Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66328806-a610-4eb3-828f-5420e959d22b.roa
File: 66328806-a610-4eb3-828f-5420e959d22b.roa (raw, json)
Hash identifier: KlTc4RzwP1Ac3smPx4uTe95c5CGjLFLUZy7fiOXflHs=
Subject key identifier: 75:AE:29:05:CB:08:AD:CE:09:45:26:3C:81:AA:F0:C3:44:25:EE:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DF5D0F012B70B4BD2F6377197BEF9E3453ABA36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66328806-a610-4eb3-828f-5420e959d22b.roa
Signing time: Wed 22 Oct 2025 00:30:17 +0000
ROA not before: Wed 22 Oct 2025 00:30:17 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f5:d0:f0:12:b7:0b:4b:d2:f6:37:71:97:be:f9:e3:45:3a:ba:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:30:17 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=b9571a5c33db2dfaf9b556b3e0962cc383b4a02bff2de85f55f49d58884154fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:44:57:fa:b8:c0:e0:2a:b1:1e:d3:99:78:
ac:54:90:c1:26:0c:4b:dc:a3:86:65:68:de:87:d9:
07:01:02:81:ba:8e:eb:e4:c5:28:06:98:d9:18:fd:
15:19:28:39:17:d8:74:da:05:5f:e5:a6:82:b0:c2:
ab:8e:42:45:0c:57:b1:67:73:30:0e:3f:02:52:a0:
d6:41:3f:dd:34:8a:c6:bb:de:6d:42:2a:9e:c9:5d:
f6:b3:df:1f:82:da:f9:6d:91:d9:db:c2:ce:86:a7:
af:fa:02:a6:41:1e:56:c5:6d:91:60:f3:cd:cc:2f:
12:9a:83:7f:4c:e9:43:f7:a0:5a:e1:1b:6a:c7:5b:
04:68:2c:c7:b8:40:04:b2:13:0d:95:7c:f7:1b:1b:
98:a6:6f:3c:31:0f:6d:1d:45:6c:56:26:76:b2:92:
6a:e8:99:03:60:51:e5:b8:3b:67:79:21:0a:b3:5e:
e4:01:fd:84:4b:7c:c5:0c:bb:29:5e:b6:3e:e7:8c:
ad:d2:48:37:16:c9:96:22:9b:ab:06:8b:b7:65:04:
35:63:8c:ed:70:b8:1f:57:19:35:52:8e:79:f8:4a:
6a:9f:68:fb:56:56:79:74:77:6e:4a:9c:83:c9:a8:
ef:cc:9b:4b:48:96:a4:fe:4a:35:53:10:73:18:16:
71:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AE:29:05:CB:08:AD:CE:09:45:26:3C:81:AA:F0:C3:44:25:EE:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/66328806-a610-4eb3-828f-5420e959d22b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.61.0/24
Signature Algorithm: sha256WithRSAEncryption
96:71:d8:d0:18:22:89:48:1c:b6:76:04:09:c7:78:dc:d6:03:
4d:6a:1d:86:18:9d:f2:74:46:5d:82:61:a7:4e:a4:07:65:60:
d8:c7:18:fb:32:ea:36:bf:6f:4f:85:3f:51:57:47:84:78:48:
bf:13:f8:a0:51:96:0f:a4:08:b7:b1:ab:5a:b0:e8:8f:12:42:
3d:64:07:ce:8b:43:ac:5c:3a:bc:9c:33:5c:c3:71:7b:96:90:
b2:10:ee:4b:cd:bc:8e:4f:02:f6:64:28:50:78:ad:c7:2f:b4:
02:34:cc:70:80:57:5b:4a:0a:48:02:ee:3b:55:ee:26:f8:8a:
21:0f:48:e3:5b:30:ca:47:f7:72:34:d1:89:b5:de:6a:29:c9:
03:3a:6f:16:d9:9f:97:b5:6e:27:7c:1d:d1:94:50:4f:d6:50:
b0:59:d9:36:6d:a8:51:50:61:be:6f:95:e9:9c:57:5f:41:1a:
ff:6d:ac:ec:78:1f:86:25:9e:6d:17:30:79:61:ca:11:8b:e2:
d6:e1:ef:17:ca:f4:6a:14:87:2b:fe:3f:0d:4a:13:22:77:ac:
a3:84:da:04:a9:b9:42:03:79:c2:96:a9:90:11:70:64:13:08:
01:14:30:63:05:a9:0a:5d:80:30:8b:2d:d4:b6:58:d6:17:07:
9f:31:95:59
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPfXQ8BK3C0vS9jdxl77540U6ujYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIyMDAzMDE3WhcNMjUxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTU3MWE1YzMzZGIyZGZhZjliNTU2YjNlMDk2MmNjMzgz
YjRhMDJiZmYyZGU4NWY1NWY0OWQ1ODg4NDE1NGZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPYURX+rjA4CqxHtOZeKxUkMEmDEvco4ZlaN6H2QcBAoG6
juvkxSgGmNkY/RUZKDkX2HTaBV/lpoKwwquOQkUMV7FnczAOPwJSoNZBP900isa7
3m1CKp7JXfaz3x+C2vltkdnbws6Gp6/6AqZBHlbFbZFg883MLxKag39M6UP3oFrh
G2rHWwRoLMe4QASyEw2VfPcbG5imbzwxD20dRWxWJnaykmromQNgUeW4O2d5IQqz
XuQB/YRLfMUMuyletj7njK3SSDcWyZYim6sGi7dlBDVjjO1wuB9XGTVSjnn4Smqf
aPtWVnl0d25KnIPJqO/Mm0tIlqT+SjVTEHMYFnFFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUda4pBcsIrc4JRSY8garww0Ql7mowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY2MzI4ODA2LWE2MTAtNGViMy04MjhmLTU0MjBlOTU5ZDIyYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNj0wDQYJKoZIhvcNAQELBQADggEBAJZx2NAYIolIHLZ2BAnHeNzWA01q
HYYYnfJ0Rl2CYadOpAdlYNjHGPsy6ja/b0+FP1FXR4R4SL8T+KBRlg+kCLexq1qw
6I8SQj1kB86LQ6xcOrycM1zDcXuWkLIQ7kvNvI5PAvZkKFB4rccvtAI0zHCAV1tK
CkgC7jtV7ib4iiEPSONbMMpH93I00Ym13mopyQM6bxbZn5e1bid8HdGUUE/WULBZ
2TZtqFFQYb5vlemcV19BGv9trOx4H4Ylnm0XMHlhyhGL4tbh7xfK9GoUhyv+Pw1K
EyJ3rKOE2gSpuUIDecKWqZARcGQTCAEUMGMFqQpdgDCLLdS2WNYXB58xlVk=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:38:55 2025 by rpki-client