Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
File: a0d71862-037a-4658-900a-54d90bc19a4c.roa (raw, json)
Hash identifier: ZJgrOGSqYZfO/6KkSMMIAhMM8yLIJGvbyc707g7lSMU=
Subject key identifier: 9E:D4:7D:02:D6:D8:B0:A8:2E:2F:39:DE:98:7E:8C:FD:F9:6B:23:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 225F8BF3580F47E01E9AA6E063E2187C2E8C0E3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
Signing time: Tue 30 Sep 2025 00:21:15 +0000
ROA not before: Tue 30 Sep 2025 00:21:15 +0000
ROA not after: Tue 04 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5f:8b:f3:58:0f:47:e0:1e:9a:a6:e0:63:e2:18:7c:2e:8c:0e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 30 00:21:15 2025 GMT
Not After : Nov 4 23:59:59 2025 GMT
Subject: serialNumber=69e7986deefb4f900f9aa35e97116c75293c2fd128d1c3f74d1e556a97135d69, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:86:f0:d3:ff:02:ee:1e:63:65:bb:9f:db:
40:2a:35:04:65:2e:a2:8b:59:64:12:1a:1e:c0:c5:
da:ea:23:66:67:ea:67:9b:31:38:c0:51:f7:ea:ec:
64:85:f8:45:7f:2a:2a:d3:be:fa:b2:0b:92:ce:a7:
2e:34:cb:4d:e5:54:2e:00:e1:78:7f:23:09:4f:3c:
3f:7b:a7:b6:f9:3b:af:71:1a:69:92:fa:d1:2e:c3:
63:21:4a:1e:fa:c7:ff:2f:3b:e7:b3:c0:0f:2f:4b:
b3:cc:6a:04:02:f4:02:7f:b6:7e:37:3b:ea:34:db:
14:e0:7e:24:cc:f6:cd:62:1b:d2:94:c0:bc:a7:1a:
a2:7b:63:fe:1d:85:86:76:7c:99:00:99:fe:49:ba:
15:f6:3c:9d:c0:d1:b5:c5:51:79:31:34:a5:49:a7:
26:1b:36:9d:7e:12:dd:1a:17:69:6f:e8:51:99:fc:
03:2f:ad:e2:93:fc:3a:60:82:01:66:ad:50:d0:34:
98:92:5f:0d:87:ce:81:a1:13:ac:00:88:a8:2b:a2:
45:82:94:54:42:a4:eb:b6:02:ff:49:74:86:31:42:
b8:53:e4:b0:e9:8c:cb:6c:43:fd:c6:28:4d:04:a8:
25:fb:a6:f3:dd:60:ba:3a:75:fe:93:d5:57:f6:67:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:7D:02:D6:D8:B0:A8:2E:2F:39:DE:98:7E:8C:FD:F9:6B:23:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a0d71862-037a-4658-900a-54d90bc19a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:97:a6:32:44:ce:4a:84:e1:54:9f:ef:ed:90:b9:22:df:db:
86:28:ba:16:f9:f1:dd:ad:d3:d5:c7:3b:0a:8f:fc:b4:6e:92:
ad:33:16:9e:a8:8f:b4:0f:09:90:c4:99:62:91:30:a6:45:4a:
f4:68:28:14:db:3a:e3:13:56:ae:dd:59:6c:e4:ed:a7:38:ed:
fc:7b:da:cd:ec:18:cd:ae:79:c1:e6:49:79:74:9e:2d:fa:1b:
f2:90:cd:f4:c2:fb:99:d9:81:13:a4:c2:e9:0f:c6:87:e1:78:
59:eb:2e:9a:24:dd:ca:4b:3d:c3:3d:42:a4:02:46:3e:59:06:
17:cc:01:49:49:a1:0f:2a:d0:18:2d:d5:bd:c3:32:be:56:39:
c9:e1:9f:c2:de:d4:dd:72:ea:20:f0:c0:da:15:fb:8a:a0:96:
13:00:bd:e8:64:81:da:54:5e:54:68:4f:9a:06:02:c5:dc:b1:
93:8a:f9:ef:2a:02:de:02:20:d0:33:fa:c4:62:bf:e4:38:5b:
07:94:8d:32:81:af:e3:38:ba:aa:bc:72:28:cc:40:4f:43:4d:
51:a6:d2:57:02:68:2d:9e:ef:5f:11:29:f8:60:96:49:8b:ca:
fa:3a:24:07:21:17:eb:8f:f3:53:32:26:83:ec:2b:29:2e:50:
1b:2a:40:b6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIl+L81gPR+AemqbgY+IYfC6MDjowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwOTMwMDAyMTE1WhcNMjUxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OWU3OTg2ZGVlZmI0ZjkwMGY5YWEzNWU5NzExNmM3NTI5
M2MyZmQxMjhkMWMzZjc0ZDFlNTU2YTk3MTM1ZDY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAz4bw0/8C7h5jZbuf20AqNQRlLqKLWWQSGh7AxdrqI2Zn
6mebMTjAUffq7GSF+EV/KirTvvqyC5LOpy40y03lVC4A4Xh/IwlPPD97p7b5O69x
GmmS+tEuw2MhSh76x/8vO+ezwA8vS7PMagQC9AJ/tn43O+o02xTgfiTM9s1iG9KU
wLynGqJ7Y/4dhYZ2fJkAmf5JuhX2PJ3A0bXFUXkxNKVJpyYbNp1+Et0aF2lv6FGZ
/AMvreKT/DpgggFmrVDQNJiSXw2HzoGhE6wAiKgrokWClFRCpOu2Av9JdIYxQrhT
5LDpjMtsQ/3GKE0EqCX7pvPdYLo6df6T1Vf2ZxJBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUntR9AtbYsKguLznemH6M/flrI1cwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EwZDcxODYyLTAzN2EtNDY1OC05MDBhLTU0ZDkwYmMxOWE0Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADAvcYwDQYJKoZIhvcNAQELBQADggEBAMGXpjJEzkqE4VSf7+2QuSLf24Yo
uhb58d2t09XHOwqP/LRukq0zFp6oj7QPCZDEmWKRMKZFSvRoKBTbOuMTVq7dWWzk
7ac47fx72s3sGM2uecHmSXl0ni36G/KQzfTC+5nZgROkwukPxofheFnrLpok3cpL
PcM9QqQCRj5ZBhfMAUlJoQ8q0Bgt1b3DMr5WOcnhn8Le1N1y6iDwwNoV+4qglhMA
vehkgdpUXlRoT5oGAsXcsZOK+e8qAt4CINAz+sRiv+Q4WweUjTKBr+M4uqq8cijM
QE9DTVGm0lcCaC2e718RKfhglkmLyvo6JAchF+uP81MyJoPsKykuUBsqQLY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:22 2025 by rpki-client