Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa
File: d4a21000-3e1d-4970-8585-41d9313167de.roa (raw, json)
Hash identifier: kSo8mKGpqvKsdzo8Zt2keMyHHS0hG3Yq2yPA4TZHGl0=
Subject key identifier: D4:DB:AB:3E:E9:A9:A5:94:C5:FD:10:F1:43:53:F0:72:44:BC:57:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6715FE798B5B2F06C2931163CD2B372DEE314F85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa
Signing time: Tue 28 Oct 2025 01:00:11 +0000
ROA not before: Tue 28 Oct 2025 01:00:11 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:15:fe:79:8b:5b:2f:06:c2:93:11:63:cd:2b:37:2d:ee:31:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 01:00:11 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=b9770cc871eb106082bd3c1d48ef68d2651a388342e4947f66731a8c15bc74e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:a8:03:05:aa:f8:e8:6a:03:17:60:55:f0:
9d:08:a1:b4:81:34:f7:23:e3:14:55:a5:72:bd:6a:
1b:05:2e:88:07:0b:bc:5c:93:7c:5c:ee:3b:b6:6d:
c7:8e:2c:53:96:ac:8c:b8:0d:2e:c2:ba:64:39:f3:
06:30:78:45:04:5a:61:da:d6:ed:ed:65:71:09:e5:
a0:96:a6:2b:6d:bb:9c:c4:3b:e6:a4:52:fd:0a:d1:
8a:66:cf:cb:04:16:14:af:fa:cc:c6:3b:5f:d0:cb:
f4:21:c2:3d:a2:2e:7b:d3:12:57:d3:bc:6d:a2:2e:
cd:bb:ff:a3:64:3c:8d:f3:dc:43:d7:82:27:e0:75:
ab:9d:e8:63:04:83:bd:a0:33:37:49:31:a5:94:5b:
75:81:32:bf:10:2c:dd:6a:e5:1a:9c:f5:d6:c8:bd:
96:f1:1d:51:80:06:51:0d:a9:a4:24:4e:e4:d2:f9:
1a:22:36:38:9e:1d:92:d1:5f:cf:dd:59:83:76:38:
94:0b:0a:dd:d5:ec:46:40:3a:ab:8e:90:91:ee:e5:
ae:4e:53:fc:6b:c2:c2:8d:ba:5d:91:15:c0:75:fd:
d5:ec:18:2c:0c:2d:cb:cb:f7:2f:c3:a8:c8:72:07:
80:b8:99:82:0c:9e:05:9c:ea:b4:17:a0:e8:3a:18:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:AB:3E:E9:A9:A5:94:C5:FD:10:F1:43:53:F0:72:44:BC:57:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4a21000-3e1d-4970-8585-41d9313167de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.140.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:92:a1:d4:c8:17:aa:ef:97:f2:aa:b0:38:c7:7e:bb:16:89:
d1:45:96:e2:69:d3:ad:6a:b7:a8:2d:8e:ed:7b:d5:98:ce:0a:
d0:d0:87:b5:9d:69:de:26:ba:e9:89:63:bb:fe:61:b4:70:ca:
a1:0a:83:ec:9a:ad:db:94:02:ce:92:c2:38:49:61:7f:5c:29:
70:8c:84:39:78:a3:9c:05:ef:53:bc:ed:80:d2:51:e6:48:5a:
5c:24:42:c2:e0:19:a3:d0:96:b5:95:4a:c5:49:32:f8:61:d1:
ce:78:c1:b0:a2:15:56:4c:f5:5e:ee:0b:2b:3f:01:3d:55:51:
0d:fa:79:eb:65:07:e2:2d:60:90:1e:c4:57:6f:a5:7b:e7:9c:
fa:4a:02:73:20:15:86:c0:d4:6e:32:e4:28:4c:49:0f:5c:31:
27:68:64:b1:49:ab:20:e6:68:e0:64:28:09:f4:cf:64:53:a5:
84:e3:4c:da:0a:dd:13:6b:00:3a:4e:0c:22:e1:8b:4c:91:4c:
86:f6:11:ea:4d:42:a8:3b:2e:1c:59:26:48:02:df:2a:0c:c0:
a0:02:96:7c:da:c0:b0:5a:92:ed:66:23:49:bb:f1:7e:31:43:
7a:62:f6:79:e4:ef:eb:e4:6d:c8:d8:c7:23:b8:e1:9f:c2:77:
f4:47:5c:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZxX+eYtbLwbCkxFjzSs3Le4xT4UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDEwMDExWhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOTc3MGNjODcxZWIxMDYwODJiZDNjMWQ0OGVmNjhkMjY1
MWEzODgzNDJlNDk0N2Y2NjczMWE4YzE1YmM3NGU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4K6gDBar46GoDF2BV8J0IobSBNPcj4xRVpXK9ahsFLogH
C7xck3xc7ju2bceOLFOWrIy4DS7CumQ58wYweEUEWmHa1u3tZXEJ5aCWpittu5zE
O+akUv0K0Ypmz8sEFhSv+szGO1/Qy/Qhwj2iLnvTElfTvG2iLs27/6NkPI3z3EPX
gifgdaud6GMEg72gMzdJMaWUW3WBMr8QLN1q5Rqc9dbIvZbxHVGABlENqaQkTuTS
+RoiNjieHZLRX8/dWYN2OJQLCt3V7EZAOquOkJHu5a5OU/xrwsKNul2RFcB1/dXs
GCwMLcvL9y/DqMhyB4C4mYIMngWc6rQXoOg6GFL1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1NurPumppZTF/RDxQ1PwckS8VwcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0YTIxMDAwLTNlMWQtNDk3MC04NTg1LTQxZDkzMTMxNjdkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTYwwDQYJKoZIhvcNAQELBQADggEBAHuSodTIF6rvl/KqsDjHfrsWidFF
luJp061qt6gtju171ZjOCtDQh7Wdad4muumJY7v+YbRwyqEKg+yarduUAs6SwjhJ
YX9cKXCMhDl4o5wF71O87YDSUeZIWlwkQsLgGaPQlrWVSsVJMvhh0c54wbCiFVZM
9V7uCys/AT1VUQ36eetlB+ItYJAexFdvpXvnnPpKAnMgFYbA1G4y5ChMSQ9cMSdo
ZLFJqyDmaOBkKAn0z2RTpYTjTNoK3RNrADpODCLhi0yRTIb2EepNQqg7LhxZJkgC
3yoMwKAClnzawLBaku1mI0m78X4xQ3pi9nnk7+vkbcjYxyO44Z/Cd/RHXMc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:35:21 2025 by rpki-client