HaMnAttGMhBLIFA7GYBR4=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:27 2025 by rpki-client