Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
File: 659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa (raw, json)
Hash identifier: vnXdgRIWgh6q9nqPUcPq1uOuCHpzBGDM+9inoVPz0Jo=
Subject key identifier: BB:A9:B3:C6:CF:A6:4B:E3:F7:E5:8D:3D:12:36:C6:28:2F:2D:90:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BDB4DF4F629A8D8A35AEBD6ACDC1B4B22C133FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
Signing time: Sun 02 Nov 2025 00:11:08 +0000
ROA not before: Sun 02 Nov 2025 00:11:08 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:db:4d:f4:f6:29:a8:d8:a3:5a:eb:d6:ac:dc:1b:4b:22:c1:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:11:08 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=c9cd8d113a39eb8bc421f8879b8d638f2635296ac0e9bbb5b653dff9ffe37e4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:22:41:cc:2b:45:94:15:f0:f1:ee:3f:4d:21:
aa:90:51:d4:8e:2c:f5:24:3b:09:3f:ac:4f:77:7d:
d1:23:f6:1f:71:9b:ef:7c:a9:e6:fa:3a:e7:b5:55:
af:1b:ca:e7:b2:74:21:cc:71:b5:5c:c7:5e:ad:fc:
66:eb:de:77:5b:59:f1:50:18:9f:da:4d:22:4c:eb:
96:e7:c3:04:84:04:c5:c6:b9:73:fb:90:0e:95:a4:
cf:ba:17:59:38:12:05:60:7e:52:2e:4e:94:01:e9:
27:e4:b9:a9:96:23:b5:50:45:77:6d:2c:c2:c4:ff:
4f:03:cf:28:87:91:7b:28:03:6b:56:8e:3c:97:cc:
2d:9a:b8:a0:3e:36:93:18:ab:4e:60:f2:e5:1e:4f:
8f:17:38:3c:7d:a7:13:dd:a8:c7:3f:4c:03:f9:ac:
ac:09:21:eb:74:ba:21:55:77:ab:b9:01:5c:10:6b:
d5:a7:c0:b8:77:e6:ea:e1:5a:c7:d1:84:3b:ac:24:
0e:c0:91:a8:e4:96:4f:a0:72:9f:69:e7:70:29:70:
db:fb:41:59:03:3b:42:2b:d1:e5:34:1f:01:4c:6f:
fd:96:3d:04:f6:94:5b:fb:d8:08:65:d5:3f:95:99:
4a:86:f7:a0:e3:7c:b6:a4:6d:60:c6:45:09:1e:c8:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:B3:C6:CF:A6:4B:E3:F7:E5:8D:3D:12:36:C6:28:2F:2D:90:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/659a7dac-a1b2-4360-8ae9-98a0f88aabb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.11.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:b1:e9:ab:85:82:f2:d1:d8:9c:16:1f:d4:c0:96:d0:f5:8b:
6f:d7:ed:05:26:17:e7:e0:e8:b9:c1:08:cd:5e:86:61:2e:07:
af:36:21:76:aa:2c:49:05:aa:10:a4:b3:0a:bc:1f:38:dc:2b:
0c:d6:1e:4b:e4:f7:d1:89:95:79:00:60:13:f3:b0:61:e5:59:
4b:47:7d:3f:ef:bb:b4:0f:e8:be:22:3b:72:8d:92:6a:6a:b6:
36:30:a3:76:a6:35:b5:8f:ed:dc:03:5b:70:e0:db:e5:b6:bd:
89:ad:1b:86:0e:c1:d3:a9:e5:24:16:40:70:95:fb:ea:5d:5f:
0d:93:7f:67:58:b5:92:75:02:70:69:6e:8d:1b:6c:8c:23:08:
78:a0:18:24:14:c3:1e:af:38:f9:d9:87:8b:eb:d2:94:c1:84:
1e:1a:7d:39:75:ad:e7:db:9d:8b:2f:27:bc:43:fe:86:fa:3d:
9c:0e:1b:48:85:7b:d3:d3:c7:ce:d0:5a:64:c6:90:d1:78:28:
a1:4a:c5:06:aa:d4:c4:b2:d4:23:4e:dc:19:3e:30:72:c2:18:
16:77:b8:65:e5:94:ba:fe:8d:cd:87:b4:8c:e7:ba:1f:d1:24:
09:b8:e3:5a:39:12:70:2e:57:a8:7f:a8:c2:a0:7a:cd:28:d2:
3e:3b:64:6e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUO9tN9PYpqNijWuvWrNwbSyLBM/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAxMTA4WhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BjOWNkOGQxMTNhMzllYjhiYzQyMWY4ODc5YjhkNjM4ZjI2
MzUyOTZhYzBlOWJiYjViNjUzZGZmOWZmZTM3ZTRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDiIkHMK0WUFfDx7j9NIaqQUdSOLPUkOwk/rE93fdEj9h9x
m+98qeb6Oue1Va8byueydCHMcbVcx16t/Gbr3ndbWfFQGJ/aTSJM65bnwwSEBMXG
uXP7kA6VpM+6F1k4EgVgflIuTpQB6SfkuamWI7VQRXdtLMLE/08DzyiHkXsoA2tW
jjyXzC2auKA+NpMYq05g8uUeT48XODx9pxPdqMc/TAP5rKwJIet0uiFVd6u5AVwQ
a9WnwLh35urhWsfRhDusJA7Akajklk+gcp9p53ApcNv7QVkDO0Ir0eU0HwFMb/2W
PQT2lFv72Ahl1T+VmUqG96DjfLakbWDGRQkeyNLzAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUu6mzxs+mS+P35Y09EjbGKC8tkEgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY1OWE3ZGFjLWExYjItNDM2MC04YWU5LTk4YTBmODhhYWJiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4CzANBgkqhkiG9w0BAQsFAAOCAQEAYLHpq4WC8tHYnBYf1MCW0PWLb9ft
BSYX5+DoucEIzV6GYS4HrzYhdqosSQWqEKSzCrwfONwrDNYeS+T30YmVeQBgE/Ow
YeVZS0d9P++7tA/oviI7co2Samq2NjCjdqY1tY/t3ANbcODb5ba9ia0bhg7B06nl
JBZAcJX76l1fDZN/Z1i1knUCcGlujRtsjCMIeKAYJBTDHq84+dmHi+vSlMGEHhp9
OXWt59udiy8nvEP+hvo9nA4bSIV709PHztBaZMaQ0XgooUrFBqrUxLLUI07cGT4w
csIYFne4ZeWUuv6NzYe0jOe6H9EkCbjjWjkScC5XqH+owqB6zSjSPjtkbg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:38 2025 by rpki-client