Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86edcba-fb91-4a06-905c-80d24bb590fe.roa
File: a86edcba-fb91-4a06-905c-80d24bb590fe.roa (raw, json)
Hash identifier: WqpX2BYozJt3ht8y/f0pEOsMtQo8Fph3D28oBd3G5ho=
Subject key identifier: 4A:92:F8:E9:D9:6B:BE:A8:0E:07:1C:F0:E0:98:4F:F7:08:21:4F:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57F768379E39FB389E045A074B9A0E90C9ED0D6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86edcba-fb91-4a06-905c-80d24bb590fe.roa
Signing time: Wed 22 Oct 2025 00:20:57 +0000
ROA not before: Wed 22 Oct 2025 00:20:57 +0000
ROA not after: Wed 26 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f7:68:37:9e:39:fb:38:9e:04:5a:07:4b:9a:0e:90:c9:ed:0d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:20:57 2025 GMT
Not After : Nov 26 23:59:59 2025 GMT
Subject: serialNumber=6b57fe9a9164817e9fcaaf869571c19c30a7f3a4c56384428077091b0cc8bc9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:e3:17:76:f0:44:72:e9:7b:d1:2b:b8:5f:
f5:34:8f:f1:ad:99:bd:81:f6:f9:28:bf:87:78:cb:
48:fd:1b:24:48:e9:4e:66:80:96:7a:58:91:48:9a:
99:15:f4:6c:23:3f:8c:7c:b7:95:2e:ff:41:bd:ae:
6a:b7:75:09:51:5e:bf:c0:3a:c3:3a:6b:6d:d3:17:
c5:b8:4e:68:6a:d0:08:8a:10:9a:ca:4c:9d:56:23:
99:59:01:91:fe:29:1b:55:33:25:3b:98:d5:9d:99:
ed:5a:57:18:85:b8:d2:89:08:dc:b8:44:88:4b:10:
6f:d8:72:f4:94:66:3f:7c:3a:93:b1:10:c1:0c:33:
b0:ab:81:eb:79:e9:91:a4:3a:84:7e:65:6b:82:fe:
3f:be:cc:af:22:33:d3:59:48:ea:42:39:19:01:c9:
71:df:7f:82:a1:6f:5e:9b:90:aa:48:50:9a:84:17:
20:92:d8:de:6e:b1:38:4c:65:c3:d0:41:06:50:d1:
85:1c:ed:98:82:05:eb:9a:ab:27:67:3a:07:da:09:
96:23:60:6b:02:a2:c8:29:7b:4e:05:18:d0:77:ca:
8c:8d:e2:cc:e5:04:20:eb:e9:be:92:a6:a2:f0:6c:
57:09:3a:eb:79:fd:4a:41:1f:e8:87:73:1b:0c:8d:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:92:F8:E9:D9:6B:BE:A8:0E:07:1C:F0:E0:98:4F:F7:08:21:4F:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a86edcba-fb91-4a06-905c-80d24bb590fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.55.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:c8:2a:8a:69:a3:a3:ff:7d:40:30:3c:20:cf:98:ff:35:4d:
82:71:3c:91:5f:04:5f:0d:cb:a6:10:ae:30:e3:d4:34:63:2d:
93:b6:83:df:86:0f:ca:0d:77:92:8e:10:30:01:68:c6:cd:f9:
a1:90:a6:81:57:6f:11:10:99:6d:25:d6:e5:5e:22:36:fc:ef:
f5:bd:3e:14:6a:6e:55:9a:84:86:cd:49:3e:f2:ed:17:10:bc:
8c:12:52:c1:4e:71:cc:07:f7:5b:32:ba:3a:4d:3a:5b:98:55:
89:bd:92:cd:01:29:d7:ee:a8:9c:b1:a0:0d:3d:58:ed:06:72:
e4:22:1e:e3:94:47:0d:9d:fa:2e:a5:73:1d:23:58:57:5f:02:
3f:72:77:f8:46:db:15:f8:0e:18:cb:07:6b:99:41:82:8d:59:
8f:0f:d0:15:ac:e9:f7:37:a1:12:b3:a6:dd:32:ad:ea:e8:98:
5a:20:0b:94:66:56:e1:71:58:0d:cd:14:14:b0:0b:39:79:87:
d0:57:e8:cd:c3:5e:09:6b:e7:6d:be:be:08:04:3c:1d:67:33:
10:1f:6a:be:23:8c:d1:c6:54:b1:ed:40:67:f2:31:1d:1c:3f:
2d:97:bc:3f:cb:a5:a5:ee:56:cd:b4:d3:2c:49:c8:1e:fd:ef:
c9:6e:e9:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUV/doN545+zieBFoHS5oOkMntDWwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIyMDAyMDU3WhcNMjUxMTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YjU3ZmU5YTkxNjQ4MTdlOWZjYWFmODY5NTcxYzE5YzMw
YTdmM2E0YzU2Mzg0NDI4MDc3MDkxYjBjYzhiYzliMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAauMXdvBEcul70Su4X/U0j/Gtmb2B9vkov4d4y0j9GyRI
6U5mgJZ6WJFImpkV9GwjP4x8t5Uu/0G9rmq3dQlRXr/AOsM6a23TF8W4Tmhq0AiK
EJrKTJ1WI5lZAZH+KRtVMyU7mNWdme1aVxiFuNKJCNy4RIhLEG/YcvSUZj98OpOx
EMEMM7Crget56ZGkOoR+ZWuC/j++zK8iM9NZSOpCORkByXHff4Khb16bkKpIUJqE
FyCS2N5usThMZcPQQQZQ0YUc7ZiCBeuaqydnOgfaCZYjYGsCosgpe04FGNB3yoyN
4szlBCDr6b6SpqLwbFcJOut5/UpBH+iHcxsMjY7rAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSpL46dlrvqgOBxzw4JhP9wghT9cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E4NmVkY2JhLWZiOTEtNGEwNi05MDVjLTgwZDI0YmI1OTBmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjNjcwDQYJKoZIhvcNAQELBQADggEBANDIKoppo6P/fUAwPCDPmP81TYJx
PJFfBF8Ny6YQrjDj1DRjLZO2g9+GD8oNd5KOEDABaMbN+aGQpoFXbxEQmW0l1uVe
Ijb87/W9PhRqblWahIbNST7y7RcQvIwSUsFOccwH91syujpNOluYVYm9ks0BKdfu
qJyxoA09WO0GcuQiHuOURw2d+i6lcx0jWFdfAj9yd/hG2xX4DhjLB2uZQYKNWY8P
0BWs6fc3oRKzpt0yreromFogC5RmVuFxWA3NFBSwCzl5h9BX6M3DXglr522+vggE
PB1nMxAfar4jjNHGVLHtQGfyMR0cPy2XvD/LpaXuVs200yxJyB7978lu6Vg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:56:33 2025 by rpki-client