Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
File: 12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa (raw, json)
Hash identifier: KiC5JurlPjB9SrgATR7FtSxeX66USnIOfFNC+N5NoEM=
Subject key identifier: C7:26:45:1E:37:58:34:14:89:2E:08:86:D4:C3:8E:FF:02:09:9A:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44C295CCB981F0074776D4886EB94806F57B60DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
Signing time: Fri 17 Oct 2025 21:10:02 +0000
ROA not before: Fri 17 Oct 2025 21:10:02 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 7224
IP address blocks: 198.14.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c2:95:cc:b9:81:f0:07:47:76:d4:88:6e:b9:48:06:f5:7b:60:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 21:10:02 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=472b798bab36e3ec04620be374aba050aadefc513af74460aed1a2bc260ec06e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:00:a0:bd:ab:f5:44:5a:5f:be:92:97:cd:
0a:b4:0e:23:ae:6e:ec:74:89:5a:50:f7:d2:e6:5d:
3f:08:53:32:88:53:62:7f:70:2c:59:32:fe:ed:69:
e8:b1:19:03:c8:3d:8c:e5:0e:d4:42:78:60:47:1d:
2d:2b:46:88:c2:c2:0e:35:d3:72:43:fc:43:38:3d:
97:e8:48:bd:26:33:f4:1e:92:b2:09:44:32:a9:fa:
43:a2:80:c1:c8:b4:ca:b7:a7:8d:48:bb:b5:92:21:
fd:7f:57:48:45:52:75:60:34:9c:32:c8:f4:21:84:
bc:85:bd:6e:54:85:d8:7c:9c:5c:1f:24:58:4a:d7:
c9:87:da:fc:d3:39:b5:55:c2:0f:48:f1:01:d5:04:
c0:2b:07:2b:9b:67:df:f0:95:db:75:fc:b3:cc:e4:
8e:9a:66:e3:09:aa:62:df:17:3d:f2:e9:09:a9:39:
1c:59:d9:ce:87:13:f1:5f:e8:95:f2:36:bd:f0:bd:
79:eb:5e:95:4b:82:56:36:25:e9:5b:0b:ee:a9:61:
de:8a:ee:5f:c1:6d:1a:34:1a:cc:a9:81:db:d9:a1:
6c:1f:2f:34:54:1d:c9:97:67:0c:3a:f7:66:52:d1:
a9:a5:c6:39:aa:11:14:b0:b7:88:13:b0:2b:64:5b:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:45:1E:37:58:34:14:89:2E:08:86:D4:C3:8E:FF:02:09:9A:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d9f8c8-d7d8-4912-84b5-385d29a59a04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.14.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:f1:9a:03:90:d6:c1:6b:7d:5d:ce:3f:bc:3d:f2:7b:fe:82:
4a:cf:65:ce:7e:33:4d:72:be:d9:3e:f6:65:32:12:04:ef:93:
7a:d1:7f:ed:8b:7b:39:ac:81:c5:2f:c9:ba:ae:1c:7b:5c:c8:
f1:18:ca:28:f6:fb:3e:99:3f:f8:9c:b6:75:bc:de:89:47:d8:
f3:9d:5b:5e:ef:e6:89:c4:73:93:9a:41:c5:e4:77:02:5f:e3:
4f:2b:ee:c0:ef:e4:a0:86:6c:23:92:24:27:4a:5b:3f:52:e1:
a8:70:1d:14:9a:1b:c5:bf:8b:b0:18:6f:b6:91:a9:b4:0e:fe:
a0:09:c4:4c:b5:75:a4:d5:48:fe:5d:5e:f1:d0:6b:3e:14:26:
85:eb:c6:24:7d:1f:9a:10:c6:82:c5:f5:b8:b5:67:1d:55:48:
40:f2:38:37:0c:bb:a3:b7:bd:42:1e:86:43:bc:6a:fc:40:c9:
e9:19:45:5b:f4:f3:f8:23:c3:96:a4:61:d9:7d:5a:e7:3a:6c:
4c:d4:a5:df:ee:fc:0f:8e:5a:34:c6:88:3e:2f:9c:6c:36:65:
38:b7:29:11:d3:ff:bc:03:5d:d6:92:e0:7d:fe:91:d0:4c:f6:
d3:92:cb:b2:d1:3d:f1:5f:0f:8c:b1:98:1b:97:20:70:b2:a1:
ab:14:ca:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURMKVzLmB8AdHdtSIbrlIBvV7YNowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE3MjExMDAyWhcNMjUxMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NzJiNzk4YmFiMzZlM2VjMDQ2MjBiZTM3NGFiYTA1MGFh
ZGVmYzUxM2FmNzQ0NjBhZWQxYTJiYzI2MGVjMDZlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs0gCgvav1RFpfvpKXzQq0DiOubux0iVpQ99LmXT8IUzKI
U2J/cCxZMv7taeixGQPIPYzlDtRCeGBHHS0rRojCwg4103JD/EM4PZfoSL0mM/Qe
krIJRDKp+kOigMHItMq3p41Iu7WSIf1/V0hFUnVgNJwyyPQhhLyFvW5Uhdh8nFwf
JFhK18mH2vzTObVVwg9I8QHVBMArByubZ9/wldt1/LPM5I6aZuMJqmLfFz3y6Qmp
ORxZ2c6HE/Ff6JXyNr3wvXnrXpVLglY2JelbC+6pYd6K7l/BbRo0GsypgdvZoWwf
LzRUHcmXZww692ZS0amlxjmqERSwt4gTsCtkW/MLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUxyZFHjdYNBSJLgiG1MOO/wIJmn4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEyZDlmOGM4LWQ3ZDgtNDkxMi04NGI1LTM4NWQyOWE1OWEwNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADGDgAwDQYJKoZIhvcNAQELBQADggEBANbxmgOQ1sFrfV3OP7w98nv+gkrP
Zc5+M01yvtk+9mUyEgTvk3rRf+2LezmsgcUvybquHHtcyPEYyij2+z6ZP/ictnW8
3olH2POdW17v5onEc5OaQcXkdwJf408r7sDv5KCGbCOSJCdKWz9S4ahwHRSaG8W/
i7AYb7aRqbQO/qAJxEy1daTVSP5dXvHQaz4UJoXrxiR9H5oQxoLF9bi1Zx1VSEDy
ODcMu6O3vUIehkO8avxAyekZRVv08/gjw5akYdl9Wuc6bEzUpd/u/A+OWjTGiD4v
nGw2ZTi3KRHT/7wDXdaS4H3+kdBM9tOSy7LRPfFfD4yxmBuXIHCyoasUyp8=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:02 2025 by rpki-client