Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c78baa-d85f-40ba-9ee1-9db8e7a916b0.roa
File: 19c78baa-d85f-40ba-9ee1-9db8e7a916b0.roa (raw, json)
Hash identifier: GsguYE799LO09l4PnEsV1aQepbkofMQhRaHDxr5Omaw=
Subject key identifier: 7D:82:0C:C9:CF:70:24:C5:50:BC:7B:DB:B8:EB:97:06:C2:A4:70:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1812D040CD6864703850F9CDE23337B479FE79DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c78baa-d85f-40ba-9ee1-9db8e7a916b0.roa
Signing time: Tue 14 Oct 2025 22:11:14 +0000
ROA not before: Tue 14 Oct 2025 22:11:14 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.84.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:12:d0:40:cd:68:64:70:38:50:f9:cd:e2:33:37:b4:79:fe:79:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 22:11:14 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=a3f5d983df6cdd7431ac273219176db3801a008c23ea727c7a5edb300f623ea4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:81:91:2e:ee:0a:ba:f9:09:6d:3f:66:fe:
4d:10:bf:80:e8:68:df:d4:5c:e3:a5:df:f9:6c:6c:
05:d5:13:92:5a:35:fe:50:7a:6c:02:70:14:ec:96:
d4:04:ab:fb:36:03:8c:9a:c9:86:09:f6:28:02:e2:
df:29:87:f4:38:d1:57:76:f2:a0:be:c4:02:7d:ca:
38:4c:fa:6e:10:60:93:30:6e:85:ae:7f:8b:d1:a8:
f5:bd:da:a8:8d:4a:e8:2c:d8:bb:19:63:00:37:c2:
f0:d0:48:f0:a5:37:b0:93:75:16:ed:df:7b:a4:a7:
a5:94:c7:ef:65:83:52:e9:14:74:ee:60:c2:9f:f2:
bf:75:30:ad:0b:6d:41:76:1b:00:ff:00:89:20:dc:
a1:e3:49:6f:59:d8:f9:b1:9d:fd:fc:2f:da:42:cb:
df:8d:5a:56:ec:d9:14:f6:df:b4:9f:0e:81:f5:96:
2f:28:04:4d:fd:ad:1f:c3:a1:e7:c6:f4:9a:e7:68:
f3:f2:da:75:63:e6:41:61:75:19:b6:e7:cd:16:0d:
1e:97:df:19:a5:a2:b0:be:ab:7d:3c:96:ca:cf:0f:
49:36:35:9e:14:fe:44:19:8b:19:72:a3:75:df:25:
dc:fe:97:91:54:b8:7c:c8:06:65:a4:ce:3c:c2:98:
aa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:82:0C:C9:CF:70:24:C5:50:BC:7B:DB:B8:EB:97:06:C2:A4:70:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19c78baa-d85f-40ba-9ee1-9db8e7a916b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.84.176.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:10:a5:66:62:5b:2d:90:73:96:0e:ec:4c:41:6c:6c:9c:27:
85:e3:84:d4:a1:fc:60:7e:04:c6:61:c3:67:c6:a6:d3:e6:65:
3e:3f:d2:fc:4e:bf:8e:dd:26:cd:49:f2:01:ed:48:7b:78:46:
2b:ff:29:ba:77:0d:22:4a:a4:c1:3f:60:1b:e0:ff:39:31:08:
35:b8:c4:87:a6:59:43:ab:c5:2c:dc:c5:48:34:ff:3f:81:5c:
af:35:d2:b3:c7:5d:98:bf:43:62:2d:58:d9:2a:c8:ec:b5:6d:
ea:6b:89:d2:be:be:a5:4e:aa:33:3c:d9:01:8e:35:c0:bd:b2:
d2:6f:6f:a9:39:03:80:d9:33:41:47:cd:db:b5:d7:6a:2b:ac:
20:be:2a:0d:b1:3c:20:65:a4:54:4f:07:cd:3e:cf:66:f9:ff:
6f:ee:c7:13:ad:fc:4c:d2:98:f2:d9:08:d8:ed:23:5f:ad:de:
70:7c:ae:88:f6:84:39:ee:de:f7:01:1f:f6:60:be:f7:36:44:
10:2a:7f:59:bb:3f:0a:2c:fd:8a:12:a8:a0:b5:e8:4c:10:c9:
cf:0c:01:40:a8:f3:f3:2f:8e:3b:cb:03:78:9f:36:58:4f:91:
d9:ab:16:6c:6a:6e:3f:41:21:f1:72:3d:15:c1:ea:8b:fa:5e:
cc:d5:91:1c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGBLQQM1oZHA4UPnN4jM3tHn+edowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MjIxMTE0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhM2Y1ZDk4M2RmNmNkZDc0MzFhYzI3MzIxOTE3NmRiMzgw
MWEwMDhjMjNlYTcyN2M3YTVlZGIzMDBmNjIzZWE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpIoGRLu4KuvkJbT9m/k0Qv4DoaN/UXOOl3/lsbAXVE5Ja
Nf5QemwCcBTsltQEq/s2A4yayYYJ9igC4t8ph/Q40Vd28qC+xAJ9yjhM+m4QYJMw
boWuf4vRqPW92qiNSugs2LsZYwA3wvDQSPClN7CTdRbt33ukp6WUx+9lg1LpFHTu
YMKf8r91MK0LbUF2GwD/AIkg3KHjSW9Z2Pmxnf38L9pCy9+NWlbs2RT237SfDoH1
li8oBE39rR/DoefG9JrnaPPy2nVj5kFhdRm2580WDR6X3xmlorC+q308lsrPD0k2
NZ4U/kQZixlyo3XfJdz+l5FUuHzIBmWkzjzCmKrVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfYIMyc9wJMVQvHvbuOuXBsKkcBMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5Yzc4YmFhLWQ4NWYtNDBiYS05ZWUxLTlkYjhlN2E5MTZiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJjVLAwDQYJKoZIhvcNAQELBQADggEBAL8QpWZiWy2Qc5YO7ExBbGycJ4Xj
hNSh/GB+BMZhw2fGptPmZT4/0vxOv47dJs1J8gHtSHt4Riv/Kbp3DSJKpME/YBvg
/zkxCDW4xIemWUOrxSzcxUg0/z+BXK810rPHXZi/Q2ItWNkqyOy1bepridK+vqVO
qjM82QGONcC9stJvb6k5A4DZM0FHzdu112orrCC+Kg2xPCBlpFRPB80+z2b5/2/u
xxOt/EzSmPLZCNjtI1+t3nB8roj2hDnu3vcBH/Zgvvc2RBAqf1m7Pwos/YoSqKC1
6EwQyc8MAUCo8/MvjjvLA3ifNlhPkdmrFmxqbj9BIfFyPRXB6ov6XszVkRw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:56 2025 by rpki-client