Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177bee13-5f72-4138-aba1-3c7b2e009e4b.roa
File: 177bee13-5f72-4138-aba1-3c7b2e009e4b.roa (raw, json)
Hash identifier: k7S9XdILzSY9Mk+TZnBVw7sW5dwgTG0lHKrCjc2/CZs=
Subject key identifier: 22:66:49:BA:CD:A8:E9:AA:81:71:BB:1B:C0:D3:2D:CB:29:B1:F5:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C05AE61037E7EE6DA7F75C96AB0BB8809C0DCAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177bee13-5f72-4138-aba1-3c7b2e009e4b.roa
Signing time: Tue 14 Oct 2025 00:51:22 +0000
ROA not before: Tue 14 Oct 2025 00:51:22 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:05:ae:61:03:7e:7e:e6:da:7f:75:c9:6a:b0:bb:88:09:c0:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:51:22 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=6281d6d7c94388a64ffd7cf969b81f6ca6c4006f795a6903d1339fb87a48440b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e3:a2:37:94:28:01:26:51:03:f1:d3:e8:ab:
73:ce:ec:87:5d:26:98:ac:e3:97:9f:f0:5e:e2:22:
dc:f2:c7:70:93:9b:55:11:f4:4b:82:a4:2a:42:c5:
3b:08:f0:fc:45:0f:dc:75:c5:c9:3b:29:d6:69:a0:
9e:e7:ff:b1:4e:27:88:4f:74:1c:18:a4:08:3d:1c:
e0:e6:3c:37:7f:98:48:82:25:68:bd:21:c1:1b:57:
03:e1:32:59:e2:cc:57:d5:8d:be:50:22:fc:a3:0b:
64:7a:61:26:32:df:ba:72:c1:c8:f5:da:b8:83:5f:
75:13:c1:68:ec:bc:6b:9c:66:ed:a4:56:2c:aa:d1:
57:45:f3:ef:c0:37:08:bc:f1:c1:07:32:f6:7f:1b:
94:5f:93:6d:c9:f1:0c:86:fa:3f:38:d7:1c:d2:c9:
f6:b0:0f:96:20:92:97:33:70:5b:7c:bf:a2:9c:17:
00:f3:a9:cb:c8:4a:19:bf:65:a1:9f:3a:3e:d2:85:
7e:46:ca:41:54:54:55:f3:9d:67:9d:96:39:47:54:
04:22:18:f1:6e:7e:20:5e:f2:cf:ae:46:fd:b1:92:
64:d3:69:b5:52:a7:fe:d8:f1:3d:44:c3:e7:2f:a5:
ef:ef:1c:65:f3:29:61:1f:04:e0:be:2a:32:c3:23:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:66:49:BA:CD:A8:E9:AA:81:71:BB:1B:C0:D3:2D:CB:29:B1:F5:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/177bee13-5f72-4138-aba1-3c7b2e009e4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.4.0/24
Signature Algorithm: sha256WithRSAEncryption
87:96:8a:64:19:bf:e8:6d:44:c6:2e:bf:38:65:59:c0:3d:e2:
67:54:27:5b:d5:6c:01:77:09:3e:2e:5c:d2:b3:78:62:ce:95:
72:21:2e:94:f1:08:1b:1f:03:8a:27:ac:9c:50:80:c1:4e:e5:
b3:ce:a1:61:59:d0:cc:d7:d0:0b:35:1d:9f:83:6c:8e:4c:4c:
f2:8c:8e:97:c8:90:37:53:e3:4f:8d:e9:27:9c:fb:0a:bd:90:
86:c9:74:68:39:73:86:c1:40:9a:7f:3f:e1:2a:43:ca:b7:a8:
56:56:f3:4c:29:8d:9c:fe:8a:5a:73:d8:46:b4:84:c6:94:6d:
36:b6:4a:4e:f2:85:95:c2:1a:cc:07:2b:f9:75:b3:3f:84:38:
16:77:26:10:5c:46:ab:c4:d0:de:bd:3f:20:a2:4b:eb:7e:96:
ad:e8:72:dc:d4:c6:74:07:65:19:43:ca:d2:80:14:7d:d2:27:
f1:c3:08:0e:82:1c:2d:ce:0f:f1:4a:63:95:a1:d2:a9:06:5f:
c9:bc:24:5b:db:bb:82:20:4f:1c:d5:d9:f6:55:43:aa:a2:b1:
f5:b3:bd:d1:01:1b:a5:84:76:6a:6b:eb:88:5b:e0:66:61:ee:
7d:3e:41:9d:04:09:98:ff:20:60:73:f2:eb:d9:e6:84:4b:f6:
2e:05:71:b4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTAWuYQN+fubaf3XJarC7iAnA3K0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDA1MTIyWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MjgxZDZkN2M5NDM4OGE2NGZmZDdjZjk2OWI4MWY2Y2E2
YzQwMDZmNzk1YTY5MDNkMTMzOWZiODdhNDg0NDBiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa46I3lCgBJlED8dPoq3PO7IddJpis45ef8F7iItzyx3CT
m1UR9EuCpCpCxTsI8PxFD9x1xck7KdZpoJ7n/7FOJ4hPdBwYpAg9HODmPDd/mEiC
JWi9IcEbVwPhMlnizFfVjb5QIvyjC2R6YSYy37pywcj12riDX3UTwWjsvGucZu2k
Viyq0VdF8+/ANwi88cEHMvZ/G5Rfk23J8QyG+j841xzSyfawD5YgkpczcFt8v6Kc
FwDzqcvIShm/ZaGfOj7ShX5GykFUVFXznWedljlHVAQiGPFufiBe8s+uRv2xkmTT
abVSp/7Y8T1Ew+cvpe/vHGXzKWEfBOC+KjLDI35NAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUImZJus2o6aqBcbsbwNMtyymx9WUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE3N2JlZTEzLTVmNzItNDEzOC1hYmExLTNjN2IyZTAwOWU0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsAQwDQYJKoZIhvcNAQELBQADggEBAIeWimQZv+htRMYuvzhlWcA94mdU
J1vVbAF3CT4uXNKzeGLOlXIhLpTxCBsfA4onrJxQgMFO5bPOoWFZ0MzX0As1HZ+D
bI5MTPKMjpfIkDdT40+N6Sec+wq9kIbJdGg5c4bBQJp/P+EqQ8q3qFZW80wpjZz+
ilpz2Ea0hMaUbTa2Sk7yhZXCGswHK/l1sz+EOBZ3JhBcRqvE0N69PyCiS+t+lq3o
ctzUxnQHZRlDytKAFH3SJ/HDCA6CHC3OD/FKY5Wh0qkGX8m8JFvbu4IgTxzV2fZV
Q6qisfWzvdEBG6WEdmpr64hb4GZh7n0+QZ0ECZj/IGBz8uvZ5oRL9i4FcbQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:01 2025 by rpki-client