Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
File: f3593bc6-497b-4beb-8e27-47d654b88fdb.roa (raw, json)
Hash identifier: fQh964toKBukDIx+xaUAuZG0vHOYIcChOtVP6i1+4HA=
Subject key identifier: 24:5E:3B:0C:91:65:EB:15:79:54:F4:18:5B:FB:FF:BE:AF:CC:B6:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49CF93DDFC583A16A638AC2258A3A06AC3CAA46C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
Signing time: Sun 02 Nov 2025 00:20:42 +0000
ROA not before: Sun 02 Nov 2025 00:20:42 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 89.48.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cf:93:dd:fc:58:3a:16:a6:38:ac:22:58:a3:a0:6a:c3:ca:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:20:42 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=80d4040569b9fd440b807840d9915ff2dfa8f157e42764cc4a83c71d30120ea8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:d4:19:26:15:39:c3:2b:ac:1b:e6:ce:11:
f8:2f:49:f3:a7:df:22:5d:03:5d:89:63:d9:ea:9d:
3f:05:b4:30:4a:e2:0d:35:69:d6:40:96:2f:32:7e:
ef:99:bd:7d:d2:a1:d7:fe:aa:86:df:cc:7e:3a:0a:
5e:77:a7:c3:f4:eb:44:45:c2:a8:a8:04:4b:89:82:
8b:8a:4b:ce:ca:15:26:06:9d:4d:87:81:88:ed:65:
83:e3:d0:95:1c:01:cf:f6:7d:90:e7:7e:a9:4b:87:
15:f9:79:c4:16:60:64:d1:4c:a3:94:e5:ec:4f:48:
8f:8b:8d:de:eb:88:d3:fd:c9:ac:27:15:a2:c8:b7:
6b:07:ce:c7:73:7d:ad:51:52:18:c0:b6:1c:68:12:
1c:ea:98:64:f2:cf:92:4b:56:dc:dd:f0:3c:62:5d:
cc:47:1a:0b:fe:df:12:d2:09:ff:2f:bd:53:4a:79:
a4:90:95:1f:33:b6:cd:ed:da:d9:f2:91:37:3e:5c:
f3:ba:fb:89:06:df:2d:b8:52:ac:47:0e:89:cb:07:
96:b6:b4:b8:33:c7:67:e6:17:1a:2f:2c:c7:00:5f:
f3:26:49:0c:0c:4d:ac:9f:aa:5c:da:be:15:b7:a8:
8a:58:e5:6c:f7:83:95:79:fe:48:3e:38:6c:cc:99:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5E:3B:0C:91:65:EB:15:79:54:F4:18:5B:FB:FF:BE:AF:CC:B6:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3593bc6-497b-4beb-8e27-47d654b88fdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.48.0.0/13
Signature Algorithm: sha256WithRSAEncryption
b7:ee:bb:7f:d8:be:14:f7:bf:c7:9e:90:1f:6e:c2:ee:13:f5:
b4:62:86:95:5e:c5:f0:40:8e:e2:19:f5:c6:4b:61:e5:be:c5:
27:b8:7f:4d:ae:25:91:4a:7f:52:71:51:b7:d7:a0:f9:2c:34:
88:28:62:4c:79:ae:33:f8:82:c7:0a:ae:70:5c:b6:97:ea:6a:
40:89:06:6b:70:b5:09:3e:29:58:1c:cb:b7:c3:b8:e2:30:7c:
e2:56:7c:09:e9:30:cb:56:ed:d9:ea:aa:19:bb:75:e2:48:ab:
7c:4d:ca:89:81:19:ad:7b:56:50:28:c0:0b:fa:bb:16:69:49:
be:c5:a8:9e:d5:9a:31:fd:9a:f5:43:dd:bc:f7:92:cf:61:a8:
d6:78:a0:83:b3:aa:3d:d5:7a:fa:fd:49:c7:40:63:d6:16:05:
53:fa:b4:a9:fa:73:f4:10:42:e0:78:5f:56:9a:9b:73:f7:cf:
81:ff:0c:2f:83:8b:78:cb:ec:5c:07:7c:6f:e1:88:c1:84:4a:
24:e1:3e:9e:a3:5f:97:d3:a4:2c:47:55:f3:a2:bc:1e:27:1f:
48:78:76:8f:b0:52:6a:10:f9:38:de:db:0a:77:83:ba:b0:2e:
0c:9b:5e:80:3d:cf:7a:d8:38:e4:d2:b7:19:da:f3:ff:4d:79:
98:ea:38:e6
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSc+T3fxYOhamOKwiWKOgasPKpGwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAyMDQyWhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MGQ0MDQwNTY5YjlmZDQ0MGI4MDc4NDBkOTkxNWZmMmRm
YThmMTU3ZTQyNzY0Y2M0YTgzYzcxZDMwMTIwZWE4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFtNQZJhU5wyusG+bOEfgvSfOn3yJdA12JY9nqnT8FtDBK
4g01adZAli8yfu+ZvX3Sodf+qobfzH46Cl53p8P060RFwqioBEuJgouKS87KFSYG
nU2HgYjtZYPj0JUcAc/2fZDnfqlLhxX5ecQWYGTRTKOU5exPSI+Ljd7riNP9yawn
FaLIt2sHzsdzfa1RUhjAthxoEhzqmGTyz5JLVtzd8DxiXcxHGgv+3xLSCf8vvVNK
eaSQlR8zts3t2tnykTc+XPO6+4kG3y24UqxHDonLB5a2tLgzx2fmFxovLMcAX/Mm
SQwMTayfqlzavhW3qIpY5Wz3g5V5/kg+OGzMmQJNAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUJF47DJFl6xV5VPQYW/v/vq/MtuAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YzNTkzYmM2LTQ5N2ItNGJlYi04ZTI3LTQ3ZDY1NGI4OGZkYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwNZMDANBgkqhkiG9w0BAQsFAAOCAQEAt+67f9i+FPe/x56QH27C7hP1tGKG
lV7F8ECO4hn1xkth5b7FJ7h/Ta4lkUp/UnFRt9eg+Sw0iChiTHmuM/iCxwqucFy2
l+pqQIkGa3C1CT4pWBzLt8O44jB84lZ8Cekwy1bt2eqqGbt14kirfE3KiYEZrXtW
UCjAC/q7FmlJvsWontWaMf2a9UPdvPeSz2Go1nigg7OqPdV6+v1Jx0Bj1hYFU/q0
qfpz9BBC4HhfVpqbc/fPgf8ML4OLeMvsXAd8b+GIwYRKJOE+nqNfl9OkLEdV86K8
HicfSHh2j7BSahD5ON7bCneDurAuDJtegD3Petg45NK3Gdrz/015mOo45g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:07 2025 by rpki-client