Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
File: 82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa (raw, json)
Hash identifier: QyRcYD0MJ6uDmVLMg4Ov+ipHxrg3nojznFzkLIbDFX8=
Subject key identifier: 52:A5:4B:03:DC:B9:53:C2:6E:62:04:EE:75:95:41:9E:E0:39:68:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B2419E008646D8915731639BE78A80CF74F730A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
Signing time: Tue 30 Sep 2025 00:23:08 +0000
ROA not before: Tue 30 Sep 2025 00:23:08 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 162.250.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:24:19:e0:08:64:6d:89:15:73:16:39:be:78:a8:0c:f7:4f:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:23:08 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=a98eb3a2d3734c55fcf398a8f7f11619c83596358c6d76a1821668b9b40afff4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:be:bd:6b:72:71:91:50:3e:4b:9f:a2:57:df:
cc:83:5d:e9:b5:22:10:ba:d3:70:de:cf:3d:2a:d9:
42:9e:87:b9:61:9b:6c:8c:7f:79:9d:27:43:16:db:
89:0b:1f:4a:5f:43:db:40:41:29:02:bd:64:e1:4f:
d0:93:21:4a:ab:5b:68:e3:8a:e3:81:97:3f:e6:56:
5a:4b:b5:4b:c9:e8:a4:ba:af:ed:bc:48:01:6b:90:
b5:e6:ad:cc:a2:1a:df:da:25:c3:aa:35:d5:3a:61:
6d:9b:19:46:ab:58:7d:03:88:43:fc:97:d5:08:a3:
0a:ae:aa:46:a8:ae:51:fa:eb:7a:18:f4:e3:ab:ea:
3d:8b:78:11:d4:e2:37:3e:b9:e0:b1:7a:28:51:6e:
78:55:99:9d:32:42:5d:ca:90:dd:e1:f1:58:71:92:
02:0b:ce:92:af:d7:1d:c4:17:44:9d:bd:37:a6:88:
db:15:91:27:88:17:63:69:16:7d:27:12:32:35:b6:
67:93:39:14:07:25:d0:8b:73:11:2e:51:54:52:cb:
13:b3:ef:71:08:30:1f:5d:4e:de:a5:6b:27:a7:fc:
25:d4:62:e9:ca:d1:34:13:7d:9c:7a:30:de:e3:ef:
b7:4d:77:e2:e2:1f:88:43:ae:0c:cc:e6:4d:0a:15:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:4B:03:DC:B9:53:C2:6E:62:04:EE:75:95:41:9E:E0:39:68:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82501f6a-2c1b-410d-80a6-2cd75228e8b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.250.237.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:fd:8a:00:46:d7:af:ae:46:63:42:a1:cd:6e:78:63:45:
84:e1:90:00:18:be:2f:19:eb:49:5d:e3:57:0c:c9:59:42:f6:
6e:70:6e:b2:33:a6:25:97:9f:40:9c:8c:eb:59:04:08:5f:b8:
2a:3b:aa:f5:05:0c:d2:e4:e5:81:70:07:40:9b:26:3f:b0:64:
55:23:7c:e4:c1:85:6e:14:38:39:b9:11:67:a0:c1:f9:a2:be:
2f:7e:7c:aa:11:aa:7f:cf:4b:a7:9a:f2:2e:2e:af:37:d6:d3:
4d:e3:e2:0b:06:7d:4e:94:90:41:83:8b:a4:30:d7:b8:23:95:
97:84:02:6b:78:51:14:dd:a5:70:83:66:71:d6:70:c5:20:c3:
9a:5d:7a:af:d8:e0:4f:34:af:4a:6c:b0:21:76:b1:94:cb:4a:
b6:84:7e:3b:92:55:ff:8e:cc:d4:1c:46:fa:c5:0e:95:02:bc:
4a:50:1b:99:bd:53:f5:c2:f9:15:0c:19:d0:77:f2:b7:7d:bc:
2f:18:4b:d3:03:98:ec:9d:c9:26:1b:d9:4e:1b:b7:9f:22:3d:
84:b4:34:c7:c8:f3:e7:c0:e2:82:ca:70:08:f5:75:ca:c7:d6:
3a:0a:8b:c8:c9:fe:5a:5e:42:82:29:47:ae:bb:f0:c7:6f:fa:
85:d8:12:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUayQZ4AhkbYkVcxY5vnioDPdPcwowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAyMzA4WhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOThlYjNhMmQzNzM0YzU1ZmNmMzk4YThmN2YxMTYxOWM4
MzU5NjM1OGM2ZDc2YTE4MjE2NjhiOWI0MGFmZmY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvvr1rcnGRUD5Ln6JX38yDXem1IhC603Dezz0q2UKeh7lh
m2yMf3mdJ0MW24kLH0pfQ9tAQSkCvWThT9CTIUqrW2jjiuOBlz/mVlpLtUvJ6KS6
r+28SAFrkLXmrcyiGt/aJcOqNdU6YW2bGUarWH0DiEP8l9UIowquqkaorlH663oY
9OOr6j2LeBHU4jc+ueCxeihRbnhVmZ0yQl3KkN3h8VhxkgILzpKv1x3EF0SdvTem
iNsVkSeIF2NpFn0nEjI1tmeTORQHJdCLcxEuUVRSyxOz73EIMB9dTt6layen/CXU
YunK0TQTfZx6MN7j77dNd+LiH4hDrgzM5k0KFTr5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUqVLA9y5U8JuYgTudZVBnuA5aLowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzgyNTAxZjZhLTJjMWItNDEwZC04MGE2LTJjZDc1MjI4ZThiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACi+u0wDQYJKoZIhvcNAQELBQADggEBAK8M/YoARtevrkZjQqHNbnhjRYTh
kAAYvi8Z60ld41cMyVlC9m5wbrIzpiWXn0CcjOtZBAhfuCo7qvUFDNLk5YFwB0Cb
Jj+wZFUjfOTBhW4UODm5EWegwfmivi9+fKoRqn/PS6ea8i4urzfW003j4gsGfU6U
kEGDi6Qw17gjlZeEAmt4URTdpXCDZnHWcMUgw5pdeq/Y4E80r0pssCF2sZTLSraE
fjuSVf+OzNQcRvrFDpUCvEpQG5m9U/XC+RUMGdB38rd9vC8YS9MDmOydySYb2U4b
t58iPYS0NMfI8+fA4oLKcAj1dcrH1joKi8jJ/lpeQoIpR6678Mdv+oXYEq4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:23:02 2025 by rpki-client