Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa
File: a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa (raw, json)
Hash identifier: K9HXlI6qMHFQ1vgFOgW18Vq6V+E0HUqLe6Nfo89TALU=
Subject key identifier: 27:39:94:28:8E:01:BC:0D:E6:1F:06:26:6E:B0:29:B9:FF:48:6E:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50D64F3861BDD15DC9CF58AEFD3CDF45D07CAE2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa
Signing time: Tue 14 Oct 2025 15:39:10 +0000
ROA not before: Tue 14 Oct 2025 15:39:10 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d6:4f:38:61:bd:d1:5d:c9:cf:58:ae:fd:3c:df:45:d0:7c:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:39:10 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=25f45b3e722bf2e3c26b8d8cfa37409e8441c07c683722094e6db67fc2187f3c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:e7:2d:de:0f:9e:c8:e3:ba:1d:c5:5a:e4:
9f:7c:56:71:ec:dd:e2:60:79:da:81:25:7e:ea:f6:
6b:7d:13:d4:54:17:b9:83:bf:2f:9f:84:87:5d:4e:
d6:9b:1c:53:ce:01:80:d4:87:b1:4a:0f:d9:24:22:
94:d7:6f:74:20:3a:57:78:72:fd:50:18:05:d4:3d:
14:d3:24:8d:bc:6f:9b:31:12:39:2b:6b:e0:0e:cf:
da:54:68:e0:8d:d5:62:cc:4c:2f:be:05:f5:3f:6b:
f8:68:0d:4f:09:d9:6a:e0:84:9b:06:ea:fc:ed:78:
d4:c0:60:7b:dc:79:43:4e:3a:18:79:ba:9e:02:fe:
bd:04:f0:a1:72:a6:25:d2:75:93:bf:b8:1b:1e:f2:
95:92:d1:ad:1f:b5:c2:b3:1b:0d:a4:bb:b3:06:35:
99:d8:50:e3:6c:29:9b:19:ae:11:22:de:37:ea:0b:
e7:ec:f1:fc:8f:ab:b8:20:98:3e:6b:2a:77:f4:de:
6a:3b:b5:78:05:96:5a:a2:80:67:77:5e:47:36:d9:
bd:75:59:65:64:40:a9:e1:92:dc:80:13:09:6a:00:
ce:8d:92:77:d3:c6:f5:21:0d:af:18:48:2b:49:70:
bf:15:54:05:0a:06:ce:32:23:d0:3b:41:ba:03:ae:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:94:28:8E:01:BC:0D:E6:1F:06:26:6E:B0:29:B9:FF:48:6E:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a186b9ce-cf89-48ae-98d7-c0eea860aa24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.205.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e2:7f:87:97:98:a6:33:b8:58:c7:26:b0:e2:5c:fc:93:81:
f8:9a:bc:6d:f4:8b:a9:06:da:16:a1:2c:99:b1:06:7c:75:3c:
26:26:15:25:72:db:0a:32:69:57:96:ac:d8:20:9f:7a:57:fe:
39:e3:bd:2f:cc:7c:f3:bc:12:a1:39:35:e7:b4:da:81:84:99:
87:f9:5b:59:2e:99:90:f2:2e:3b:20:51:19:c6:f5:ca:df:0d:
7a:56:26:f0:86:30:ec:2d:2e:77:9c:ba:02:4e:51:ed:4b:89:
20:55:d0:d1:ac:ba:46:55:b4:75:49:da:db:be:55:68:d3:e0:
c9:e7:17:88:f2:c1:09:b7:fc:e1:a2:55:67:71:52:c8:4d:a3:
26:4d:e5:26:50:39:d2:37:0a:91:fa:44:ca:f7:cf:e8:af:e2:
a7:b5:1e:b0:5a:e8:67:f0:bb:18:af:ef:93:14:87:3c:c0:19:
ae:68:c3:bc:18:6e:49:a2:ca:2f:57:6e:51:4d:ec:90:7c:e0:
48:91:ec:22:23:12:f6:f3:da:aa:fa:73:37:39:1b:be:46:2a:
cc:67:b1:8b:de:d5:e5:32:ed:90:0f:19:80:95:57:af:e1:b8:
e5:0c:55:11:e5:eb:89:31:f2:e9:bb:38:99:89:3a:ed:64:63:
f8:9d:29:09
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUNZPOGG90V3Jz1iu/TzfRdB8riswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTUzOTEwWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWY0NWIzZTcyMmJmMmUzYzI2YjhkOGNmYTM3NDA5ZTg0
NDFjMDdjNjgzNzIyMDk0ZTZkYjY3ZmMyMTg3ZjNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuL+ct3g+eyOO6HcVa5J98VnHs3eJgedqBJX7q9mt9E9RU
F7mDvy+fhIddTtabHFPOAYDUh7FKD9kkIpTXb3QgOld4cv1QGAXUPRTTJI28b5sx
Ejkra+AOz9pUaOCN1WLMTC++BfU/a/hoDU8J2WrghJsG6vzteNTAYHvceUNOOhh5
up4C/r0E8KFypiXSdZO/uBse8pWS0a0ftcKzGw2ku7MGNZnYUONsKZsZrhEi3jfq
C+fs8fyPq7ggmD5rKnf03mo7tXgFllqigGd3Xkc22b11WWVkQKnhktyAEwlqAM6N
knfTxvUhDa8YSCtJcL8VVAUKBs4yI9A7QboDrk3zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJzmUKI4BvA3mHwYmbrApuf9IbsEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ExODZiOWNlLWNmODktNDhhZS05OGQ3LWMwZWVhODYwYWEyNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsM0wDQYJKoZIhvcNAQELBQADggEBAHDif4eXmKYzuFjHJrDiXPyTgfia
vG30i6kG2hahLJmxBnx1PCYmFSVy2woyaVeWrNggn3pX/jnjvS/MfPO8EqE5Nee0
2oGEmYf5W1kumZDyLjsgURnG9crfDXpWJvCGMOwtLnecugJOUe1LiSBV0NGsukZV
tHVJ2tu+VWjT4MnnF4jywQm3/OGiVWdxUshNoyZN5SZQOdI3CpH6RMr3z+iv4qe1
HrBa6Gfwuxiv75MUhzzAGa5ow7wYbkmiyi9XblFN7JB84EiR7CIjEvbz2qr6czc5
G75GKsxnsYve1eUy7ZAPGYCVV6/huOUMVRHl64kx8um7OJmJOu1kY/idKQk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:49 2025 by rpki-client