Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
File: 7bf41140-a41b-4dbb-ba06-478aff47ce48.roa (raw, json)
Hash identifier: vqwg2niG2dfgn1oUaBkAFHScAZK7ptvFbH6Fyf8kE+8=
Subject key identifier: AF:16:6A:F6:06:36:42:53:C6:79:85:0A:2C:BB:F8:81:4C:7E:62:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09A1F924583279EC3730E90E7F63F36F1CD351AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
Signing time: Wed 12 Nov 2025 01:00:08 +0000
ROA not before: Wed 12 Nov 2025 01:00:08 +0000
ROA not after: Wed 17 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 110.239.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:a1:f9:24:58:32:79:ec:37:30:e9:0e:7f:63:f3:6f:1c:d3:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 12 01:00:08 2025 GMT
Not After : Dec 17 23:59:59 2025 GMT
Subject: serialNumber=1944a07a0d59d5c3470c74175c4da4c07c395f7616d70005426b57f48a55498b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:50:f4:0b:ab:4c:17:19:89:52:30:e8:e4:
ac:32:85:82:cf:6d:4d:9b:15:7b:5f:61:b5:2b:ce:
44:a5:68:09:9b:9e:14:f8:4d:4a:62:5b:96:16:7d:
73:ac:27:80:d8:f6:28:a8:cf:a9:aa:9f:48:b5:01:
c1:af:49:90:f8:82:ab:54:a8:27:96:ef:87:e1:5e:
c8:da:03:8e:3b:d6:74:ca:3c:cf:b7:88:d5:c7:8f:
47:4c:59:79:96:65:33:b5:dc:76:38:ed:b7:14:b7:
93:41:26:ff:03:cd:74:b1:32:c5:b3:4b:eb:cd:79:
d3:ec:ad:b5:c6:39:04:b9:e4:0e:9b:6e:43:0c:75:
e2:4d:fe:90:b0:20:7f:9b:d1:2e:88:e4:0e:23:b6:
21:19:3b:b3:17:ba:38:65:50:d2:09:80:21:7f:3d:
90:3c:49:10:1c:cd:5b:4f:cf:5e:ec:fd:7c:70:f9:
54:8a:e0:9f:c4:05:31:99:8d:d0:53:9b:dc:85:4c:
61:aa:0f:68:b4:3d:d0:ed:06:ee:12:f9:89:22:39:
8d:db:62:8a:bc:42:18:05:2d:36:be:27:0d:ff:07:
d0:ab:b9:39:15:45:ed:55:57:51:24:50:12:bd:d2:
ce:e9:d5:e4:5a:a1:da:18:81:66:50:a0:95:66:68:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:6A:F6:06:36:42:53:C6:79:85:0A:2C:BB:F8:81:4C:7E:62:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7bf41140-a41b-4dbb-ba06-478aff47ce48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e6:9c:34:00:9f:5b:9b:6e:e3:35:ab:f3:ea:ef:d8:af:b6:
4e:68:5a:c6:d7:97:65:20:8f:a9:e2:46:31:eb:c0:af:6a:23:
4c:90:27:e9:ee:41:08:e5:73:aa:cc:62:7b:87:76:37:43:f9:
ff:c1:74:0d:a8:5d:47:c5:36:60:45:bf:90:aa:1d:5a:b5:07:
05:e9:6d:55:52:9b:82:3e:5f:dd:98:f9:7d:52:fa:c8:01:07:
8e:fe:9c:11:88:a6:49:6d:1f:45:31:7e:93:23:1f:1a:73:c9:
19:08:78:99:8a:e6:0f:21:fd:5e:fb:4f:57:c7:4b:de:50:99:
8f:c4:bb:1d:52:81:ce:84:b7:76:02:c7:f7:b5:6c:28:e4:81:
bd:13:6e:6e:0b:00:fc:af:a2:a1:45:3e:66:82:9c:5c:ad:27:
6e:17:e8:4b:47:d3:30:7f:8e:a7:f5:31:7e:54:3a:e6:08:58:
55:18:3e:73:8f:8f:56:b6:3f:10:73:d1:f4:ad:c8:07:0c:d0:
c7:16:24:87:23:a3:cb:73:19:32:2c:42:a6:81:f6:07:f3:dd:
54:70:1d:50:5b:83:09:a3:e3:ad:83:12:9f:68:4a:b6:7c:ca:
1e:72:8c:5c:05:eb:e9:a7:b9:73:4c:c2:77:31:f9:ee:73:54:
0b:30:77:01
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCaH5JFgyeew3MOkOf2PzbxzTUaowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTEyMDEwMDA4WhcNMjUxMjE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOTQ0YTA3YTBkNTlkNWMzNDcwYzc0MTc1YzRkYTRjMDdj
Mzk1Zjc2MTZkNzAwMDU0MjZiNTdmNDhhNTU0OThiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8kFD0C6tMFxmJUjDo5KwyhYLPbU2bFXtfYbUrzkSlaAmb
nhT4TUpiW5YWfXOsJ4DY9iioz6mqn0i1AcGvSZD4gqtUqCeW74fhXsjaA4471nTK
PM+3iNXHj0dMWXmWZTO13HY47bcUt5NBJv8DzXSxMsWzS+vNedPsrbXGOQS55A6b
bkMMdeJN/pCwIH+b0S6I5A4jtiEZO7MXujhlUNIJgCF/PZA8SRAczVtPz17s/Xxw
+VSK4J/EBTGZjdBTm9yFTGGqD2i0PdDtBu4S+YkiOY3bYoq8QhgFLTa+Jw3/B9Cr
uTkVRe1VV1EkUBK90s7p1eRaodoYgWZQoJVmaDppAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrxZq9gY2QlPGeYUKLLv4gUx+YrowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiZjQxMTQwLWE0MWItNGRiYi1iYTA2LTQ3OGFmZjQ3Y2U0OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABu7x4wDQYJKoZIhvcNAQELBQADggEBADrmnDQAn1ubbuM1q/Pq79ivtk5o
WsbXl2Ugj6niRjHrwK9qI0yQJ+nuQQjlc6rMYnuHdjdD+f/BdA2oXUfFNmBFv5Cq
HVq1BwXpbVVSm4I+X92Y+X1S+sgBB47+nBGIpkltH0UxfpMjHxpzyRkIeJmK5g8h
/V77T1fHS95QmY/Eux1Sgc6Et3YCx/e1bCjkgb0Tbm4LAPyvoqFFPmaCnFytJ24X
6EtH0zB/jqf1MX5UOuYIWFUYPnOPj1a2PxBz0fStyAcM0McWJIcjo8tzGTIsQqaB
9gfz3VRwHVBbgwmj462DEp9oSrZ8yh5yjFwF6+mnuXNMwncx+e5zVAswdwE=
-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:05 2025 by rpki-client