Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
File: 0db8932a-8080-4c16-999b-564d25522124.roa (raw, json)
Hash identifier: 2LImyBUQgMpkrpRZh7mpKS6kJfJr4ClUiY4Hs4QuYMc=
Subject key identifier: 3A:14:EC:00:CD:53:BB:DC:4E:7C:64:E7:E7:AD:19:3C:3A:54:EB:AA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E799833CD121A4BDC6D0E5652B9672D7FCA18BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
Signing time: Tue 14 Oct 2025 15:23:06 +0000
ROA not before: Tue 14 Oct 2025 15:23:06 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:79:98:33:cd:12:1a:4b:dc:6d:0e:56:52:b9:67:2d:7f:ca:18:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:23:06 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=944a11da395936c1a0fa6a348a3e43d7f5bcbc3de98553ef0935906e4c85c165, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:cd:4c:0a:78:af:5e:47:68:e8:96:96:ad:
29:0b:d6:9b:93:e8:e2:ec:f1:18:0d:2c:06:9a:c6:
d5:56:6f:67:31:9d:f6:4b:88:8e:cc:d4:f4:aa:f4:
e5:78:54:ba:f0:5a:d5:18:ff:1a:29:80:98:c1:19:
db:3e:ea:9b:24:de:a8:d1:9a:48:96:ee:1c:78:d5:
da:12:33:5c:7d:b7:61:64:07:43:a4:18:4d:84:8f:
6f:77:bb:b3:e1:12:f1:62:5e:9e:36:fc:0b:ce:89:
7f:30:31:de:64:80:dc:d9:be:00:6a:a8:c7:f1:22:
7c:19:26:16:c1:0a:ac:52:2d:3a:6a:87:dc:83:b1:
61:2c:c4:aa:21:e8:62:a4:8a:e4:0b:e2:eb:97:dc:
1f:e0:04:36:24:fa:6e:6f:8c:71:1c:62:3b:b8:34:
3e:cc:63:8a:2a:eb:da:a5:d4:74:ae:aa:6f:e1:7f:
c6:d7:5f:7b:c5:b9:4e:92:b8:41:25:bf:f0:6e:0d:
db:4e:dd:5f:64:c3:97:f5:2e:2a:79:2d:af:3a:12:
55:e9:37:19:cf:c2:ac:e0:34:32:ca:dd:6a:a6:10:
9d:d4:7a:dc:83:62:6d:47:c9:ff:74:26:d0:78:38:
4b:70:b4:4f:42:53:e0:2c:70:79:1e:dc:45:2e:01:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:14:EC:00:CD:53:BB:DC:4E:7C:64:E7:E7:AD:19:3C:3A:54:EB:AA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.220.0/24
Signature Algorithm: sha256WithRSAEncryption
36:2c:36:7c:5a:bb:fa:ed:ea:c3:9a:40:92:3b:8c:ce:20:b4:
97:cb:ef:b0:5a:4f:32:2a:d9:48:c4:1e:8c:e6:da:aa:43:eb:
56:34:56:39:e8:d8:21:9c:4e:d1:54:48:e6:9b:d9:72:b6:b8:
ab:87:38:62:c2:55:52:56:f4:c5:4b:70:eb:78:0f:8e:de:a9:
12:56:98:39:12:9b:f1:42:61:e1:ba:1a:02:da:6c:5a:86:08:
a2:37:de:b6:77:60:03:93:2f:bd:df:a9:b3:f2:6f:fd:0f:af:
1d:de:fb:07:15:79:90:69:a0:92:a0:87:ab:03:34:5a:93:82:
8c:1c:34:e1:00:dd:7d:93:be:bb:61:43:a3:97:0b:6e:54:f0:
e7:2f:b8:ac:b2:f4:fa:09:6a:71:f1:de:f2:83:0f:64:b5:f6:
c5:dc:e3:65:c4:f7:58:8d:b7:9d:c9:3e:62:07:a2:f6:b6:18:
af:16:db:77:d5:49:34:39:97:e9:b2:12:70:fc:c4:bd:ed:b6:
dc:25:20:06:e2:7a:f2:d6:40:2c:72:62:d1:ff:b5:f3:02:b6:
89:7f:80:94:ea:ba:38:fc:cb:82:8a:ef:c9:d7:e2:81:9d:e2:
70:93:59:bf:d2:fa:17:00:59:07:ce:b6:24:8d:99:99:73:15:
ed:d8:84:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHnmYM80SGkvcbQ5WUrlnLX/KGL4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTUyMzA2WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NDRhMTFkYTM5NTkzNmMxYTBmYTZhMzQ4YTNlNDNkN2Y1
YmNiYzNkZTk4NTUzZWYwOTM1OTA2ZTRjODVjMTY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCt981MCnivXkdo6JaWrSkL1puT6OLs8RgNLAaaxtVWb2cx
nfZLiI7M1PSq9OV4VLrwWtUY/xopgJjBGds+6psk3qjRmkiW7hx41doSM1x9t2Fk
B0OkGE2Ej293u7PhEvFiXp42/AvOiX8wMd5kgNzZvgBqqMfxInwZJhbBCqxSLTpq
h9yDsWEsxKoh6GKkiuQL4uuX3B/gBDYk+m5vjHEcYju4ND7MY4oq69ql1HSuqm/h
f8bXX3vFuU6SuEElv/BuDdtO3V9kw5f1Lip5La86ElXpNxnPwqzgNDLK3WqmEJ3U
etyDYm1Hyf90JtB4OEtwtE9CU+AscHke3EUuAeSlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOhTsAM1Tu9xOfGTn560ZPDpU66owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBkYjg5MzJhLTgwODAtNGMxNi05OTliLTU2NGQyNTUyMjEyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsNwwDQYJKoZIhvcNAQELBQADggEBADYsNnxau/rt6sOaQJI7jM4gtJfL
77BaTzIq2UjEHozm2qpD61Y0Vjno2CGcTtFUSOab2XK2uKuHOGLCVVJW9MVLcOt4
D47eqRJWmDkSm/FCYeG6GgLabFqGCKI33rZ3YAOTL73fqbPyb/0Prx3e+wcVeZBp
oJKgh6sDNFqTgowcNOEA3X2TvrthQ6OXC25U8OcvuKyy9PoJanHx3vKDD2S19sXc
42XE91iNt53JPmIHova2GK8W23fVSTQ5l+myEnD8xL3tttwlIAbievLWQCxyYtH/
tfMCtol/gJTqujj8y4KK78nX4oGd4nCTWb/S+hcAWQfOtiSNmZlzFe3YhJk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:36 2025 by rpki-client