Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa
File: c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa (raw, json)
Hash identifier: LqRNdkCoO/hYQrLMWb3othbYvqMtlh0bPoSgX24puMg=
Subject key identifier: 5D:2A:E2:19:7F:2C:A1:A0:18:F9:DF:DA:E1:91:5A:B0:1C:38:75:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 384158CA4FCBF900C9F6AD3982F08C10A0729DE0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa
Signing time: Mon 06 Oct 2025 16:41:14 +0000
ROA not before: Mon 06 Oct 2025 16:41:14 +0000
ROA not after: Mon 10 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:41:58:ca:4f:cb:f9:00:c9:f6:ad:39:82:f0:8c:10:a0:72:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 16:41:14 2025 GMT
Not After : Nov 10 23:59:59 2025 GMT
Subject: serialNumber=4fa90c86db62e0072a3fc1c07ac0a59bea5fd41d83f03166ee1b677ee2a35eff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:c2:4a:77:a7:51:a1:83:58:cb:68:1d:aa:
de:9a:08:e3:f1:e1:cd:f9:ae:91:63:c0:05:ff:33:
3b:6d:cb:5c:c1:c5:9a:9c:4d:1b:dd:12:be:8f:09:
9e:a2:7a:30:78:6f:bd:bc:c1:f4:1e:5d:99:18:2a:
08:93:89:67:fa:81:96:60:76:29:e2:c6:f2:5e:93:
60:02:cf:3c:35:1c:b4:05:bb:33:1f:1d:ec:35:82:
7f:91:f7:33:94:b5:53:48:bc:83:55:44:56:57:93:
1d:8d:d8:06:26:ca:45:0e:e6:93:97:a2:d7:bd:f8:
30:45:26:6b:84:a8:7e:c0:79:87:29:2f:8c:7f:57:
56:25:eb:92:af:17:72:69:7f:22:ad:b1:ec:ed:08:
cc:28:f2:e6:a3:4d:e0:6b:47:4f:63:08:51:4f:d4:
da:58:09:51:18:03:5f:51:d7:66:e2:d9:1e:7f:49:
f8:0d:d3:24:7c:15:29:2c:cc:22:82:3f:d0:bf:29:
db:f0:1d:4b:4f:8b:44:ac:14:03:de:93:45:63:7a:
fc:b1:a8:02:8e:26:9d:5b:d6:95:09:74:d5:b2:26:
8f:37:9c:e3:c8:f3:a7:30:5f:63:6b:1e:31:80:a6:
b6:2a:6f:5f:59:ff:61:48:95:11:d2:76:33:f3:02:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2A:E2:19:7F:2C:A1:A0:18:F9:DF:DA:E1:91:5A:B0:1C:38:75:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c96c7d16-98f4-430b-900c-b555bb1ceb1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.160.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:ab:23:d5:28:0e:ab:7d:5a:77:78:8a:3d:b6:b4:f2:f7:bf:
ec:83:b2:06:6c:0a:fc:15:b4:e4:f6:b6:49:58:64:71:1b:32:
14:61:af:ca:c8:99:a9:27:48:0e:80:f4:39:a4:89:dd:40:d1:
cd:6d:fb:b6:04:e3:62:a7:28:7f:11:10:93:82:a7:3d:d7:13:
fc:4c:cb:41:ff:73:9e:a0:be:e1:73:03:a9:cb:03:4a:d0:88:
7e:15:7e:58:f6:56:ac:85:f1:e2:22:17:ea:7a:09:43:23:9a:
ba:4a:ff:59:9d:05:0f:20:63:a6:43:09:b7:66:b7:3f:bb:ff:
12:89:59:af:7d:f9:63:30:4e:e2:ca:2e:a2:96:45:31:86:78:
f2:aa:2f:76:3f:3c:8c:74:92:d3:69:56:dd:65:bc:06:b1:a9:
64:e5:8e:bd:f4:81:99:b3:0d:75:e9:7c:75:fa:bf:3a:18:1e:
d4:20:92:df:f6:d2:26:9f:58:f7:a9:a7:8b:de:05:95:8e:ce:
5a:89:de:95:7b:1d:3c:aa:3a:5d:af:a6:91:a9:d4:2a:d7:d8:
57:c3:05:a6:36:aa:61:21:52:cc:24:f9:8d:2b:f3:b0:64:15:
a7:7f:10:31:d3:b5:58:78:89:67:b0:be:9e:4a:91:cf:88:63:
98:85:54:b3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOEFYyk/L+QDJ9q05gvCMEKByneAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDA2MTY0MTE0WhcNMjUxMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZmE5MGM4NmRiNjJlMDA3MmEzZmMxYzA3YWMwYTU5YmVh
NWZkNDFkODNmMDMxNjZlZTFiNjc3ZWUyYTM1ZWZmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCRo8JKd6dRoYNYy2gdqt6aCOPx4c35rpFjwAX/Mztty1zB
xZqcTRvdEr6PCZ6iejB4b728wfQeXZkYKgiTiWf6gZZgdinixvJek2ACzzw1HLQF
uzMfHew1gn+R9zOUtVNIvINVRFZXkx2N2AYmykUO5pOXote9+DBFJmuEqH7AeYcp
L4x/V1Yl65KvF3JpfyKtseztCMwo8uajTeBrR09jCFFP1NpYCVEYA19R12bi2R5/
SfgN0yR8FSkszCKCP9C/KdvwHUtPi0SsFAPek0VjevyxqAKOJp1b1pUJdNWyJo83
nOPI86cwX2NrHjGAprYqb19Z/2FIlRHSdjPzAvOPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXSriGX8soaAY+d/a4ZFasBw4dQUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M5NmM3ZDE2LTk4ZjQtNDMwYi05MDBjLWI1NTViYjFjZWIxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUyEqAwDQYJKoZIhvcNAQELBQADggEBAJ2rI9UoDqt9Wnd4ij22tPL3v+yD
sgZsCvwVtOT2tklYZHEbMhRhr8rImaknSA6A9Dmkid1A0c1t+7YE42KnKH8REJOC
pz3XE/xMy0H/c56gvuFzA6nLA0rQiH4Vflj2VqyF8eIiF+p6CUMjmrpK/1mdBQ8g
Y6ZDCbdmtz+7/xKJWa99+WMwTuLKLqKWRTGGePKqL3Y/PIx0ktNpVt1lvAaxqWTl
jr30gZmzDXXpfHX6vzoYHtQgkt/20iafWPepp4veBZWOzlqJ3pV7HTyqOl2vppGp
1CrX2FfDBaY2qmEhUswk+Y0r87BkFad/EDHTtVh4iWewvp5Kkc+IY5iFVLM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:29 2025 by rpki-client