Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
File: 705d8477-e54a-4267-815f-2296f4a9554d.roa (raw, json)
Hash identifier: L1xtyc1Trs2X5IjYPPgDUhcod5qjvnm91c902OOrNBM=
Subject key identifier: BF:F0:E3:85:AD:B7:D3:63:F9:C2:21:D7:37:C7:15:E4:FD:22:1C:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6615FB2AA1804B12CD354DF4E57E446A7EA07D2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
Signing time: Tue 28 Oct 2025 00:10:55 +0000
ROA not before: Tue 28 Oct 2025 00:10:55 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:15:fb:2a:a1:80:4b:12:cd:35:4d:f4:e5:7e:44:6a:7e:a0:7d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:10:55 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=850905151b579b22f2666af100747cd2f3d867450e005d0b61828e478d529d31, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:4e:f9:29:14:89:b6:7a:db:01:e2:7b:ce:
e0:05:2d:37:91:fc:ab:c0:7f:60:c5:9d:d5:9c:40:
37:f3:71:be:fe:c9:e9:b7:a7:60:3d:79:21:0e:0d:
af:39:f4:24:fb:23:33:33:82:a5:1b:42:82:44:70:
d7:e5:09:97:4f:df:9d:51:68:26:8d:99:2a:10:bf:
a3:76:5f:a1:fd:04:51:b1:01:c1:0f:42:35:9c:36:
3a:e2:70:e6:7a:1d:11:d6:ab:1b:b9:57:c4:65:97:
05:ad:1c:b4:eb:a4:d0:ac:49:12:e4:7d:14:b3:ba:
22:83:f7:02:80:34:4c:fc:50:db:92:f5:84:49:0a:
8c:75:cf:ec:e8:ae:c6:cf:dd:42:16:5a:0b:07:5e:
b5:7d:f1:4e:4b:db:a6:7c:f7:59:e3:48:22:42:4d:
04:f8:08:82:9b:f2:1b:ce:81:0c:fc:d1:c6:50:5c:
3d:44:f0:96:e5:c9:54:0e:81:3b:5f:ad:c4:64:25:
60:6e:2d:8f:c3:9c:04:59:1a:eb:9c:43:59:d1:da:
5f:a0:dc:f0:1b:5c:67:48:b0:1a:ae:a8:af:2f:07:
a0:c4:5f:66:19:e3:31:e7:4d:f6:7a:6f:27:26:50:
05:87:79:46:c7:d8:32:00:a1:33:1c:db:be:bb:bb:
18:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:E3:85:AD:B7:D3:63:F9:C2:21:D7:37:C7:15:E4:FD:22:1C:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:61:a3:3d:26:f4:03:7a:95:15:e8:d4:cf:30:c8:15:dc:3f:
4c:fd:39:fd:73:a8:88:b8:78:1e:0b:ed:6e:03:0c:cc:80:ff:
5d:06:6c:d4:6d:34:9b:1f:6e:9f:46:6d:a6:32:90:92:7d:c6:
c4:72:00:00:11:a4:45:ea:26:4c:15:b5:b0:93:b3:1a:26:c5:
20:56:03:c2:47:f1:e3:fd:46:27:98:6b:dc:f4:35:32:3f:c5:
84:96:d2:9f:78:e9:5a:b0:04:2e:9c:d7:c7:d4:6b:e0:9e:1c:
18:50:65:ba:00:01:bd:da:0c:3a:d0:a4:c4:04:3b:c3:89:59:
1b:ca:e5:72:a4:6d:05:95:ba:c7:07:05:e2:9e:11:73:a3:96:
6f:ec:52:0f:a0:28:07:5a:b9:a4:fb:51:3b:78:dc:11:26:66:
50:69:5e:fb:b0:41:26:76:ef:11:83:f7:ff:b9:2a:23:e0:df:
d9:ca:c5:71:d5:65:eb:0c:b7:39:02:5a:62:06:4a:56:37:c5:
2f:51:ce:62:ef:2f:db:06:53:d3:1e:b0:b7:01:da:31:07:1d:
8b:a9:3e:28:62:b8:e7:6e:59:14:27:e8:46:c4:04:68:fc:ad:
2d:ee:25:b2:c9:5c:d0:f7:bf:60:84:69:7f:00:05:76:64:61:
04:c9:94:51
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZhX7KqGASxLNNU305X5Ean6gfS0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDAxMDU1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NTA5MDUxNTFiNTc5YjIyZjI2NjZhZjEwMDc0N2NkMmYz
ZDg2NzQ1MGUwMDVkMGI2MTgyOGU0NzhkNTI5ZDMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbHU75KRSJtnrbAeJ7zuAFLTeR/KvAf2DFndWcQDfzcb7+
yem3p2A9eSEODa859CT7IzMzgqUbQoJEcNflCZdP351RaCaNmSoQv6N2X6H9BFGx
AcEPQjWcNjricOZ6HRHWqxu5V8RllwWtHLTrpNCsSRLkfRSzuiKD9wKANEz8UNuS
9YRJCox1z+zorsbP3UIWWgsHXrV98U5L26Z891njSCJCTQT4CIKb8hvOgQz80cZQ
XD1E8JblyVQOgTtfrcRkJWBuLY/DnARZGuucQ1nR2l+g3PAbXGdIsBquqK8vB6DE
X2YZ4zHnTfZ6bycmUAWHeUbH2DIAoTMc2767uxivAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUv/Djha2302P5wiHXN8cV5P0iHBwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcwNWQ4NDc3LWU1NGEtNDI2Ny04MTVmLTIyOTZmNGE5NTU0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA/9ncwDQYJKoZIhvcNAQELBQADggEBAGBhoz0m9AN6lRXo1M8wyBXcP0z9
Of1zqIi4eB4L7W4DDMyA/10GbNRtNJsfbp9GbaYykJJ9xsRyAAARpEXqJkwVtbCT
sxomxSBWA8JH8eP9RieYa9z0NTI/xYSW0p946VqwBC6c18fUa+CeHBhQZboAAb3a
DDrQpMQEO8OJWRvK5XKkbQWVuscHBeKeEXOjlm/sUg+gKAdauaT7UTt43BEmZlBp
XvuwQSZ27xGD9/+5KiPg39nKxXHVZesMtzkCWmIGSlY3xS9RzmLvL9sGU9MesLcB
2jEHHYupPihiuOduWRQn6EbEBGj8rS3uJbLJXND3v2CEaX8ABXZkYQTJlFE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:31 2025 by rpki-client