Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
File: a51c6524-05cd-4515-90ee-87b113d6ce7d.roa (raw, json)
Hash identifier: CQOrDmZSMWFmJqUDdwXh2RuCpPaIbi0+6NYHV6sWuOI=
Subject key identifier: 8C:F2:5B:F2:D4:A9:94:72:57:69:A8:7C:5F:D3:E6:30:4B:C9:C3:B8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7067B30643695E32C80008362D86BB29652A8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
Signing time: Sat 18 Oct 2025 05:01:09 +0000
ROA not before: Sat 18 Oct 2025 05:01:09 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 146.77.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:67:b3:06:43:69:5e:32:c8:00:08:36:2d:86:bb:29:65:2a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:01:09 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=3b56ac7d51b8ae8a39cc065464b4e3a4d2c48c60db6094849d060cc477c4d4de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:8a:87:ac:1d:38:97:c0:27:cd:0f:be:a1:
68:6a:0c:5c:8d:ee:2b:b1:8a:74:40:a0:ad:e6:fe:
9e:47:6f:c2:b6:a8:ad:79:d6:db:c1:dd:cb:38:b9:
0e:17:2b:40:48:b4:60:53:7a:16:85:0d:99:cd:f7:
d8:55:f2:1b:4c:5a:1a:b5:50:54:5f:e7:f3:43:c1:
8b:74:f1:51:92:82:41:2c:22:c6:a7:ff:b8:0a:42:
ac:ca:d9:88:92:2e:9b:4d:3f:82:fe:fe:98:30:05:
07:01:0f:7d:0a:db:53:0f:15:5d:20:9d:f1:cf:f7:
99:96:a9:e6:af:37:ff:26:33:97:22:f1:91:31:50:
ca:40:95:f8:19:26:68:35:b7:28:30:da:78:68:6e:
ed:31:42:0f:0d:13:30:32:3e:53:1d:0e:4b:c0:74:
3b:da:71:ce:bd:76:2f:af:14:65:63:56:1a:9f:88:
f8:c2:9d:cc:67:2d:8d:49:c6:be:96:bd:63:ac:69:
5f:5f:f9:2e:fb:94:c4:1b:5b:d6:1d:6c:f8:02:4d:
bc:28:1d:dc:b8:48:87:42:f5:5f:22:fd:95:c9:55:
31:9b:25:cc:f5:22:4c:db:31:f1:d6:49:07:c9:9f:
f1:6a:fd:fb:7c:36:09:85:3f:45:c0:11:96:cc:b6:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:5B:F2:D4:A9:94:72:57:69:A8:7C:5F:D3:E6:30:4B:C9:C3:B8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51c6524-05cd-4515-90ee-87b113d6ce7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.77.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:ac:dc:99:8b:cb:42:91:82:8a:50:fb:32:72:63:34:3f:37:
fe:b9:c8:35:08:81:7f:54:8e:b9:ce:00:03:a0:7c:58:09:86:
98:40:b2:5b:a6:20:57:a2:de:26:10:1f:ea:63:a5:ec:1d:b7:
9f:07:1d:c8:a3:ff:78:5f:7f:e1:cf:7a:bd:cc:57:3b:1e:e2:
86:06:52:9f:1f:48:db:38:83:b0:d7:d8:3d:ed:77:33:23:f7:
97:6c:3d:09:a5:04:0b:8f:97:12:80:8e:c8:8a:9b:4e:87:b6:
7d:c8:d2:5d:38:b4:16:cd:01:a6:f5:52:3e:ee:39:11:67:c2:
97:31:a2:87:1c:50:02:0d:a6:19:1a:cc:c8:16:a5:70:c4:c5:
61:c9:41:9f:f8:42:5d:30:02:db:aa:c1:c5:71:67:8c:4d:bb:
1c:b9:d8:2f:d6:85:b4:a9:21:15:6d:0d:89:c9:0d:8c:77:8f:
f3:35:1a:2c:4c:a0:77:cf:4f:7c:52:e8:7e:cd:50:de:27:fd:
08:0c:89:56:e4:33:f7:c0:5a:63:5b:09:34:3f:6d:ac:05:9f:
ba:dd:ad:c9:bb:91:db:f5:ec:06:77:ac:13:1d:ab:00:b7:79:
8a:02:9b:df:f7:91:6d:fb:c3:f5:e6:6e:c1:e9:6b:3d:e7:77:
8c:f2:83:86
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgITcGezBkNpXjLIAAg2LYa7KWUqjjANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMTgwNTAxMDlaFw0yNTExMjIyMzU5NTla
MHoxSTBHBgNVBAUTQDNiNTZhYzdkNTFiOGFlOGEzOWNjMDY1NDY0YjRlM2E0ZDJj
NDhjNjBkYjYwOTQ4NDlkMDYwY2M0NzdjNGQ0ZGUxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALVJioesHTiXwCfND76haGoMXI3uK7GKdECgreb+nkdvwrao
rXnW28Hdyzi5DhcrQEi0YFN6FoUNmc332FXyG0xaGrVQVF/n80PBi3TxUZKCQSwi
xqf/uApCrMrZiJIum00/gv7+mDAFBwEPfQrbUw8VXSCd8c/3mZap5q83/yYzlyLx
kTFQykCV+BkmaDW3KDDaeGhu7TFCDw0TMDI+Ux0OS8B0O9pxzr12L68UZWNWGp+I
+MKdzGctjUnGvpa9Y6xpX1/5LvuUxBtb1h1s+AJNvCgd3LhIh0L1XyL9lclVMZsl
zPUiTNsx8dZJB8mf8Wr9+3w2CYU/RcARlsy2ZasCAwEAAaOCArAwggKsMB0GA1Ud
DgQWBBSM8lvy1KmUcldpqHxf0+YwS8nDuDAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvYTUxYzY1MjQtMDVjZC00NTE1LTkwZWUtODdiMTEzZDZjZTdkLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAJJNMA0GCSqGSIb3DQEBCwUAA4IBAQCKrNyZi8tCkYKKUPsycmM0Pzf+ucg1
CIF/VI65zgADoHxYCYaYQLJbpiBXot4mEB/qY6XsHbefBx3Io/94X3/hz3q9zFc7
HuKGBlKfH0jbOIOw19g97XczI/eXbD0JpQQLj5cSgI7IiptOh7Z9yNJdOLQWzQGm
9VI+7jkRZ8KXMaKHHFACDaYZGszIFqVwxMVhyUGf+EJdMALbqsHFcWeMTbscudgv
1oW0qSEVbQ2JyQ2Md4/zNRosTKB3z098Uuh+zVDeJ/0IDIlW5DP3wFpjWwk0P22s
BZ+63a3Ju5Hb9ewGd6wTHasAt3mKApvf95Ft+8P15m7B6Ws953eM8oOG
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:39:06 2025 by rpki-client