Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa
File: 50988588-6545-4acd-aaf1-bb3943b2fcca.roa (raw, json)
Hash identifier: xBgX79l3jPjOZqUAjXJUhHdhDAX69syk2hq4195tvmo=
Subject key identifier: C6:94:C2:44:02:57:DC:8A:D9:37:52:5F:20:79:81:DA:64:46:CD:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DCCFF3E88E3E965F553F18D5F12038215454705
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa
Signing time: Tue 30 Sep 2025 00:21:14 +0000
ROA not before: Tue 30 Sep 2025 00:21:14 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 182.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:cc:ff:3e:88:e3:e9:65:f5:53:f1:8d:5f:12:03:82:15:45:47:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:21:14 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=e9920dae1412ec6ea6225f6400244284cbce90f4f2b1a8dc4616a1814a2a7991, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:be:2e:b7:4b:2b:ee:ec:5d:ee:48:dd:3e:
01:af:5f:05:c5:90:7e:31:a6:30:ed:94:1a:b9:a0:
70:42:da:ca:9a:07:6f:62:00:04:05:f4:43:cd:85:
27:5d:9b:2a:38:3d:67:1e:dc:0a:ea:ac:fc:6a:f7:
1c:ff:cd:90:e0:df:9f:f0:26:63:18:77:a0:d5:c0:
82:1a:27:61:da:63:b5:81:dc:c4:2b:59:82:11:c6:
9e:9b:a4:0a:4d:e6:89:d1:87:af:5b:be:85:e9:ab:
f4:f3:bb:9d:9a:d4:12:38:36:26:8a:bd:6c:fa:4b:
37:32:8a:85:58:ac:9c:e8:fe:57:89:a1:b0:e9:aa:
55:e9:34:52:30:95:a1:94:9a:34:45:ce:d1:72:f2:
41:94:63:02:95:e0:d1:29:8a:ec:01:09:bf:5d:b1:
0b:fa:16:47:e3:12:6f:26:c9:ce:2d:96:95:64:92:
18:2f:67:93:82:00:34:b6:9d:a6:67:39:64:c6:ef:
fd:58:ce:55:3b:d4:86:b7:70:6f:68:81:a2:a1:8c:
f5:49:56:79:45:71:7a:06:83:f8:89:92:27:74:87:
13:73:ad:be:89:ee:d0:af:f5:cb:37:2d:4b:b9:50:
c1:8f:8c:f3:3a:20:fb:d4:c2:77:28:83:a0:3c:11:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:94:C2:44:02:57:DC:8A:D9:37:52:5F:20:79:81:DA:64:46:CD:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50988588-6545-4acd-aaf1-bb3943b2fcca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.29.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:a5:1b:77:70:96:18:a1:32:63:45:6e:e1:20:12:09:5b:c2:
62:06:e8:db:45:06:bb:c7:3c:93:f7:53:d1:0c:68:51:7c:cf:
4f:16:46:be:08:de:7e:cb:52:3b:80:2b:7c:d3:36:36:d4:fc:
a1:e4:13:d4:ef:0c:4b:21:4c:7d:b1:4c:7c:51:8a:2e:a7:25:
2c:71:c5:af:41:f4:d0:8b:3c:df:ae:2d:07:80:b2:e8:34:f1:
19:b7:a1:a3:e2:0a:6e:d0:5d:db:2e:ff:86:d4:d3:97:b5:b7:
49:c1:b0:7f:f2:9b:84:c7:18:13:ac:cf:51:c5:d2:39:fd:d1:
2b:3e:66:55:9b:7d:05:4d:c2:53:7c:3f:7d:2a:3d:2a:3e:b0:
3a:ad:93:a1:8b:6b:c2:66:3d:08:4c:5a:23:3c:82:e3:ba:37:
42:d7:43:db:77:e7:ee:ec:f4:8d:f1:96:73:d6:c8:ec:d3:68:
15:18:1d:da:8c:90:c8:f9:18:74:8f:ea:68:50:a5:e6:86:cb:
2e:6e:d0:99:de:8a:05:80:a5:e5:98:18:eb:2d:80:22:b3:57:
3c:e1:ca:08:fe:15:0d:37:99:89:c8:33:19:b1:eb:ee:1e:2b:
41:2b:11:e3:c3:b6:e2:f4:bf:fd:8d:53:2a:9f:23:dd:8d:56:
29:fb:0c:f4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPcz/Pojj6WX1U/GNXxIDghVFRwUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAyMTE0WhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTkyMGRhZTE0MTJlYzZlYTYyMjVmNjQwMDI0NDI4NGNi
Y2U5MGY0ZjJiMWE4ZGM0NjE2YTE4MTRhMmE3OTkxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqXL4ut0sr7uxd7kjdPgGvXwXFkH4xpjDtlBq5oHBC2sqa
B29iAAQF9EPNhSddmyo4PWce3ArqrPxq9xz/zZDg35/wJmMYd6DVwIIaJ2HaY7WB
3MQrWYIRxp6bpApN5onRh69bvoXpq/Tzu52a1BI4NiaKvWz6SzcyioVYrJzo/leJ
obDpqlXpNFIwlaGUmjRFztFy8kGUYwKV4NEpiuwBCb9dsQv6FkfjEm8myc4tlpVk
khgvZ5OCADS2naZnOWTG7/1YzlU71Ia3cG9ogaKhjPVJVnlFcXoGg/iJkid0hxNz
rb6J7tCv9cs3LUu5UMGPjPM6IPvUwncog6A8EUzRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxpTCRAJX3IrZN1JfIHmB2mRGzdEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUwOTg4NTg4LTY1NDUtNGFjZC1hYWYxLWJiMzk0M2IyZmNjYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwC2HTANBgkqhkiG9w0BAQsFAAOCAQEAnqUbd3CWGKEyY0Vu4SASCVvCYgbo
20UGu8c8k/dT0QxoUXzPTxZGvgjefstSO4ArfNM2NtT8oeQT1O8MSyFMfbFMfFGK
LqclLHHFr0H00Is8364tB4Cy6DTxGbeho+IKbtBd2y7/htTTl7W3ScGwf/KbhMcY
E6zPUcXSOf3RKz5mVZt9BU3CU3w/fSo9Kj6wOq2ToYtrwmY9CExaIzyC47o3QtdD
23fn7uz0jfGWc9bI7NNoFRgd2oyQyPkYdI/qaFCl5obLLm7Qmd6KBYCl5ZgY6y2A
IrNXPOHKCP4VDTeZicgzGbHr7h4rQSsR48O24vS//Y1TKp8j3Y1WKfsM9A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:35 2025 by rpki-client