Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa
File: a802275d-709f-4188-a78c-52e40d99a48f.roa (raw, json)
Hash identifier: eZUA9We/ZlymuDUS43t0JW3KkHSP3niInSlUThhxgqo=
Subject key identifier: 8C:87:AA:90:C6:3A:83:CA:0D:8E:00:71:D8:C3:E3:82:EF:87:EB:92
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DA7692BA3B5AC43AEC8899595B05AE4923CD6ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa
Signing time: Wed 05 Nov 2025 00:40:53 +0000
ROA not before: Wed 05 Nov 2025 00:40:53 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a7:69:2b:a3:b5:ac:43:ae:c8:89:95:95:b0:5a:e4:92:3c:d6:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:40:53 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=d4831e15a5af664dde6dd8df3ebd9029ab75b1cf28ce81c3ebabb1b074c1278f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:8e:80:25:25:dc:8b:b3:22:90:08:36:e4:
3d:e4:e9:2a:c1:0f:95:ae:f5:9e:6b:45:b8:a9:7d:
5b:78:32:94:bd:35:30:af:ad:55:c3:33:27:64:4b:
b1:95:d0:87:af:e5:76:5a:17:b3:ce:5b:e1:2a:54:
a4:e2:26:c1:fa:ed:3b:51:b1:b2:13:cd:0a:71:cc:
e5:d7:ce:4b:b6:5f:66:ae:16:a1:12:e5:05:bd:30:
da:a6:2a:20:b1:d7:4b:9e:5a:57:56:d2:a6:91:0f:
ba:ea:59:07:3d:e9:86:c7:ed:8c:b6:2d:5f:ac:bb:
01:79:02:03:0f:35:d9:62:68:9f:da:45:56:43:8d:
81:02:0d:7c:5d:63:1b:4d:95:d2:96:fa:41:ba:d0:
0d:c9:a2:d2:8b:e9:6c:29:ec:54:48:4c:15:18:e3:
31:50:88:48:be:3a:c2:b1:2a:a3:d6:66:30:05:15:
93:ff:fc:5e:bd:d1:1a:c8:70:60:3a:08:9a:4b:26:
64:cd:62:a4:76:42:53:45:7a:0e:db:4b:33:8b:c1:
9a:d7:39:e8:f6:dd:30:87:ff:a0:15:d7:8a:4a:36:
67:86:78:11:b7:35:23:ee:0d:11:7a:b9:d4:2c:e5:
d4:92:e2:94:84:c0:77:6a:a8:8e:66:e3:8f:78:8f:
84:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:AA:90:C6:3A:83:CA:0D:8E:00:71:D8:C3:E3:82:EF:87:EB:92
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a802275d-709f-4188-a78c-52e40d99a48f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.128.0/21
Signature Algorithm: sha256WithRSAEncryption
89:2f:98:4b:d1:49:41:16:2f:4e:99:83:1b:e2:c8:09:4b:a6:
20:91:e0:35:2d:7f:d6:55:39:1e:b6:b0:d7:89:2a:31:0d:d2:
21:98:c9:51:b5:20:76:62:e8:a8:8f:04:e2:74:a7:42:32:07:
64:59:2f:cd:98:dd:5a:66:7d:67:9e:99:b2:e4:07:e1:47:5c:
ad:1b:81:6e:96:e3:78:42:cc:b5:1c:90:e6:6d:6f:6c:e4:cb:
a9:1b:e0:cf:fb:f2:69:ee:7f:44:0b:e6:6f:5b:65:6b:35:55:
1e:56:ba:fa:09:11:2d:99:d7:b8:1e:5f:ba:59:95:c5:86:54:
f6:36:18:7c:9a:87:1d:0c:65:53:0f:50:37:7d:04:01:f4:ff:
16:18:42:e4:58:19:ff:65:ba:2a:4b:3f:5d:a7:60:c9:9e:79:
ec:43:ad:8c:3d:64:82:e4:7e:74:e1:c1:35:be:5f:24:ff:28:
32:c3:7a:b1:41:c8:d8:f5:49:6c:d4:bf:d5:4f:4b:b0:83:62:
47:96:bf:86:e2:93:1a:00:c0:2f:65:86:e6:71:62:82:87:d6:
20:43:03:23:af:74:f5:33:f2:73:93:04:38:18:95:ab:a7:8e:
f3:70:fb:13:0e:37:6d:49:38:b6:aa:e3:cd:ac:b6:2c:d5:7a:
ae:ad:d8:43
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHadpK6O1rEOuyImVlbBa5JI81u0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA1MDA0MDUzWhcNMjUxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNDgzMWUxNWE1YWY2NjRkZGU2ZGQ4ZGYzZWJkOTAyOWFi
NzViMWNmMjhjZTgxYzNlYmFiYjFiMDc0YzEyNzhmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcZ46AJSXci7MikAg25D3k6SrBD5Wu9Z5rRbipfVt4MpS9
NTCvrVXDMydkS7GV0Iev5XZaF7POW+EqVKTiJsH67TtRsbITzQpxzOXXzku2X2au
FqES5QW9MNqmKiCx10ueWldW0qaRD7rqWQc96YbH7Yy2LV+suwF5AgMPNdliaJ/a
RVZDjYECDXxdYxtNldKW+kG60A3JotKL6Wwp7FRITBUY4zFQiEi+OsKxKqPWZjAF
FZP//F690RrIcGA6CJpLJmTNYqR2QlNFeg7bSzOLwZrXOej23TCH/6AV14pKNmeG
eBG3NSPuDRF6udQs5dSS4pSEwHdqqI5m4494j4RxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjIeqkMY6g8oNjgBx2MPjgu+H65IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E4MDIyNzVkLTcwOWYtNDE4OC1hNzhjLTUyZTQwZDk5YTQ4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANFAIAwDQYJKoZIhvcNAQELBQADggEBAIkvmEvRSUEWL06ZgxviyAlLpiCR
4DUtf9ZVOR62sNeJKjEN0iGYyVG1IHZi6KiPBOJ0p0IyB2RZL82Y3VpmfWeembLk
B+FHXK0bgW6W43hCzLUckOZtb2zky6kb4M/78mnuf0QL5m9bZWs1VR5WuvoJES2Z
17geX7pZlcWGVPY2GHyahx0MZVMPUDd9BAH0/xYYQuRYGf9luipLP12nYMmeeexD
rYw9ZILkfnThwTW+XyT/KDLDerFByNj1SWzUv9VPS7CDYkeWv4bikxoAwC9lhuZx
YoKH1iBDAyOvdPUz8nOTBDgYlaunjvNw+xMON21JOLaq482stizVeq6t2EM=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:39 2025 by rpki-client