Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebe2ca3-bd47-4c61-86d3-83c9cab1b836.roa
File: 9ebe2ca3-bd47-4c61-86d3-83c9cab1b836.roa (raw, json)
Hash identifier: Ver3aqDV1rVmUti5ppiZEM+P0njufUa8QzlsgWkaWY0=
Subject key identifier: 92:09:2C:57:E4:06:F8:06:92:FC:67:35:A4:0A:C1:8E:C3:EA:28:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 318EBF17726091AFD8A6DD1F56052327F0FB01AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebe2ca3-bd47-4c61-86d3-83c9cab1b836.roa
Signing time: Tue 07 Oct 2025 00:21:37 +0000
ROA not before: Tue 07 Oct 2025 00:21:37 +0000
ROA not after: Tue 11 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 150.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8e:bf:17:72:60:91:af:d8:a6:dd:1f:56:05:23:27:f0:fb:01:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 7 00:21:37 2025 GMT
Not After : Nov 11 23:59:59 2025 GMT
Subject: serialNumber=6527701dc1b7e4c4c7a1915b7655244f142b3bad34c77b187f2fe5a5b955bf68, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:28:a6:db:da:fb:20:21:ca:77:df:24:08:8b:
8f:71:07:9a:24:92:a8:24:29:0f:4a:a1:a6:62:b3:
3d:f6:e6:d4:7e:51:a2:aa:f6:3b:e5:16:07:c9:17:
5f:9c:1e:f0:96:a0:5c:b0:05:e2:aa:5c:e6:52:c5:
4d:c0:d9:66:97:9a:dc:2f:ef:e2:8b:6a:c8:dd:a4:
0c:5b:ed:de:50:db:b2:bd:fc:95:ca:d1:aa:ed:60:
d3:1c:43:a4:2a:ce:a9:2e:25:0e:59:ef:3d:cf:95:
08:2e:84:84:32:98:b9:3f:46:79:d7:b6:ac:61:5a:
8a:e9:6b:b9:28:8a:31:31:70:14:60:37:94:c2:cb:
ce:48:1f:64:cc:57:5c:cc:6f:9b:c1:ce:f2:04:1d:
60:d3:3a:05:5a:c8:cd:4b:86:1e:fc:d0:07:72:86:
cb:d2:d5:59:47:c7:32:3e:db:9a:ab:a7:5f:7f:cb:
f0:db:12:b4:35:d0:48:bb:9b:ce:75:0c:94:c1:dd:
a1:a4:d2:46:21:4f:08:3e:44:1b:09:65:4f:21:c6:
d1:e5:19:42:e4:02:c8:aa:cf:b3:6f:f5:ae:63:7e:
11:7a:16:4d:15:fe:b9:8d:d1:01:92:8c:72:02:0c:
54:79:29:55:9f:89:a6:93:00:53:80:99:d0:94:5d:
73:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:09:2C:57:E4:06:F8:06:92:FC:67:35:A4:0A:C1:8E:C3:EA:28:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ebe2ca3-bd47-4c61-86d3-83c9cab1b836.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:75:b1:ea:a3:27:28:cd:6a:9d:3e:b2:30:3e:35:8d:49:43:
9d:e9:48:68:6a:56:73:6d:52:f8:f7:88:e2:dd:57:47:49:97:
74:7b:b6:bd:6a:37:82:ea:15:65:23:c4:a9:04:89:9e:87:65:
16:72:35:98:6b:58:9b:b7:94:b9:23:7f:cc:d8:b6:41:0f:c7:
5a:1d:c5:ef:a2:46:03:9b:bd:28:07:44:d6:6b:03:4f:c7:39:
60:79:51:12:56:a7:29:f4:1e:07:a1:ce:d9:c0:c0:85:f4:4c:
2f:a5:c2:43:4f:6d:67:04:0e:ce:74:40:2b:54:58:be:74:a5:
0e:f6:5f:e3:66:07:22:6f:e6:58:cf:c6:7a:3e:2b:3d:ff:4a:
08:51:bf:85:81:c8:45:3f:ad:83:1b:73:a8:ad:2b:3c:9b:af:
30:93:62:51:d8:15:b7:82:90:3e:48:a6:8d:d7:c8:74:45:3d:
9f:92:ab:94:4a:8e:98:90:b0:36:21:38:12:bc:00:43:fd:28:
57:eb:08:15:60:94:ce:b9:47:ba:10:51:b2:bc:7a:85:51:6f:
31:0a:9e:f5:04:e5:93:b2:68:4d:8f:18:af:0a:b5:9b:e3:00:
a8:8f:1d:d5:92:8f:2c:87:cf:36:09:38:ca:4b:ed:bb:1d:e8:
f7:57:e0:01
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMY6/F3Jgka/Ypt0fVgUjJ/D7Aa0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA3MDAyMTM3WhcNMjUxMTExMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NTI3NzAxZGMxYjdlNGM0YzdhMTkxNWI3NjU1MjQ0ZjE0
MmIzYmFkMzRjNzdiMTg3ZjJmZTVhNWI5NTViZjY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvKKbb2vsgIcp33yQIi49xB5okkqgkKQ9KoaZisz325tR+
UaKq9jvlFgfJF1+cHvCWoFywBeKqXOZSxU3A2WaXmtwv7+KLasjdpAxb7d5Q27K9
/JXK0artYNMcQ6QqzqkuJQ5Z7z3PlQguhIQymLk/RnnXtqxhWorpa7koijExcBRg
N5TCy85IH2TMV1zMb5vBzvIEHWDTOgVayM1Lhh780AdyhsvS1VlHxzI+25qrp19/
y/DbErQ10Ei7m851DJTB3aGk0kYhTwg+RBsJZU8hxtHlGULkAsiqz7Nv9a5jfhF6
Fk0V/rmN0QGSjHICDFR5KVWfiaaTAFOAmdCUXXOBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUkgksV+QG+AaS/Gc1pArBjsPqKPMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzllYmUyY2EzLWJkNDctNGM2MS04NmQzLTgzYzljYWIxYjgzNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCW9TANBgkqhkiG9w0BAQsFAAOCAQEApXWx6qMnKM1qnT6yMD41jUlDnelI
aGpWc21S+PeI4t1XR0mXdHu2vWo3guoVZSPEqQSJnodlFnI1mGtYm7eUuSN/zNi2
QQ/HWh3F76JGA5u9KAdE1msDT8c5YHlRElanKfQeB6HO2cDAhfRML6XCQ09tZwQO
znRAK1RYvnSlDvZf42YHIm/mWM/Gej4rPf9KCFG/hYHIRT+tgxtzqK0rPJuvMJNi
UdgVt4KQPkimjdfIdEU9n5KrlEqOmJCwNiE4ErwAQ/0oV+sIFWCUzrlHuhBRsrx6
hVFvMQqe9QTlk7JoTY8Yrwq1m+MAqI8d1ZKPLIfPNgk4ykvtux3o91fgAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:56:13 2025 by rpki-client