Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c31d8f28-165d-4a8b-9508-aba4225af58c.roa
File: c31d8f28-165d-4a8b-9508-aba4225af58c.roa (raw, json)
Hash identifier: eh611IN83lxzR7f9kEpIwR9i+TSTCUv2lpjzUmSFDDM=
Subject key identifier: 47:0B:22:4D:7D:28:53:04:97:CE:41:9E:E4:A4:F9:31:4A:D3:08:AD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 396CD92FD756FF7A966AF6113CB56297F3DD0126
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c31d8f28-165d-4a8b-9508-aba4225af58c.roa
Signing time: Tue 14 Oct 2025 00:52:04 +0000
ROA not before: Tue 14 Oct 2025 00:52:04 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:6c:d9:2f:d7:56:ff:7a:96:6a:f6:11:3c:b5:62:97:f3:dd:01:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:52:04 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=271d5129bc6b5e57af5625890f38e0dccf5a978778d73ac75f357dd3e17207a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:63:56:8c:1c:3a:f8:3f:26:a8:ad:33:83:
b7:16:f3:21:8f:2e:10:c1:0c:f6:bb:e4:d4:df:6c:
95:c1:a7:8c:13:fb:90:ba:db:5f:b0:f0:5a:62:14:
b6:84:fd:9e:e9:21:ec:b4:b0:13:cd:c9:2a:3c:81:
6b:6f:85:64:70:73:9d:2d:00:39:2f:cc:f4:39:a4:
db:f5:50:33:6c:85:2c:db:de:91:7b:e2:03:a1:8d:
5b:67:48:96:d9:9c:50:9e:13:f2:97:d1:de:60:f2:
9b:2e:bd:68:4c:07:f3:aa:67:0a:9f:b6:84:c0:44:
9d:88:5e:37:af:6c:b5:6e:a3:14:e7:95:b8:fc:c5:
6b:bf:b7:d8:bf:9b:19:ed:fe:74:7a:55:2e:1c:58:
ea:4c:df:da:24:a8:96:3f:e8:d9:4e:94:ab:41:ca:
a8:d9:56:a1:d3:30:c8:96:c4:3c:d8:d2:c0:cb:22:
5a:07:41:ab:16:85:c2:c3:2a:44:6d:9f:01:08:4d:
b1:cf:da:e9:b1:e9:3e:a8:64:e1:39:c9:b1:38:6f:
39:d2:a9:88:3f:29:8a:1f:10:20:67:37:99:da:ef:
f8:33:f3:78:b9:f9:90:cc:ba:d0:39:6b:4a:66:f1:
7a:66:c7:d0:a5:80:7a:60:37:50:3f:1f:34:3e:9d:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0B:22:4D:7D:28:53:04:97:CE:41:9E:E4:A4:F9:31:4A:D3:08:AD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c31d8f28-165d-4a8b-9508-aba4225af58c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.172.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0e:d2:eb:a2:ef:6c:c5:82:75:34:95:f1:06:8f:a3:a8:3e:
a3:9b:24:b1:40:c5:28:0f:30:c0:8f:a9:72:6b:3e:68:39:87:
5e:09:8e:5c:0d:55:a9:9a:da:8b:b7:c9:b1:e7:c9:ac:75:94:
88:0f:c1:d6:36:8c:f4:94:fd:e3:be:4b:a2:af:86:84:71:cd:
bd:38:47:51:2e:e5:24:f3:0a:3f:da:82:9f:e0:b0:2d:3e:52:
93:a2:f1:42:4a:90:c3:69:2e:a8:d2:04:5e:ee:a5:07:14:8c:
a5:38:57:80:86:24:77:64:d9:1a:3a:25:3b:13:cb:2e:d5:cc:
17:26:91:0d:2a:01:57:f0:c1:ee:1e:9f:f6:3c:dc:57:e4:3b:
11:d4:19:44:2b:e9:3b:c2:7d:b1:32:f1:32:9e:99:06:2a:2a:
59:fd:c0:59:3e:fe:32:d4:c3:c5:14:ce:bc:e2:b0:84:20:28:
f0:ad:eb:f4:87:f5:5a:c5:1b:ba:9c:30:81:a2:fb:4b:5d:40:
95:67:ea:53:50:df:02:08:54:48:77:b0:78:f0:5c:74:57:e4:
68:e0:31:2a:90:ab:1d:b8:a7:a6:bb:e0:37:fd:3b:11:1a:6e:
02:aa:aa:56:20:d7:94:74:31:54:30:81:4f:99:84:22:d9:81:
f6:8a:db:6a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOWzZL9dW/3qWavYRPLVil/PdASYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDA1MjA0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNzFkNTEyOWJjNmI1ZTU3YWY1NjI1ODkwZjM4ZTBkY2Nm
NWE5Nzg3NzhkNzNhYzc1ZjM1N2RkM2UxNzIwN2ExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwXGNWjBw6+D8mqK0zg7cW8yGPLhDBDPa75NTfbJXBp4wT
+5C621+w8FpiFLaE/Z7pIey0sBPNySo8gWtvhWRwc50tADkvzPQ5pNv1UDNshSzb
3pF74gOhjVtnSJbZnFCeE/KX0d5g8psuvWhMB/OqZwqftoTARJ2IXjevbLVuoxTn
lbj8xWu/t9i/mxnt/nR6VS4cWOpM39okqJY/6NlOlKtByqjZVqHTMMiWxDzY0sDL
IloHQasWhcLDKkRtnwEITbHP2umx6T6oZOE5ybE4bznSqYg/KYofECBnN5na7/gz
83i5+ZDMutA5a0pm8Xpmx9ClgHpgN1A/HzQ+nSUhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURwsiTX0oUwSXzkGe5KT5MUrTCK0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MzMWQ4ZjI4LTE2NWQtNGE4Yi05NTA4LWFiYTQyMjVhZjU4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsKwwDQYJKoZIhvcNAQELBQADggEBADQO0uui72zFgnU0lfEGj6OoPqOb
JLFAxSgPMMCPqXJrPmg5h14JjlwNVama2ou3ybHnyax1lIgPwdY2jPSU/eO+S6Kv
hoRxzb04R1Eu5STzCj/agp/gsC0+UpOi8UJKkMNpLqjSBF7upQcUjKU4V4CGJHdk
2Ro6JTsTyy7VzBcmkQ0qAVfwwe4en/Y83FfkOxHUGUQr6TvCfbEy8TKemQYqKln9
wFk+/jLUw8UUzrzisIQgKPCt6/SH9VrFG7qcMIGi+0tdQJVn6lNQ3wIIVEh3sHjw
XHRX5GjgMSqQqx24p6a74Df9OxEabgKqqlYg15R0MVQwgU+ZhCLZgfaK22o=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:33 2025 by rpki-client