Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa
File: d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa (raw, json)
Hash identifier: /HkIVMdd+9QyluHqJKo6UZO94GAA/vdkVn5ibg6kklI=
Subject key identifier: 1F:9E:56:5D:E0:FB:29:C5:B7:22:A6:E1:0B:B3:87:29:7E:D6:96:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AEE23D372BED95763283C0A28775964A85499FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa
Signing time: Wed 05 Nov 2025 00:30:56 +0000
ROA not before: Wed 05 Nov 2025 00:30:56 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 64.190.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ee:23:d3:72:be:d9:57:63:28:3c:0a:28:77:59:64:a8:54:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:30:56 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=c6b34d0fb091e754813b9cea3b068b1749b3f74126d9a872e476d4a3065d9299, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:bd:63:01:c5:6b:0d:f5:ab:af:61:eb:7c:
33:89:49:d8:08:5a:9d:53:42:fe:05:28:e3:51:d1:
e5:c3:1b:bb:dd:85:f5:ff:1f:50:77:c0:17:63:68:
53:7c:29:c7:93:32:38:30:78:3c:23:ab:56:fd:35:
d6:7c:5e:e1:88:0a:36:87:ba:df:c3:78:14:eb:db:
13:2b:57:f4:f3:71:b9:a9:0d:dc:7a:57:6d:07:8e:
ad:ec:5c:1a:19:80:1f:e0:fe:c3:b1:35:97:73:6f:
66:ce:6f:48:84:ea:af:04:eb:68:86:ba:1c:2d:6d:
be:ac:2b:3a:de:54:70:21:48:69:ed:33:31:de:12:
d9:95:99:89:a2:04:70:49:5b:6c:8a:d0:9e:13:1a:
79:c4:64:9c:0b:8b:bc:48:9c:29:36:bf:2a:4d:83:
05:fc:68:62:e7:32:35:2f:f4:4c:25:d0:54:c9:21:
f1:c3:ba:12:55:35:f2:ef:b9:3a:11:83:2d:ed:86:
80:2d:f4:00:1a:b8:d6:77:85:61:53:a1:0c:06:24:
de:6e:8c:dc:63:0e:14:54:dc:79:1b:41:8f:d3:f7:
f9:ff:e4:1c:df:32:c3:6b:d9:12:04:a8:72:4b:c5:
d1:cf:a3:58:56:b6:70:ad:94:b6:da:c2:0b:2d:a0:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:56:5D:E0:FB:29:C5:B7:22:A6:E1:0B:B3:87:29:7E:D6:96:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d8752aa3-1736-46a6-af08-1ff1a107c6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.84.0/22
Signature Algorithm: sha256WithRSAEncryption
00:4f:18:5f:63:b2:b8:05:a3:c5:8f:89:14:91:34:97:8f:ee:
c6:bc:a8:2b:ba:1d:ac:0a:51:65:2d:3e:2e:1b:52:97:fa:68:
3d:f1:61:07:5a:2a:ab:36:31:d0:81:96:ed:51:31:89:3e:6f:
e1:e9:06:53:cd:61:1a:bd:68:ac:ae:e8:82:00:5c:73:bf:56:
4a:18:a2:79:ec:01:d0:be:14:c7:01:bb:ba:a9:ae:8f:27:9e:
56:8f:81:72:2b:15:60:99:5e:18:32:48:e3:2c:56:5c:24:23:
a2:76:89:5a:1f:30:49:d6:7e:a5:b6:8c:08:84:81:22:86:b8:
e1:78:d2:a2:46:c5:8b:9c:e4:b9:1f:48:d6:4a:09:73:d9:84:
60:b4:1c:92:ea:11:b9:7a:37:65:f4:66:69:10:bd:cc:27:44:
33:01:c2:1c:3f:fc:42:04:c0:9f:1b:e7:d3:cc:6d:fa:b2:cb:
ad:3c:d8:da:db:41:9e:62:69:f0:ff:8a:6a:4b:c5:78:31:df:
82:33:f2:0d:9f:9a:9c:ea:b3:cf:b9:e2:1b:7f:90:8e:51:e9:
0a:cb:b5:8b:67:e1:b2:85:53:4c:8a:78:e0:a0:d8:d6:f4:f4:
b9:4c:f7:9b:4c:ca:1b:50:17:26:7b:ae:af:19:0a:d5:6f:75:
99:4b:d4:7b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOu4j03K+2VdjKDwKKHdZZKhUmfswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA1MDAzMDU2WhcNMjUxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNmIzNGQwZmIwOTFlNzU0ODEzYjljZWEzYjA2OGIxNzQ5
YjNmNzQxMjZkOWE4NzJlNDc2ZDRhMzA2NWQ5Mjk5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDe7b1jAcVrDfWrr2HrfDOJSdgIWp1TQv4FKONR0eXDG7vd
hfX/H1B3wBdjaFN8KceTMjgweDwjq1b9NdZ8XuGICjaHut/DeBTr2xMrV/Tzcbmp
Ddx6V20Hjq3sXBoZgB/g/sOxNZdzb2bOb0iE6q8E62iGuhwtbb6sKzreVHAhSGnt
MzHeEtmVmYmiBHBJW2yK0J4TGnnEZJwLi7xInCk2vypNgwX8aGLnMjUv9Ewl0FTJ
IfHDuhJVNfLvuToRgy3thoAt9AAauNZ3hWFToQwGJN5ujNxjDhRU3HkbQY/T9/n/
5BzfMsNr2RIEqHJLxdHPo1hWtnCtlLbawgstoL2pAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUH55WXeD7KcW3IqbhC7OHKX7WloMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q4NzUyYWEzLTE3MzYtNDZhNi1hZjA4LTFmZjFhMTA3YzZmYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJAvlQwDQYJKoZIhvcNAQELBQADggEBAABPGF9jsrgFo8WPiRSRNJeP7sa8
qCu6HawKUWUtPi4bUpf6aD3xYQdaKqs2MdCBlu1RMYk+b+HpBlPNYRq9aKyu6IIA
XHO/VkoYonnsAdC+FMcBu7qpro8nnlaPgXIrFWCZXhgySOMsVlwkI6J2iVofMEnW
fqW2jAiEgSKGuOF40qJGxYuc5LkfSNZKCXPZhGC0HJLqEbl6N2X0ZmkQvcwnRDMB
whw//EIEwJ8b59PMbfqyy6082NrbQZ5iafD/impLxXgx34Iz8g2fmpzqs8+54ht/
kI5R6QrLtYtn4bKFU0yKeOCg2Nb09LlM95tMyhtQFyZ7rq8ZCtVvdZlL1Hs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:11 2025 by rpki-client