Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6166f91a-82ea-4409-a825-27c3c3bcb4e5.roa
File: 6166f91a-82ea-4409-a825-27c3c3bcb4e5.roa (raw, json)
Hash identifier: /Xm9o25D5CKben6sZtdDUyNzfJSgwgMgYuOMsugxg24=
Subject key identifier: 64:8B:38:2A:EE:6C:0F:29:0B:CC:50:A7:31:61:F3:91:45:7E:5D:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 487235D24080BE768658C28EC2AB4D12866E8595
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6166f91a-82ea-4409-a825-27c3c3bcb4e5.roa
Signing time: Sun 16 Nov 2025 00:31:17 +0000
ROA not before: Sun 16 Nov 2025 00:31:17 +0000
ROA not after: Sun 21 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.174.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:72:35:d2:40:80:be:76:86:58:c2:8e:c2:ab:4d:12:86:6e:85:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 16 00:31:17 2025 GMT
Not After : Dec 21 23:59:59 2025 GMT
Subject: serialNumber=ee971924b9485f6f317602d7fb8bad46ce04d469a0e08ff2d00cf67252db493a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:a3:82:e3:ac:2b:12:bc:bc:3a:02:7d:43:
0c:6c:c6:a9:8e:35:f9:61:a8:9e:a6:2f:88:14:d8:
d7:c3:3d:bf:21:9d:e4:06:f2:50:ad:34:9d:5a:ea:
08:77:b2:b7:20:75:63:d8:63:07:c6:82:ad:68:44:
95:6d:8e:9c:2d:a7:5e:13:c6:dd:61:5a:00:f6:bc:
6d:d2:b6:5d:ad:4d:09:02:b4:d0:b3:e8:23:62:83:
81:d8:33:24:2f:3f:3c:35:63:cf:cb:83:70:d2:32:
d7:47:18:1f:3d:af:99:8c:d9:04:bd:5c:1c:ea:d5:
53:a5:84:04:eb:c1:89:8b:3f:d5:4b:5b:60:0d:6c:
39:7f:2f:48:94:8f:d4:25:dd:a8:cf:9f:ad:00:3c:
67:0b:13:4e:4b:ef:05:56:90:ad:f3:46:4e:4b:fe:
f0:94:f6:3e:ca:6a:32:82:97:ac:14:b3:61:17:db:
b4:28:3f:19:90:9b:c7:3d:41:0d:3d:d6:47:a3:cf:
fe:70:8e:92:1b:a6:f0:d3:2e:e4:52:84:04:e8:0f:
9d:fe:ce:3a:98:4d:01:6e:bd:bf:cd:d7:5d:0e:5a:
89:82:d1:49:51:fb:6c:a8:0d:d4:5a:3a:66:6d:03:
f4:33:bf:d2:b4:f8:3e:10:0f:f5:f1:f3:9c:af:be:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:38:2A:EE:6C:0F:29:0B:CC:50:A7:31:61:F3:91:45:7E:5D:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6166f91a-82ea-4409-a825-27c3c3bcb4e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.174.154.0/24
Signature Algorithm: sha256WithRSAEncryption
13:03:e4:54:59:82:37:0e:cf:57:84:20:0c:7a:d1:72:22:68:
dd:23:ca:b3:d7:a7:0c:cd:29:7b:3d:fd:6b:2f:c7:d8:00:29:
c9:e4:4c:21:d0:76:fb:84:ff:8e:99:d9:75:df:09:7a:5f:1c:
ed:29:cc:39:bd:a4:89:30:9b:91:93:50:5b:b6:3a:fe:8d:d0:
79:f8:03:d0:b6:a2:69:fa:b3:ff:56:5c:93:9d:2e:bc:be:0d:
82:24:b4:bf:25:ac:e6:4c:ef:2a:cb:e4:bb:fb:5a:40:b9:11:
73:88:a5:41:8e:fc:5c:3e:77:de:c1:d7:5f:de:52:57:ad:c6:
4f:f2:43:9f:8e:6c:1a:c5:06:45:3f:76:8f:05:6e:8e:b9:bc:
84:db:52:0e:6c:ec:22:e9:0a:32:1e:71:ec:7b:ef:7d:cd:62:
83:60:e8:ab:4f:63:7f:73:57:97:65:06:e6:00:0b:aa:6d:c8:
d7:75:cb:65:bf:b1:22:90:90:c1:c6:f4:b4:ff:eb:a7:ba:b4:
b6:74:18:8e:f5:69:40:fb:ae:99:77:0c:49:10:a5:00:29:7b:
12:db:eb:20:5f:8e:6c:24:38:d1:13:ee:94:e9:9f:b8:06:61:
0d:41:98:4f:2e:8e:b4:f2:38:00:a4:8b:b5:1c:c7:2e:db:cf:
d8:d1:47:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSHI10kCAvnaGWMKOwqtNEoZuhZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTE2MDAzMTE3WhcNMjUxMjIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlZTk3MTkyNGI5NDg1ZjZmMzE3NjAyZDdmYjhiYWQ0NmNl
MDRkNDY5YTBlMDhmZjJkMDBjZjY3MjUyZGI0OTNhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDZ6OC46wrEry8OgJ9QwxsxqmONflhqJ6mL4gU2NfDPb8h
neQG8lCtNJ1a6gh3srcgdWPYYwfGgq1oRJVtjpwtp14Txt1hWgD2vG3Stl2tTQkC
tNCz6CNig4HYMyQvPzw1Y8/Lg3DSMtdHGB89r5mM2QS9XBzq1VOlhATrwYmLP9VL
W2ANbDl/L0iUj9Ql3ajPn60APGcLE05L7wVWkK3zRk5L/vCU9j7KajKCl6wUs2EX
27QoPxmQm8c9QQ091kejz/5wjpIbpvDTLuRShAToD53+zjqYTQFuvb/N110OWomC
0UlR+2yoDdRaOmZtA/Qzv9K0+D4QD/Xx85yvvuqDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZIs4Ku5sDykLzFCnMWHzkUV+XfkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYxNjZmOTFhLTgyZWEtNDQwOS1hODI1LTI3YzNjM2JjYjRlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADKrpowDQYJKoZIhvcNAQELBQADggEBABMD5FRZgjcOz1eEIAx60XIiaN0j
yrPXpwzNKXs9/Wsvx9gAKcnkTCHQdvuE/46Z2XXfCXpfHO0pzDm9pIkwm5GTUFu2
Ov6N0Hn4A9C2omn6s/9WXJOdLry+DYIktL8lrOZM7yrL5Lv7WkC5EXOIpUGO/Fw+
d97B11/eUletxk/yQ5+ObBrFBkU/do8Fbo65vITbUg5s7CLpCjIecex7733NYoNg
6KtPY39zV5dlBuYAC6ptyNd1y2W/sSKQkMHG9LT/66e6tLZ0GI71aUD7rpl3DEkQ
pQApexLb6yBfjmwkONET7pTpn7gGYQ1BmE8ujrTyOACki7Ucxy7bz9jRR1c=
-----END CERTIFICATE-----
Generated at Tue Nov 18 05:52:25 2025 by rpki-client