Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af7a28ad-c2f9-435e-a8ee-e84639d006cf.roa
File: af7a28ad-c2f9-435e-a8ee-e84639d006cf.roa (raw, json)
Hash identifier: VPwiW8dNdCbgUqLvACYI0j5sxN+JMncC+ShN9eIzULA=
Subject key identifier: 35:27:E9:48:40:4F:6E:49:F9:C0:FF:58:D1:5C:F3:53:7C:12:12:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B94FA618E5B30BC3F2E73365DDD994C915A4C4F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af7a28ad-c2f9-435e-a8ee-e84639d006cf.roa
Signing time: Tue 28 Oct 2025 00:21:25 +0000
ROA not before: Tue 28 Oct 2025 00:21:25 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:94:fa:61:8e:5b:30:bc:3f:2e:73:36:5d:dd:99:4c:91:5a:4c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:21:25 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=dd8c82d6f3f7688689d1ce0b888fa0b268a6fe28dc40aa5c926246c1012499dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:e1:a8:cd:43:82:5a:b9:31:58:ac:93:b5:
74:9e:d6:b0:85:61:4a:95:91:e6:52:cb:5a:b4:47:
87:be:40:8b:3e:c3:4f:22:91:6a:e8:dd:14:9c:f6:
2c:a0:3b:f9:2c:f8:32:1b:eb:17:2c:3b:aa:d5:7f:
58:b9:b6:22:ea:59:98:ee:8b:38:4e:2a:9b:c5:c9:
fc:33:05:d2:1b:11:a2:8f:7b:e3:f5:fb:de:84:48:
f8:14:09:41:e9:84:59:5a:52:ad:1d:df:bd:85:7b:
f4:78:8e:f9:0b:7c:0b:d0:86:b7:77:de:10:9f:cf:
48:98:d8:b6:93:e8:ff:9e:5a:c8:8a:56:03:c7:2e:
dd:c3:a1:57:27:86:5b:9c:79:ed:d0:b0:12:c3:f7:
4f:61:c5:f6:60:70:1f:7c:8b:9f:d8:65:41:3c:24:
c7:68:a0:27:37:3f:41:2c:46:ad:26:28:2e:56:6a:
2f:2c:9c:ed:f8:13:02:bb:02:45:6f:a7:e6:3a:8c:
66:ea:8f:c0:cd:cd:f3:7f:68:e9:58:50:e1:8b:17:
f7:73:ad:d5:d3:ca:fc:29:10:0f:91:03:79:3c:fd:
84:34:33:7e:3f:97:72:d8:cb:f7:2a:2d:bc:15:37:
e0:d3:67:54:25:3d:ac:d7:3e:95:71:93:12:18:e5:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:27:E9:48:40:4F:6E:49:F9:C0:FF:58:D1:5C:F3:53:7C:12:12:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af7a28ad-c2f9-435e-a8ee-e84639d006cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.138.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:69:ce:57:37:2a:b8:fd:1a:0a:47:6b:c0:c7:9d:cc:57:80:
51:72:0e:93:ba:74:5a:f1:83:fd:54:33:e9:09:c4:cb:4a:a0:
08:36:35:bb:40:e3:a9:6c:35:b9:75:80:73:0e:d4:38:48:91:
01:cd:5f:bd:5c:31:7e:eb:50:84:5e:a0:37:80:d3:48:81:ec:
1c:34:97:0b:05:c7:7a:34:4d:f6:46:a4:d0:08:f8:e3:55:bc:
89:b5:18:e9:df:8e:d6:8b:7a:14:6a:79:b7:67:02:03:c0:90:
6d:ab:f6:a5:e5:8a:01:78:5d:e9:33:93:e3:22:38:69:6f:e8:
ee:bf:7b:cb:de:19:8c:19:65:35:b9:5f:cb:4e:70:74:6b:c7:
29:cd:9d:23:7c:d9:dc:7b:74:bb:7d:53:fd:e8:15:81:09:81:
d5:36:e7:73:33:3e:33:f2:d5:ad:96:b0:85:81:b6:8a:51:24:
20:95:12:b1:ae:1c:fe:5b:7a:1d:f4:f3:7e:dc:8f:a9:67:e0:
2c:ca:25:0d:2e:e3:11:2f:e8:72:94:1e:7f:ec:45:23:a7:6d:
47:0e:cb:1f:15:1d:94:f3:40:86:48:73:a5:75:e4:64:f9:fe:
a6:03:5b:70:96:ee:a2:10:2b:c6:f0:13:9a:5b:2d:2b:ab:fb:
82:23:26:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUW5T6YY5bMLw/LnM2Xd2ZTJFaTE8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDAyMTI1WhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZDhjODJkNmYzZjc2ODg2ODlkMWNlMGI4ODhmYTBiMjY4
YTZmZTI4ZGM0MGFhNWM5MjYyNDZjMTAxMjQ5OWRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+NeGozUOCWrkxWKyTtXSe1rCFYUqVkeZSy1q0R4e+QIs+
w08ikWro3RSc9iygO/ks+DIb6xcsO6rVf1i5tiLqWZjuizhOKpvFyfwzBdIbEaKP
e+P1+96ESPgUCUHphFlaUq0d372Fe/R4jvkLfAvQhrd33hCfz0iY2LaT6P+eWsiK
VgPHLt3DoVcnhlucee3QsBLD909hxfZgcB98i5/YZUE8JMdooCc3P0EsRq0mKC5W
ai8snO34EwK7AkVvp+Y6jGbqj8DNzfN/aOlYUOGLF/dzrdXTyvwpEA+RA3k8/YQ0
M34/l3LYy/cqLbwVN+DTZ1QlPazXPpVxkxIY5TRrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNSfpSEBPbkn5wP9Y0VzzU3wSEngwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FmN2EyOGFkLWMyZjktNDM1ZS1hOGVlLWU4NDYzOWQwMDZjZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYowDQYJKoZIhvcNAQELBQADggEBABtpzlc3Krj9GgpHa8DHncxXgFFy
DpO6dFrxg/1UM+kJxMtKoAg2NbtA46lsNbl1gHMO1DhIkQHNX71cMX7rUIReoDeA
00iB7Bw0lwsFx3o0TfZGpNAI+ONVvIm1GOnfjtaLehRqebdnAgPAkG2r9qXligF4
Xekzk+MiOGlv6O6/e8veGYwZZTW5X8tOcHRrxynNnSN82dx7dLt9U/3oFYEJgdU2
53MzPjPy1a2WsIWBtopRJCCVErGuHP5beh30837cj6ln4CzKJQ0u4xEv6HKUHn/s
RSOnbUcOyx8VHZTzQIZIc6V15GT5/qYDW3CW7qIQK8bwE5pbLSur+4IjJow=
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:09:35 2025 by rpki-client