Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa
File: 02754551-c321-414b-aa85-a57e7ee3442d.roa (raw, json)
Hash identifier: IailcSx4w0tYIKtg2CgdxtVmwnySYwgTuXpgp/0SQkY=
Subject key identifier: D3:33:2C:53:06:9F:F1:23:20:D9:EE:0A:7A:84:72:26:D5:42:BE:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D1B6295785BF2C15C19D1691EDAF38B11971E89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa
Signing time: Wed 01 Oct 2025 00:03:01 +0000
ROA not before: Wed 01 Oct 2025 00:03:01 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 7224
IP address blocks: 162.221.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:1b:62:95:78:5b:f2:c1:5c:19:d1:69:1e:da:f3:8b:11:97:1e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:03:01 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=a7491801fa60d878b1a083e66450af9ab6074d3e46e34fd10cdfe539410c914d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:74:b8:1f:5a:cc:c4:d6:9a:a3:d9:c4:57:ea:
89:74:f1:d2:e2:6e:18:81:91:ff:a6:16:1c:7c:e1:
fb:6c:5e:e3:c5:d4:33:9b:3b:69:f8:c9:85:a7:76:
f7:d1:e0:d7:63:c3:c5:e6:86:53:95:ce:03:3d:4d:
fb:da:dd:a1:cc:c4:68:9a:28:43:72:40:fe:27:d2:
41:f0:81:66:15:c1:6d:27:3d:6a:4c:2d:70:90:e6:
f3:dd:35:22:9d:26:89:a4:e7:b2:34:65:78:10:57:
1f:f9:85:d8:7f:a6:d0:be:cc:4d:2e:8e:ad:71:58:
62:de:ef:6e:b2:5e:42:af:1e:b2:12:4a:1c:8e:c7:
e3:99:f4:e0:58:38:c1:c7:1c:16:dc:ce:68:2a:a9:
4d:98:77:cc:09:ad:f3:1a:d6:ca:7c:dc:8a:9b:b5:
9c:9d:d6:06:93:ef:b6:16:77:74:7f:e0:99:fa:62:
16:bd:ca:24:52:45:4f:72:be:6f:d5:f0:1d:51:77:
2e:d7:d3:9c:da:e1:5c:6d:c7:01:ed:06:f3:c1:21:
2a:05:e3:d9:42:a6:e9:cf:b9:58:fe:78:ae:36:1a:
72:ad:6b:d1:41:39:d7:38:b4:5c:4c:c4:64:85:b0:
2e:ff:ef:11:ac:af:8b:82:54:2d:62:bf:b0:80:55:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:33:2C:53:06:9F:F1:23:20:D9:EE:0A:7A:84:72:26:D5:42:BE:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/02754551-c321-414b-aa85-a57e7ee3442d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.221.160.0/21
Signature Algorithm: sha256WithRSAEncryption
79:ab:33:05:01:3d:ac:66:0a:f2:b7:07:da:81:61:28:ee:c0:
8b:af:77:cd:78:71:2f:ab:26:42:d4:b8:7d:0d:7c:ae:fa:ee:
88:95:37:84:88:6f:0a:64:b6:d2:21:42:94:8f:11:eb:2f:e4:
bd:3b:1a:36:9c:46:5b:11:50:ac:78:f0:ec:ab:03:a7:01:09:
99:a4:a1:f0:e1:43:2d:70:1b:39:f3:5a:3e:4d:61:08:5f:a2:
2c:21:e7:d8:84:23:a8:4e:03:71:a3:55:8b:d5:64:25:38:5e:
ac:e8:4a:3f:27:ba:9b:4b:0f:bf:8f:3e:47:9c:41:9a:08:77:
6e:16:ec:42:31:87:48:9b:ce:c4:1f:8e:f3:ac:92:e0:10:37:
ef:29:cf:76:05:bb:0a:c3:4b:45:74:4c:7d:34:a3:a6:79:46:
fa:6d:60:a1:41:09:55:54:7c:fc:50:94:92:90:2f:7d:99:b8:
7d:41:ba:f2:5e:9e:c7:9c:bf:3e:8d:40:1c:5b:0e:8d:83:79:
6c:c1:73:ca:54:03:54:f7:a2:61:3f:68:ef:6e:15:2a:bd:8d:
a1:97:4f:37:a2:a4:25:85:7a:35:66:6c:4f:ae:4e:8d:1a:d4:
c4:5d:5e:39:e3:02:f9:f8:ab:48:98:c3:b9:66:9a:91:39:05:
49:33:f5:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXRtilXhb8sFcGdFpHtrzixGXHokwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDAxMDAwMzAxWhcNMjUxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNzQ5MTgwMWZhNjBkODc4YjFhMDgzZTY2NDUwYWY5YWI2
MDc0ZDNlNDZlMzRmZDEwY2RmZTUzOTQxMGM5MTRkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD5dLgfWszE1pqj2cRX6ol08dLibhiBkf+mFhx84ftsXuPF
1DObO2n4yYWndvfR4Ndjw8XmhlOVzgM9Tfva3aHMxGiaKENyQP4n0kHwgWYVwW0n
PWpMLXCQ5vPdNSKdJomk57I0ZXgQVx/5hdh/ptC+zE0ujq1xWGLe726yXkKvHrIS
ShyOx+OZ9OBYOMHHHBbczmgqqU2Yd8wJrfMa1sp83IqbtZyd1gaT77YWd3R/4Jn6
Yha9yiRSRU9yvm/V8B1Rdy7X05za4VxtxwHtBvPBISoF49lCpunPuVj+eK42GnKt
a9FBOdc4tFxMxGSFsC7/7xGsr4uCVC1iv7CAVba3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0zMsUwaf8SMg2e4KeoRyJtVCvhMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAyNzU0NTUxLWMzMjEtNDE0Yi1hYTg1LWE1N2U3ZWUzNDQyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOi3aAwDQYJKoZIhvcNAQELBQADggEBAHmrMwUBPaxmCvK3B9qBYSjuwIuv
d814cS+rJkLUuH0NfK767oiVN4SIbwpkttIhQpSPEesv5L07GjacRlsRUKx48Oyr
A6cBCZmkofDhQy1wGznzWj5NYQhfoiwh59iEI6hOA3GjVYvVZCU4XqzoSj8nuptL
D7+PPkecQZoId24W7EIxh0ibzsQfjvOskuAQN+8pz3YFuwrDS0V0TH00o6Z5Rvpt
YKFBCVVUfPxQlJKQL32ZuH1BuvJensecvz6NQBxbDo2DeWzBc8pUA1T3omE/aO9u
FSq9jaGXTzeipCWFejVmbE+uTo0a1MRdXjnjAvn4q0iYw7lmmpE5BUkz9bY=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:07 2025 by rpki-client