Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa
File: c6da0220-4baf-4a3e-b3be-24321f963d36.roa (raw, json)
Hash identifier: bQI33+x0ne242GTBdlcUjEaUMRjaEDW5J2EagJkIFzU=
Subject key identifier: F4:11:E1:8C:B5:4E:6D:71:E4:F0:05:76:A9:9A:A1:8D:CA:86:B9:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E43401172C9D011C8B224FCA119F5689A355823
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa
Signing time: Sun 02 Nov 2025 00:11:09 +0000
ROA not before: Sun 02 Nov 2025 00:11:09 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 56.13.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:43:40:11:72:c9:d0:11:c8:b2:24:fc:a1:19:f5:68:9a:35:58:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:11:09 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=e9e555c0670e3f79d96123bbefd5309c521285ac05c5c310acf8d64c1178f353, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f1:b1:bc:c7:29:b4:25:32:5e:3b:89:78:b6:
3e:f8:38:39:9d:04:d7:07:40:e5:be:52:36:1c:ef:
54:b2:c0:b0:9f:5f:82:a3:77:f5:72:ea:c0:87:61:
fa:89:33:ec:67:e7:4c:54:6d:f5:c2:e0:bd:0f:be:
09:37:da:6e:ba:36:c8:76:89:96:31:32:0f:21:8f:
5a:55:be:bf:55:cf:0d:82:b5:8f:c8:72:51:65:df:
af:da:b3:6c:42:9d:02:8c:45:42:6d:5d:0a:81:d2:
4e:41:05:c1:2d:00:d7:da:8f:db:d8:9e:34:64:4d:
03:c2:69:b4:0f:0e:02:92:0c:49:dc:41:08:0a:99:
9b:0c:ea:76:18:c2:bf:21:df:b5:2b:8f:ef:d3:df:
6e:c4:fd:95:f8:39:3a:da:f2:4d:59:2b:eb:30:26:
13:dd:d1:68:9e:cd:40:36:c4:6d:1f:57:d1:3a:3c:
8c:c0:37:69:95:6d:66:53:11:0e:f8:5e:35:2d:f6:
57:5d:31:a6:35:6e:cb:f2:90:b9:10:32:a2:4e:bc:
2a:d9:af:ba:68:44:40:43:25:05:c7:57:b3:94:58:
2d:8c:8c:c1:83:84:9e:6c:c6:26:90:cd:d0:c6:45:
85:ef:13:b6:8d:d2:91:3e:77:2e:6e:47:3f:37:01:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:E1:8C:B5:4E:6D:71:E4:F0:05:76:A9:9A:A1:8D:CA:86:B9:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6da0220-4baf-4a3e-b3be-24321f963d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.13.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:b0:a1:8c:bf:b1:07:03:bc:f0:80:a5:76:29:0c:a5:86:08:
2a:bb:bf:3f:77:fd:a0:3f:23:78:53:c6:03:a8:32:39:df:80:
b8:f5:c0:f0:be:50:f3:ee:ca:92:5e:61:1f:bf:8e:55:b9:ec:
9e:92:75:2f:be:33:99:87:d7:41:49:7d:70:e9:34:1c:c0:18:
4d:55:8b:ac:da:7b:8e:83:90:56:87:d5:50:3b:5a:77:72:41:
9a:20:c4:84:ad:34:ed:83:52:a1:5f:1f:1b:03:0b:02:82:21:
e2:75:fc:53:f4:97:dc:67:de:67:68:0b:06:2b:e2:65:29:81:
4a:79:0e:f0:f5:62:eb:8f:2a:8b:fd:54:a0:83:58:de:5c:62:
e3:b5:40:6c:b7:14:a8:72:76:2d:00:d3:91:72:6b:97:bd:57:
80:1a:6d:b2:73:4f:d2:45:28:ef:a0:5e:c2:cc:e7:cf:66:d8:
da:fd:01:40:7f:80:3a:af:d6:99:82:6f:32:8b:88:49:54:e4:
6c:c7:1e:e2:41:fc:67:a6:69:73:d4:84:d4:9b:8e:f0:db:5c:
61:ef:6c:09:32:aa:8d:42:35:63:a2:7c:ac:02:d9:2e:ed:e3:
b1:b5:42:5b:b0:c4:bd:c7:a4:e6:16:7c:6d:32:52:38:8b:31:
ed:77:2a:7c
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTkNAEXLJ0BHIsiT8oRn1aJo1WCMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAxMTA5WhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOWU1NTVjMDY3MGUzZjc5ZDk2MTIzYmJlZmQ1MzA5YzUy
MTI4NWFjMDVjNWMzMTBhY2Y4ZDY0YzExNzhmMzUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDn8bG8xym0JTJeO4l4tj74ODmdBNcHQOW+UjYc71SywLCf
X4Kjd/Vy6sCHYfqJM+xn50xUbfXC4L0Pvgk32m66Nsh2iZYxMg8hj1pVvr9Vzw2C
tY/IclFl36/as2xCnQKMRUJtXQqB0k5BBcEtANfaj9vYnjRkTQPCabQPDgKSDEnc
QQgKmZsM6nYYwr8h37Urj+/T327E/ZX4OTra8k1ZK+swJhPd0WiezUA2xG0fV9E6
PIzAN2mVbWZTEQ74XjUt9lddMaY1bsvykLkQMqJOvCrZr7poREBDJQXHV7OUWC2M
jMGDhJ5sxiaQzdDGRYXvE7aN0pE+dy5uRz83AUIpAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU9BHhjLVObXHk8AV2qZqhjcqGuSYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M2ZGEwMjIwLTRiYWYtNGEzZS1iM2JlLTI0MzIxZjk2M2QzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4DTANBgkqhkiG9w0BAQsFAAOCAQEAd7ChjL+xBwO88ICldikMpYYIKru/
P3f9oD8jeFPGA6gyOd+AuPXA8L5Q8+7Kkl5hH7+OVbnsnpJ1L74zmYfXQUl9cOk0
HMAYTVWLrNp7joOQVofVUDtad3JBmiDEhK007YNSoV8fGwMLAoIh4nX8U/SX3Gfe
Z2gLBiviZSmBSnkO8PVi648qi/1UoINY3lxi47VAbLcUqHJ2LQDTkXJrl71XgBpt
snNP0kUo76Bewsznz2bY2v0BQH+AOq/WmYJvMouISVTkbMce4kH8Z6Zpc9SE1JuO
8NtcYe9sCTKqjUI1Y6J8rALZLu3jsbVCW7DEvcek5hZ8bTJSOIsx7XcqfA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:33 2025 by rpki-client