Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa
File: 634e4c18-756f-434d-b58c-0c6f036067f6.roa (raw, json)
Hash identifier: HuB0visVnrK57L3C4hHt95rzm4qlCU7VshWLlXVRp6g=
Subject key identifier: 6A:90:2D:BC:8A:CC:F7:2A:A8:08:1F:EF:EA:5B:2E:F5:3F:0B:4F:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26BB27036BDD47F830FBCE6575F4696FE84AEE0F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa
Signing time: Fri 03 Oct 2025 00:02:15 +0000
ROA not before: Fri 03 Oct 2025 00:02:15 +0000
ROA not after: Fri 07 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 162.250.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:bb:27:03:6b:dd:47:f8:30:fb:ce:65:75:f4:69:6f:e8:4a:ee:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 3 00:02:15 2025 GMT
Not After : Nov 7 23:59:59 2025 GMT
Subject: serialNumber=b0c043140f4e9c7779172594dcda5705964782cae5c11468afd95b63e565c464, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:31:5c:1c:46:87:2e:a2:ca:e1:f5:51:32:
5e:50:67:b9:a9:dc:d7:4e:09:81:45:3f:84:19:0e:
c2:26:88:c9:3d:66:48:b4:50:ba:5b:b4:ab:0c:7c:
30:20:5f:4a:dc:d1:a1:b7:9d:aa:9b:c4:b6:0b:f5:
55:9d:83:99:79:24:60:a8:b8:76:d9:42:12:e8:fe:
ea:84:36:4a:e2:ce:38:b9:52:0b:07:e8:c2:18:9d:
20:30:79:c1:7a:9e:73:0c:c9:50:5c:d3:4d:16:ed:
76:60:08:e9:c0:e0:4a:18:d3:ea:a6:74:66:9f:d1:
08:35:44:14:ac:4e:4b:70:59:8e:39:4b:1b:87:83:
18:85:a5:6e:60:a1:e7:37:66:7a:fb:31:88:af:54:
ba:0a:ec:3c:e0:83:0c:b4:e3:70:bf:e3:4f:09:86:
59:a9:fe:2c:35:2b:35:4f:cb:68:21:10:df:a4:2c:
34:75:ea:60:d3:97:1c:40:77:2d:52:a9:d6:57:41:
04:77:d7:ec:08:d2:78:71:e3:65:99:9b:78:9a:e9:
b6:64:a2:a4:46:11:bc:63:7d:4a:7b:62:f1:14:1f:
8a:89:a5:4c:c6:1e:e5:54:1a:bf:ae:b0:38:cb:80:
43:00:7b:83:d7:b5:d2:44:6e:2e:78:b5:85:e5:68:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:2D:BC:8A:CC:F7:2A:A8:08:1F:EF:EA:5B:2E:F5:3F:0B:4F:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/634e4c18-756f-434d-b58c-0c6f036067f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.250.236.0/24
Signature Algorithm: sha256WithRSAEncryption
06:14:69:e8:13:68:8c:b2:f7:b3:b2:33:48:ea:02:b8:dc:52:
4d:8f:29:76:00:d7:fb:39:e1:af:0e:9e:a6:3b:92:1f:01:dd:
cb:03:43:cc:25:27:ad:98:19:be:56:d0:1f:04:4e:5e:f9:72:
47:9d:83:cc:1c:dd:e5:47:df:fd:8b:a7:8f:98:97:c8:7b:c8:
e3:9c:2c:89:41:f9:59:b5:97:39:06:26:27:5a:7e:d5:09:ad:
e4:12:43:57:b9:e3:e0:21:65:35:fa:2d:af:79:8e:f4:25:79:
dd:22:2e:23:04:78:79:5d:21:64:b6:84:ae:d7:7d:49:f4:be:
7f:64:b3:98:7a:49:73:b3:8c:9b:92:c0:79:4a:32:c0:72:16:
8a:76:6c:ef:4d:ab:59:10:0c:1c:a0:2a:5a:5c:33:9a:f8:9b:
61:20:b5:50:8c:3c:d3:e5:92:81:80:6a:7d:6d:ed:4c:9b:a0:
f6:29:cd:96:5d:d6:87:d0:e5:75:90:99:07:09:96:4c:0c:64:
ff:d8:e1:c6:6c:99:51:c3:b7:b4:13:f8:e6:f7:3a:a0:f2:dd:
18:69:46:cb:58:61:e2:11:6f:52:0b:37:eb:00:21:dc:84:d9:
2d:dc:7b:29:95:45:f7:de:09:0e:ed:c7:3c:b3:a8:70:e6:90:
ee:ed:09:04
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJrsnA2vdR/gw+85ldfRpb+hK7g8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAzMDAwMjE1WhcNMjUxMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMGMwNDMxNDBmNGU5Yzc3NzkxNzI1OTRkY2RhNTcwNTk2
NDc4MmNhZTVjMTE0NjhhZmQ5NWI2M2U1NjVjNDY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCOjFcHEaHLqLK4fVRMl5QZ7mp3NdOCYFFP4QZDsImiMk9
Zki0ULpbtKsMfDAgX0rc0aG3naqbxLYL9VWdg5l5JGCouHbZQhLo/uqENkrizji5
UgsH6MIYnSAwecF6nnMMyVBc000W7XZgCOnA4EoY0+qmdGaf0Qg1RBSsTktwWY45
SxuHgxiFpW5goec3Znr7MYivVLoK7Dzggwy043C/408Jhlmp/iw1KzVPy2ghEN+k
LDR16mDTlxxAdy1SqdZXQQR31+wI0nhx42WZm3ia6bZkoqRGEbxjfUp7YvEUH4qJ
pUzGHuVUGr+usDjLgEMAe4PXtdJEbi54tYXlaMsJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUapAtvIrM9yqoCB/v6lsu9T8LT08wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYzNGU0YzE4LTc1NmYtNDM0ZC1iNThjLTBjNmYwMzYwNjdmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi+uwwDQYJKoZIhvcNAQELBQADggEBAAYUaegTaIyy97OyM0jqArjcUk2P
KXYA1/s54a8OnqY7kh8B3csDQ8wlJ62YGb5W0B8ETl75ckedg8wc3eVH3/2Lp4+Y
l8h7yOOcLIlB+Vm1lzkGJidaftUJreQSQ1e54+AhZTX6La95jvQled0iLiMEeHld
IWS2hK7XfUn0vn9ks5h6SXOzjJuSwHlKMsByFop2bO9Nq1kQDBygKlpcM5r4m2Eg
tVCMPNPlkoGAan1t7UyboPYpzZZd1ofQ5XWQmQcJlkwMZP/Y4cZsmVHDt7QT+Ob3
OqDy3RhpRstYYeIRb1ILN+sAIdyE2S3ceymVRffeCQ7txzyzqHDmkO7tCQQ=
-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:40 2025 by rpki-client