Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa
File: 89a8e37e-25ae-47f3-a49b-f9093043948d.roa (raw, json)
Hash identifier: M7kg0d9t86kP8AE0FCrBqYXNUon7XX5+iHadQLhpiRI=
Subject key identifier: 2F:AD:2E:A4:E0:36:49:01:11:45:A9:8C:2B:30:27:20:42:EB:86:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5889B926E5E6BB24C89F5EBD1D78F8C6CA312437
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa
Signing time: Tue 14 Oct 2025 15:22:24 +0000
ROA not before: Tue 14 Oct 2025 15:22:24 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:89:b9:26:e5:e6:bb:24:c8:9f:5e:bd:1d:78:f8:c6:ca:31:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:22:24 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9fe97e6e9cc96e1edf58baf56dd94ac44f15c873462822a9201c6095d6b36ccb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4b:14:77:47:1b:80:b1:d5:d8:be:a3:8a:15:
4d:7a:59:c4:ac:59:ef:3e:17:6b:f4:b6:cc:98:74:
8b:c6:7f:f4:23:0b:2d:c1:66:86:61:ac:31:08:ac:
6c:22:2f:e5:74:62:44:49:7b:65:75:96:12:b4:1c:
de:39:f9:0b:6e:e1:3c:09:87:4e:b9:30:96:18:92:
84:12:a1:c4:56:de:6c:df:3f:f0:ce:d9:49:47:14:
65:9d:af:80:22:7c:d0:72:f6:13:c3:bd:51:c4:fe:
cf:fe:b3:39:5a:4e:b4:24:ee:96:de:77:56:b3:f1:
db:59:0c:f5:e7:68:74:63:2f:bc:25:f1:c6:9a:21:
3e:a1:e9:b6:96:b1:fd:ff:a4:d8:52:a8:3f:bc:09:
46:75:a2:9f:cd:f6:d8:99:05:42:b7:fe:c6:e5:d1:
11:32:15:4e:f8:fd:ac:4b:58:90:1c:21:2e:dd:b4:
5e:e4:14:84:e1:4a:e1:a5:01:6f:11:22:6d:15:19:
8f:0a:b6:58:b8:aa:3b:8c:1f:cc:8c:8f:c7:62:64:
a8:f0:d6:7f:46:e5:db:b1:4e:5f:4e:1b:f3:86:39:
7a:15:96:a6:7d:5d:cf:04:df:da:38:1e:b7:e0:84:
a9:70:dd:c6:b2:f9:c4:cd:12:a8:50:c0:b9:c1:a6:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AD:2E:A4:E0:36:49:01:11:45:A9:8C:2B:30:27:20:42:EB:86:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89a8e37e-25ae-47f3-a49b-f9093043948d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
78:59:b4:59:c7:70:00:fc:5f:98:92:d5:71:43:df:4b:ac:04:
f6:b0:80:1a:56:1e:9b:60:df:c2:b2:b8:e9:6f:f9:9f:67:7f:
5d:cc:4e:76:b8:0b:1a:96:3f:17:f3:58:29:12:90:e8:49:98:
a7:21:95:a9:e5:7e:28:85:2d:95:d6:50:5c:8b:8a:4f:99:a2:
88:3b:9e:59:c2:a7:62:54:04:08:ab:17:04:ee:9b:83:87:e8:
8d:ab:95:bd:0f:9c:76:4e:ad:63:a5:b9:b8:ad:18:ad:3d:6b:
f0:00:67:ca:6b:35:c9:c4:2e:b2:fd:15:2c:e8:e9:e6:9b:d9:
8e:26:96:8d:63:0e:e9:90:ca:57:3f:b6:b3:2c:61:0f:3a:12:
a1:ba:b8:6b:95:7d:c3:2d:f9:3c:01:f7:93:85:04:ab:b3:59:
8d:36:3e:6d:69:84:b0:f8:47:e2:a0:3b:2c:2c:83:86:f6:1e:
15:72:81:23:6a:e3:f0:43:a2:30:0e:fa:56:c8:b0:d7:2e:40:
fc:7d:5d:31:0b:60:d0:78:eb:9f:81:25:1c:0e:09:f0:b1:c1:
4c:44:70:0f:bf:bd:8d:c7:b5:71:c7:0b:0f:f2:e8:54:6b:0e:
22:16:63:11:71:0e:b9:9a:29:c2:36:bf:fd:59:e9:27:93:c3:
0e:21:1d:2d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWIm5JuXmuyTIn169HXj4xsoxJDcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTUyMjI0WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZmU5N2U2ZTljYzk2ZTFlZGY1OGJhZjU2ZGQ5NGFjNDRm
MTVjODczNDYyODIyYTkyMDFjNjA5NWQ2YjM2Y2NiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcSxR3RxuAsdXYvqOKFU16WcSsWe8+F2v0tsyYdIvGf/Qj
Cy3BZoZhrDEIrGwiL+V0YkRJe2V1lhK0HN45+Qtu4TwJh065MJYYkoQSocRW3mzf
P/DO2UlHFGWdr4AifNBy9hPDvVHE/s/+szlaTrQk7pbed1az8dtZDPXnaHRjL7wl
8caaIT6h6baWsf3/pNhSqD+8CUZ1op/N9tiZBUK3/sbl0REyFU74/axLWJAcIS7d
tF7kFIThSuGlAW8RIm0VGY8Ktli4qjuMH8yMj8diZKjw1n9G5duxTl9OG/OGOXoV
lqZ9Xc8E39o4HrfghKlw3cay+cTNEqhQwLnBplqPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUL60upOA2SQERRamMKzAnIELrhrowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg5YThlMzdlLTI1YWUtNDdmMy1hNDliLWY5MDkzMDQzOTQ4ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsLkwDQYJKoZIhvcNAQELBQADggEBAHhZtFnHcAD8X5iS1XFD30usBPaw
gBpWHptg38KyuOlv+Z9nf13MTna4CxqWPxfzWCkSkOhJmKchlanlfiiFLZXWUFyL
ik+Zoog7nlnCp2JUBAirFwTum4OH6I2rlb0PnHZOrWOlubitGK09a/AAZ8prNcnE
LrL9FSzo6eab2Y4mlo1jDumQylc/trMsYQ86EqG6uGuVfcMt+TwB95OFBKuzWY02
Pm1phLD4R+KgOywsg4b2HhVygSNq4/BDojAO+lbIsNcuQPx9XTELYNB465+BJRwO
CfCxwUxEcA+/vY3HtXHHCw/y6FRrDiIWYxFxDrmaKcI2v/1Z6SeTww4hHS0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:18 2025 by rpki-client