Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5213e57-80ca-4b02-8923-95f9e9f6bf42.roa
File: a5213e57-80ca-4b02-8923-95f9e9f6bf42.roa (raw, json)
Hash identifier: eK2un94iRLH7L3QZLlarsFShJHsnV6rpgWUE6vj4xgA=
Subject key identifier: 89:72:BF:9C:58:9B:BC:5F:64:E2:76:62:97:C7:00:53:33:E1:58:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FCBDA4E02BD04E59A6CB5A9B28EF57884A065EB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5213e57-80ca-4b02-8923-95f9e9f6bf42.roa
Signing time: Sat 11 Oct 2025 00:22:04 +0000
ROA not before: Sat 11 Oct 2025 00:22:04 +0000
ROA not after: Sat 15 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 203.110.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:cb:da:4e:02:bd:04:e5:9a:6c:b5:a9:b2:8e:f5:78:84:a0:65:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:22:04 2025 GMT
Not After : Nov 15 23:59:59 2025 GMT
Subject: serialNumber=837c872059f9984b665874da882826524e7beccc168c47a46d44816c893d042a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:51:dc:8e:a6:67:46:76:9d:e4:5f:66:f9:f3:
8c:25:00:b9:68:d7:e5:c0:07:e3:ab:71:44:98:da:
8b:06:bc:c1:c3:0e:ad:ff:b2:43:7e:62:1f:26:65:
d6:ad:3b:97:67:2b:85:17:ea:61:90:5c:81:12:5f:
26:53:85:3c:86:e6:f0:47:d9:85:7a:26:1a:4f:b4:
c7:aa:77:5b:05:23:13:09:f7:c7:74:1d:d5:e5:15:
db:7b:d8:23:09:df:a7:7a:ac:4e:52:8b:3a:db:6c:
bb:a6:0e:2e:e2:60:95:60:f7:c7:28:25:20:94:3f:
cb:a8:19:48:b4:20:18:7d:15:f2:68:d8:a0:e7:f1:
fa:0b:32:6b:19:4b:60:3b:7a:32:fe:b6:f3:95:af:
9d:d1:9c:30:06:a8:b8:ed:f0:16:0c:f3:df:70:85:
b5:35:08:9f:ff:b3:31:82:a5:be:ed:f2:66:d7:09:
c5:d3:46:9d:60:58:9f:a0:d8:6b:b0:16:57:cd:a5:
d4:d4:56:15:58:69:d6:7e:f4:cc:85:9c:d4:be:aa:
74:a9:0d:30:7f:b9:80:b3:2f:59:25:0c:7b:3e:bc:
20:5a:66:32:c9:4a:82:e0:47:ff:8b:61:af:04:b4:
d5:09:54:0c:9f:73:7f:dd:8e:c5:5d:18:c6:74:42:
7e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:72:BF:9C:58:9B:BC:5F:64:E2:76:62:97:C7:00:53:33:E1:58:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5213e57-80ca-4b02-8923-95f9e9f6bf42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.110.193.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9b:2c:98:05:a6:da:64:5d:87:b3:be:a6:b7:d7:58:f0:b3:
ac:c3:7d:c8:29:0d:37:da:d1:0d:56:06:59:14:bd:61:19:50:
f6:68:36:0c:37:f9:a6:41:7b:74:52:5f:85:04:61:ce:bf:a2:
83:15:b5:31:8a:99:5b:20:56:3d:51:6a:b4:1c:92:96:80:98:
b5:dc:8b:f7:25:1d:36:6f:d8:ca:0e:8c:e5:ed:62:48:e9:72:
e1:af:78:c4:88:fe:9c:7e:50:17:8c:b7:00:02:01:a7:79:ae:
fd:60:63:39:cf:1d:b8:9b:6a:3b:61:3f:1b:86:b7:ed:8b:5a:
3d:0d:71:8d:5d:46:80:dc:cf:9c:c1:de:c2:51:ad:39:be:79:
f4:db:d6:98:c9:54:ad:14:ff:91:40:cc:2b:37:cc:44:54:ee:
51:a2:42:db:0f:89:bd:79:e0:03:04:aa:a7:d0:fb:f8:18:3a:
54:aa:5c:22:25:05:b6:da:fe:5c:1d:c0:02:45:05:00:c1:99:
4b:0b:59:3d:da:58:b2:c9:a5:5e:f0:65:b2:a9:50:47:b3:47:
4e:f1:b7:53:34:3e:e3:a0:bc:47:3b:cd:19:d1:86:14:f4:e8:
a2:1f:dc:77:da:55:8c:63:16:d2:0f:21:1f:56:25:c7:99:83:
e0:92:99:e5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUX8vaTgK9BOWabLWpso71eISgZeswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDExMDAyMjA0WhcNMjUxMTE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MzdjODcyMDU5Zjk5ODRiNjY1ODc0ZGE4ODI4MjY1MjRl
N2JlY2NjMTY4YzQ3YTQ2ZDQ0ODE2Yzg5M2QwNDJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXUdyOpmdGdp3kX2b584wlALlo1+XAB+OrcUSY2osGvMHD
Dq3/skN+Yh8mZdatO5dnK4UX6mGQXIESXyZThTyG5vBH2YV6JhpPtMeqd1sFIxMJ
98d0HdXlFdt72CMJ36d6rE5SizrbbLumDi7iYJVg98coJSCUP8uoGUi0IBh9FfJo
2KDn8foLMmsZS2A7ejL+tvOVr53RnDAGqLjt8BYM899whbU1CJ//szGCpb7t8mbX
CcXTRp1gWJ+g2GuwFlfNpdTUVhVYadZ+9MyFnNS+qnSpDTB/uYCzL1klDHs+vCBa
ZjLJSoLgR/+LYa8EtNUJVAyfc3/djsVdGMZ0Qn5LAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiXK/nFibvF9k4nZil8cAUzPhWH4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1MjEzZTU3LTgwY2EtNGIwMi04OTIzLTk1ZjllOWY2YmY0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADLbsEwDQYJKoZIhvcNAQELBQADggEBABmbLJgFptpkXYezvqa311jws6zD
fcgpDTfa0Q1WBlkUvWEZUPZoNgw3+aZBe3RSX4UEYc6/ooMVtTGKmVsgVj1RarQc
kpaAmLXci/clHTZv2MoOjOXtYkjpcuGveMSI/px+UBeMtwACAad5rv1gYznPHbib
ajthPxuGt+2LWj0NcY1dRoDcz5zB3sJRrTm+efTb1pjJVK0U/5FAzCs3zERU7lGi
QtsPib154AMEqqfQ+/gYOlSqXCIlBbba/lwdwAJFBQDBmUsLWT3aWLLJpV7wZbKp
UEezR07xt1M0PuOgvEc7zRnRhhT06KIf3HfaVYxjFtIPIR9WJceZg+CSmeU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:13:41 2025 by rpki-client