Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f35dec8-e3f0-42d6-8104-37c66798b311.roa
File: 0f35dec8-e3f0-42d6-8104-37c66798b311.roa (raw, json)
Hash identifier: B4Eikga2nq17zKp8QopISQ3DE037ADXjyRZtxaniRdc=
Subject key identifier: 9E:6D:EA:1A:1F:75:55:79:E4:48:58:64:C9:BF:0E:E9:EF:A6:6F:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21D8A83D56EC2BD7303D5199D95122ABB1379BCF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f35dec8-e3f0-42d6-8104-37c66798b311.roa
Signing time: Tue 14 Oct 2025 00:43:20 +0000
ROA not before: Tue 14 Oct 2025 00:43:20 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d8:a8:3d:56:ec:2b:d7:30:3d:51:99:d9:51:22:ab:b1:37:9b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:43:20 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a05935da80a137fc613e1f5fa3a8ba832d23458b5a1b78f4008a1422e99e2bdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:60:12:c4:a8:dd:04:ac:a5:7b:8a:4f:d9:
bd:8b:db:1b:11:28:b9:be:f1:a4:55:2d:f3:52:3c:
37:99:9c:0c:3e:97:73:a6:d2:26:27:45:4f:95:1a:
b1:17:5d:86:09:d1:f3:b5:de:94:88:07:99:57:53:
6c:e3:c3:15:80:f2:97:3c:a4:f3:69:16:4b:39:6f:
28:62:db:d7:61:f0:54:06:a7:c6:a7:7e:69:df:ff:
c2:7a:19:5e:c9:0e:a1:fe:b5:e1:1d:c4:b9:18:51:
58:5a:70:f6:65:d0:e6:7c:3a:ae:a4:f5:90:60:bf:
4f:88:92:b3:d8:ca:bb:97:96:4b:18:f1:be:5a:fd:
f3:24:c4:2e:bd:34:68:89:e8:d6:d6:11:b1:c1:ca:
6f:fd:d6:fe:a9:7d:a0:5a:b8:32:5b:b9:f8:06:d6:
a3:fe:dc:c4:11:48:d2:2a:67:72:17:a2:5d:36:d3:
c4:83:a4:59:46:86:b0:07:3b:f2:87:75:48:ed:e1:
99:44:73:f0:c2:2b:7c:bb:0c:71:38:13:0d:c1:80:
c6:e5:26:48:fa:0f:46:20:48:73:c7:dc:29:43:5b:
4c:be:47:37:6e:a8:83:50:cb:d4:e5:9d:ee:99:7d:
86:f5:55:c7:3b:fa:0f:0c:25:c9:03:9a:a2:1b:a2:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:EA:1A:1F:75:55:79:E4:48:58:64:C9:BF:0E:E9:EF:A6:6F:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f35dec8-e3f0-42d6-8104-37c66798b311.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.146.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:35:5b:8b:57:e0:c4:89:d0:66:e2:f8:e5:79:fa:d1:8f:96:
de:3c:74:5d:6b:f3:c4:57:5a:4c:10:57:cc:a0:06:19:32:2a:
da:af:61:3f:d3:7d:f4:db:06:86:f2:43:0e:ea:c9:69:e7:53:
58:65:87:27:94:e2:51:3f:36:28:27:bc:80:a2:08:ac:a9:f3:
20:95:8e:6a:f0:b6:13:68:03:2e:cb:f2:be:a6:f4:52:e6:0c:
8a:34:f1:8c:e7:e7:0e:13:59:28:38:02:ef:de:67:65:10:8e:
1f:ee:21:59:af:55:9d:71:50:0a:b6:71:29:da:2a:e8:2a:21:
9a:29:d6:3d:e0:88:fe:15:12:a0:43:72:37:ab:b3:ae:bc:54:
22:42:c2:c7:86:28:03:16:bd:54:54:0a:23:42:6d:e0:8a:0b:
ba:8f:5c:bd:29:4f:a5:0d:6d:e1:86:53:a8:f2:df:43:e8:4a:
9f:61:bf:8a:1b:11:45:ad:e6:51:08:80:16:86:42:83:71:cd:
76:7a:a8:03:4f:c2:fe:42:89:1c:d0:cd:f7:d4:78:32:63:62:
14:3b:af:ca:ac:a0:c8:34:c9:5e:ff:d0:09:ac:db:15:14:38:
46:32:fc:f0:20:71:ca:8a:f7:b8:fc:52:b8:5d:c6:4d:fd:37:
48:b7:bb:3c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIdioPVbsK9cwPVGZ2VEiq7E3m88wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDA0MzIwWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMDU5MzVkYTgwYTEzN2ZjNjEzZTFmNWZhM2E4YmE4MzJk
MjM0NThiNWExYjc4ZjQwMDhhMTQyMmU5OWUyYmRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBxWASxKjdBKyle4pP2b2L2xsRKLm+8aRVLfNSPDeZnAw+
l3Om0iYnRU+VGrEXXYYJ0fO13pSIB5lXU2zjwxWA8pc8pPNpFks5byhi29dh8FQG
p8anfmnf/8J6GV7JDqH+teEdxLkYUVhacPZl0OZ8Oq6k9ZBgv0+IkrPYyruXlksY
8b5a/fMkxC69NGiJ6NbWEbHBym/91v6pfaBauDJbufgG1qP+3MQRSNIqZ3IXol02
08SDpFlGhrAHO/KHdUjt4ZlEc/DCK3y7DHE4Ew3BgMblJkj6D0YgSHPH3ClDW0y+
RzduqINQy9Tlne6ZfYb1Vcc7+g8MJckDmqIboiEdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnm3qGh91VXnkSFhkyb8O6e+mb5owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBmMzVkZWM4LWUzZjAtNDJkNi04MTA0LTM3YzY2Nzk4YjMxMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsJIwDQYJKoZIhvcNAQELBQADggEBANc1W4tX4MSJ0Gbi+OV5+tGPlt48
dF1r88RXWkwQV8ygBhkyKtqvYT/TffTbBobyQw7qyWnnU1hlhyeU4lE/NignvICi
CKyp8yCVjmrwthNoAy7L8r6m9FLmDIo08Yzn5w4TWSg4Au/eZ2UQjh/uIVmvVZ1x
UAq2cSnaKugqIZop1j3giP4VEqBDcjers668VCJCwseGKAMWvVRUCiNCbeCKC7qP
XL0pT6UNbeGGU6jy30PoSp9hv4obEUWt5lEIgBaGQoNxzXZ6qANPwv5CiRzQzffU
eDJjYhQ7r8qsoMg0yV7/0Ams2xUUOEYy/PAgccqK97j8Urhdxk39N0i3uzw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:54 2025 by rpki-client