Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d8fc77-2869-4b60-a712-41b7854d5fd5.roa
File: 94d8fc77-2869-4b60-a712-41b7854d5fd5.roa (raw, json)
Hash identifier: 8jpIssS2IPYyhIYoHLnWAr7F2IpPlTT3dmqLn5o7MIM=
Subject key identifier: E0:F4:96:33:FB:F7:B3:07:22:4F:62:B4:25:29:E0:D5:42:08:53:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 454DB54A5885B436ABA6D21E8E76CAFC339F3179
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d8fc77-2869-4b60-a712-41b7854d5fd5.roa
Signing time: Tue 28 Oct 2025 00:51:35 +0000
ROA not before: Tue 28 Oct 2025 00:51:35 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4d:b5:4a:58:85:b4:36:ab:a6:d2:1e:8e:76:ca:fc:33:9f:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:51:35 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=ee46576cb2825f0fc433cc7db0a6f847332768a4cf09acf5f4b6bb0601a1af72, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:15:6c:e0:8d:ad:7e:9c:7d:cd:a4:95:35:
ad:04:6f:50:53:38:60:6c:4f:c2:eb:c2:11:c0:02:
fd:5f:47:16:a6:70:96:ae:b9:88:3d:24:05:ad:6b:
da:0d:ed:72:b7:83:1d:fc:6d:cf:39:4b:ff:33:37:
a2:c2:76:c9:5e:8c:b0:50:31:20:e8:c3:e3:11:fe:
50:ae:53:ce:17:c2:30:08:d2:31:6c:62:8c:04:88:
2b:63:ca:e1:4b:2d:3e:ef:ef:bc:f5:7a:95:6e:cb:
3c:da:03:93:91:93:ab:a1:29:81:af:04:7e:0b:63:
a5:8d:c5:42:2c:d9:2a:2a:16:44:98:87:b1:a9:1d:
4a:20:f9:15:9c:49:a9:4c:b7:bd:52:77:2a:83:1a:
85:85:36:c5:2a:15:15:1b:f3:e4:fb:39:d5:58:2a:
ea:95:ae:0e:0c:c4:b0:c6:a5:32:56:0c:8d:30:2c:
a8:59:ee:40:6a:64:59:fe:f9:2a:e5:9c:cf:03:4d:
cc:79:81:21:98:d8:39:77:ba:bf:e9:b0:96:9c:ea:
f0:0d:e6:e9:91:3a:fb:e2:29:af:69:38:33:3b:60:
fb:8f:f8:00:0c:55:3f:17:49:bd:63:a2:d5:80:5f:
54:56:91:d3:ba:13:8c:1d:52:91:e3:f4:45:ca:8d:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F4:96:33:FB:F7:B3:07:22:4F:62:B4:25:29:E0:D5:42:08:53:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94d8fc77-2869-4b60-a712-41b7854d5fd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d7:d7:90:a0:37:9e:7a:43:67:86:02:a6:23:26:12:23:1c:
30:a4:66:be:9e:45:3e:8d:ef:d1:6e:41:af:81:72:23:f2:9b:
cc:51:f4:ad:b5:d1:d8:7f:81:b6:e5:35:9a:ac:91:d3:a8:c8:
e9:4b:35:0c:a0:d3:5a:b2:05:2e:fb:38:77:62:7e:1c:a9:61:
b8:8b:10:43:6c:59:37:89:fb:b9:07:e7:f9:fe:9b:3a:f2:49:
8e:bb:82:3e:99:59:c4:9d:b4:53:3a:f1:96:92:91:8e:10:3b:
ba:65:09:e9:a4:55:9b:ca:c1:ae:c1:0c:c2:81:7e:6c:fa:27:
5f:71:9e:9c:a3:ac:e9:0c:ce:0f:ce:82:ea:96:ea:5b:99:9d:
19:1b:41:0d:ad:97:2b:4c:f7:45:d2:22:dd:f3:06:05:1b:6c:
44:5c:5d:f6:fd:01:d7:6d:52:b3:1f:45:0e:26:79:e8:3e:58:
0b:5b:76:0b:bf:e0:d1:be:3d:bd:7b:72:f7:5e:76:82:a1:b6:
12:5a:40:58:a1:0c:42:71:5f:fe:45:a6:c4:8f:bd:1f:94:68:
92:54:fe:21:74:61:db:d0:41:65:3e:66:4c:d0:1c:8b:c8:05:
31:74:2b:22:51:ac:23:e5:75:f9:e4:28:b6:86:3f:1a:0d:3f:
b4:73:e0:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURU21SliFtDarptIejnbK/DOfMXkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDA1MTM1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTQ2NTc2Y2IyODI1ZjBmYzQzM2NjN2RiMGE2Zjg0NzMz
Mjc2OGE0Y2YwOWFjZjVmNGI2YmIwNjAxYTFhZjcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/6hVs4I2tfpx9zaSVNa0Eb1BTOGBsT8LrwhHAAv1fRxam
cJauuYg9JAWta9oN7XK3gx38bc85S/8zN6LCdslejLBQMSDow+MR/lCuU84XwjAI
0jFsYowEiCtjyuFLLT7v77z1epVuyzzaA5ORk6uhKYGvBH4LY6WNxUIs2SoqFkSY
h7GpHUog+RWcSalMt71SdyqDGoWFNsUqFRUb8+T7OdVYKuqVrg4MxLDGpTJWDI0w
LKhZ7kBqZFn++SrlnM8DTcx5gSGY2Dl3ur/psJac6vAN5umROvviKa9pODM7YPuP
+AAMVT8XSb1jotWAX1RWkdO6E4wdUpHj9EXKjaObAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU4PSWM/v3swciT2K0JSng1UIIUwIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk0ZDhmYzc3LTI4NjktNGI2MC1hNzEyLTQxYjc4NTRkNWZkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTZwwDQYJKoZIhvcNAQELBQADggEBAGzX15CgN556Q2eGAqYjJhIjHDCk
Zr6eRT6N79FuQa+BciPym8xR9K210dh/gbblNZqskdOoyOlLNQyg01qyBS77OHdi
fhypYbiLEENsWTeJ+7kH5/n+mzrySY67gj6ZWcSdtFM68ZaSkY4QO7plCemkVZvK
wa7BDMKBfmz6J19xnpyjrOkMzg/OguqW6luZnRkbQQ2tlytM90XSIt3zBgUbbERc
Xfb9AddtUrMfRQ4meeg+WAtbdgu/4NG+Pb17cvdedoKhthJaQFihDEJxX/5FpsSP
vR+UaJJU/iF0YdvQQWU+ZkzQHIvIBTF0KyJRrCPldfnkKLaGPxoNP7Rz4MM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:03 2025 by rpki-client