Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed977cb0-a02f-49ee-8089-72c182f8b861.roa
File: ed977cb0-a02f-49ee-8089-72c182f8b861.roa (raw, json)
Hash identifier: O2kF8XhOdEYll6Rkrz4MGo0X9f1WFQleVl4NpMat6D4=
Subject key identifier: 97:BE:4A:76:35:96:A2:62:AD:34:71:45:26:E7:77:76:92:6B:A0:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10A5A5DF8EA3C9171DF7E70EA6C28D242F11E5C0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed977cb0-a02f-49ee-8089-72c182f8b861.roa
Signing time: Fri 07 Nov 2025 00:50:08 +0000
ROA not before: Fri 07 Nov 2025 00:50:08 +0000
ROA not after: Fri 12 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a5:a5:df:8e:a3:c9:17:1d:f7:e7:0e:a6:c2:8d:24:2f:11:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 7 00:50:08 2025 GMT
Not After : Dec 12 23:59:59 2025 GMT
Subject: serialNumber=ced22437a8eb32bd5ee37ac9d319832f1165fc7926c3e0ca8a210d80e9a7f744, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:56:b3:3d:e2:f6:8b:c4:0c:a1:68:ef:04:
93:be:c7:39:d0:72:cc:dd:13:77:f2:7a:8a:9b:37:
e5:f8:3f:59:f7:e2:ac:97:21:29:39:fa:20:af:a5:
41:b3:d5:75:b4:51:71:db:bb:52:5f:b4:97:5f:25:
50:69:77:c2:d2:ad:a2:ce:01:a9:d2:ed:db:06:87:
db:e8:12:db:ad:da:f9:06:9d:69:14:c3:1e:4a:6c:
16:6a:8b:88:ed:2d:f7:2d:b4:b7:b7:0c:d6:f6:f2:
08:7d:3b:09:d2:73:c8:67:c3:37:bd:98:f4:c5:c7:
1a:14:86:66:37:39:14:f2:cf:70:2e:73:66:73:64:
60:eb:95:0b:d5:1d:24:bb:23:fd:b0:68:57:95:d0:
5f:fd:b1:84:13:3a:8f:4a:8b:3c:7e:3c:18:46:4c:
5b:f0:ab:0f:e8:a3:ff:62:0a:de:16:b1:cf:8d:dc:
a6:89:d0:db:3f:7e:19:cd:55:53:3c:69:f9:2a:d8:
67:3b:95:48:85:2a:53:3f:d8:bc:c3:46:51:6a:ab:
33:59:07:d5:ab:7d:3a:55:55:d6:d2:56:ca:65:af:
7b:6d:3c:d5:ba:f6:d1:ce:b2:29:45:ef:7c:f0:bd:
d5:6c:d4:bd:2d:9f:b8:fd:06:93:ec:4f:8e:d8:3c:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:4A:76:35:96:A2:62:AD:34:71:45:26:E7:77:76:92:6B:A0:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ed977cb0-a02f-49ee-8089-72c182f8b861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.32.0/24
Signature Algorithm: sha256WithRSAEncryption
60:3d:37:b2:e8:54:2a:80:2d:a3:ee:a8:a6:bf:1b:cc:28:52:
4c:a3:58:1c:ef:01:00:6c:3c:44:f5:53:2a:0c:99:8e:9c:96:
6a:81:42:af:d1:47:5d:88:f5:2a:13:93:b1:87:74:9a:61:26:
23:cf:34:da:67:3e:51:b5:db:7d:28:94:1e:14:cc:bb:39:fd:
d0:8a:4b:8e:18:8d:9b:55:4c:48:12:f2:ce:10:35:67:6b:27:
dc:ad:26:98:8a:2c:08:ed:f9:55:1a:10:5c:b1:6a:b3:40:bd:
cf:9b:2e:9a:c8:7f:21:0e:78:ce:0e:43:2f:6a:52:c6:d0:a4:
88:43:e0:df:97:28:51:de:a9:2c:55:44:41:a1:fc:74:1c:bf:
05:91:84:08:f1:cf:1a:15:58:1c:6e:c8:e0:ef:4b:7a:92:21:
1c:52:ab:6e:92:3e:90:f0:d8:2b:2c:a3:5c:2f:e1:04:ee:72:
26:1e:99:4f:1b:f9:94:33:a2:7a:d1:fa:3c:e2:04:c8:e8:d5:
44:3f:58:0c:d6:4f:5a:e7:ce:27:fa:70:ee:aa:c2:f9:3f:61:
a8:4f:3c:a3:dc:24:d2:d9:07:3f:4b:e4:5e:48:75:79:75:21:
93:fc:35:39:a0:5d:a2:30:2b:5b:af:0d:fb:31:2e:cd:f1:66:
3c:7b:8c:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEKWl346jyRcd9+cOpsKNJC8R5cAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA3MDA1MDA4WhcNMjUxMjEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWQyMjQzN2E4ZWIzMmJkNWVlMzdhYzlkMzE5ODMyZjEx
NjVmYzc5MjZjM2UwY2E4YTIxMGQ4MGU5YTdmNzQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6xlazPeL2i8QMoWjvBJO+xznQcszdE3fyeoqbN+X4P1n3
4qyXISk5+iCvpUGz1XW0UXHbu1JftJdfJVBpd8LSraLOAanS7dsGh9voEtut2vkG
nWkUwx5KbBZqi4jtLfcttLe3DNb28gh9OwnSc8hnwze9mPTFxxoUhmY3ORTyz3Au
c2ZzZGDrlQvVHSS7I/2waFeV0F/9sYQTOo9Kizx+PBhGTFvwqw/oo/9iCt4Wsc+N
3KaJ0Ns/fhnNVVM8afkq2Gc7lUiFKlM/2LzDRlFqqzNZB9WrfTpVVdbSVsplr3tt
PNW69tHOsilF73zwvdVs1L0tn7j9BpPsT47YPI7ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl75KdjWWomKtNHFFJud3dpJroA0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VkOTc3Y2IwLWEwMmYtNDllZS04MDg5LTcyYzE4MmY4Yjg2MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAYbiAwDQYJKoZIhvcNAQELBQADggEBAGA9N7LoVCqALaPuqKa/G8woUkyj
WBzvAQBsPET1UyoMmY6clmqBQq/RR12I9SoTk7GHdJphJiPPNNpnPlG1230olB4U
zLs5/dCKS44YjZtVTEgS8s4QNWdrJ9ytJpiKLAjt+VUaEFyxarNAvc+bLprIfyEO
eM4OQy9qUsbQpIhD4N+XKFHeqSxVREGh/HQcvwWRhAjxzxoVWBxuyODvS3qSIRxS
q26SPpDw2Csso1wv4QTuciYemU8b+ZQzonrR+jziBMjo1UQ/WAzWT1rnzif6cO6q
wvk/YahPPKPcJNLZBz9L5F5IdXl1IZP8NTmgXaIwK1uvDfsxLs3xZjx7jMc=
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:23:46 2025 by rpki-client