Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19eff7ce-a563-489a-bdc8-3ae9d00f2a3c.roa
File: 19eff7ce-a563-489a-bdc8-3ae9d00f2a3c.roa (raw, json)
Hash identifier: Drm1gr/UmhTgz64j8PsREhLuVXbh5VqWA5Aw5472Txs=
Subject key identifier: 94:B4:5F:C9:D0:FE:49:08:DF:89:B6:08:66:B8:55:34:8A:6B:AB:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3370CB501A5DC3E8D98E4610F9B8197EA4C70AF4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19eff7ce-a563-489a-bdc8-3ae9d00f2a3c.roa
Signing time: Tue 14 Oct 2025 00:21:24 +0000
ROA not before: Tue 14 Oct 2025 00:21:24 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:70:cb:50:1a:5d:c3:e8:d9:8e:46:10:f9:b8:19:7e:a4:c7:0a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:21:24 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a73b77994e89a51c5f60e77a199309ad31de721db4f6d3c7dad17094c52535f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:68:04:c6:76:c1:33:93:6d:b1:fb:c6:cb:
1f:04:9f:52:2e:77:b7:57:b0:cc:a4:4d:a5:75:aa:
ed:95:9e:e2:e7:4d:cf:a5:5e:e8:09:c4:b8:48:2c:
e6:05:ad:c9:ef:d2:f3:f6:81:24:80:72:0b:2c:10:
50:68:bd:ac:21:0b:cb:95:1b:b6:c2:6c:94:83:5a:
38:1d:ca:87:af:2c:41:e9:22:80:a3:33:d7:aa:c2:
2d:ff:2e:64:a1:17:f5:8c:ad:b2:36:d2:a8:6c:dd:
cc:f0:52:0f:f6:3f:f0:19:a7:7c:b5:af:e3:e2:38:
d3:3c:99:5c:b4:82:94:4a:12:df:ab:a5:db:99:98:
e6:5d:81:c6:af:9f:1f:11:d8:7c:3c:87:4a:d0:ef:
db:56:1a:7e:8a:44:64:60:ff:df:a9:77:68:1f:37:
3a:59:96:73:7a:aa:bc:28:ee:bd:75:2b:65:c8:57:
95:9f:ec:d2:fc:ee:5f:c4:a9:3a:90:ce:7e:28:2e:
1e:18:e1:63:ee:44:f4:99:e7:46:5d:14:07:c2:bd:
31:c8:97:26:b3:5c:f6:bd:c3:63:30:2f:ca:4e:53:
25:81:8c:ea:6e:c9:5a:14:cb:9b:91:9c:b8:4f:b2:
4c:a6:8c:6a:eb:4d:e0:76:bb:0e:f0:ac:3b:1d:94:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:5F:C9:D0:FE:49:08:DF:89:B6:08:66:B8:55:34:8A:6B:AB:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19eff7ce-a563-489a-bdc8-3ae9d00f2a3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.203.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d6:c0:38:aa:6f:86:b5:f8:43:f4:86:01:9f:86:b8:5a:69:
bf:53:54:fb:d0:ec:da:a2:cd:e7:d9:7a:a5:f5:2b:71:ea:c0:
24:9b:40:c9:91:83:c7:1d:26:d1:44:4f:0f:7d:3f:7a:3c:9c:
e0:30:54:19:cc:6c:e3:87:5d:7e:aa:1a:d0:c1:13:d3:24:9b:
9c:cd:61:2b:32:ff:d2:18:4b:da:6b:80:47:2f:62:a7:aa:28:
d6:00:5f:d3:33:12:79:11:97:1a:d6:4c:fc:a2:f3:f4:76:3d:
93:bf:22:e4:40:af:06:e2:41:cd:93:16:0f:10:e3:41:e3:86:
1b:19:06:69:b3:9e:66:93:b0:55:24:08:07:a2:35:e3:11:0d:
c2:c1:0f:d8:dd:29:ba:5d:0d:92:26:6b:00:b3:68:6a:57:79:
cc:4a:a4:55:5e:7a:26:dd:91:a5:44:b3:66:10:c1:88:a0:72:
f7:3c:1b:94:16:8a:12:9a:09:bb:64:68:d0:92:15:35:48:47:
8b:5a:ac:fe:b4:32:2c:27:42:a7:c3:0b:15:87:fa:7f:44:de:
93:ba:5a:34:84:c5:67:69:21:c1:3f:ec:30:fe:4b:c4:af:da:
eb:bb:74:a4:2a:4f:f3:68:0a:09:0f:e3:b4:a0:6f:93:a7:ca:
82:8c:fd:81
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM3DLUBpdw+jZjkYQ+bgZfqTHCvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDAyMTI0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNzNiNzc5OTRlODlhNTFjNWY2MGU3N2ExOTkzMDlhZDMx
ZGU3MjFkYjRmNmQzYzdkYWQxNzA5NGM1MjUzNWY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7P2gExnbBM5NtsfvGyx8En1Iud7dXsMykTaV1qu2VnuLn
Tc+lXugJxLhILOYFrcnv0vP2gSSAcgssEFBovawhC8uVG7bCbJSDWjgdyoevLEHp
IoCjM9eqwi3/LmShF/WMrbI20qhs3czwUg/2P/AZp3y1r+PiONM8mVy0gpRKEt+r
pduZmOZdgcavnx8R2Hw8h0rQ79tWGn6KRGRg/9+pd2gfNzpZlnN6qrwo7r11K2XI
V5Wf7NL87l/EqTqQzn4oLh4Y4WPuRPSZ50ZdFAfCvTHIlyazXPa9w2MwL8pOUyWB
jOpuyVoUy5uRnLhPskymjGrrTeB2uw7wrDsdlI4HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlLRfydD+SQjfibYIZrhVNIprq7cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5ZWZmN2NlLWE1NjMtNDg5YS1iZGM4LTNhZTlkMDBmMmEzYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsMswDQYJKoZIhvcNAQELBQADggEBAGLWwDiqb4a1+EP0hgGfhrhaab9T
VPvQ7NqizefZeqX1K3HqwCSbQMmRg8cdJtFETw99P3o8nOAwVBnMbOOHXX6qGtDB
E9Mkm5zNYSsy/9IYS9prgEcvYqeqKNYAX9MzEnkRlxrWTPyi8/R2PZO/IuRArwbi
Qc2TFg8Q40HjhhsZBmmznmaTsFUkCAeiNeMRDcLBD9jdKbpdDZImawCzaGpXecxK
pFVeeibdkaVEs2YQwYigcvc8G5QWihKaCbtkaNCSFTVIR4tarP60MiwnQqfDCxWH
+n9E3pO6WjSExWdpIcE/7DD+S8Sv2uu7dKQqT/NoCgkP47Sgb5OnyoKM/YE=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:48 2025 by rpki-client