Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa
File: d1875431-4714-40a0-876a-6f900c906c52.roa (raw, json)
Hash identifier: cQW0OTpo2vdQcQ5kApgZf+YeHfaNWUqbRWB97yFMT38=
Subject key identifier: 10:6D:BC:B7:8A:67:51:F4:28:4B:BF:CB:A1:22:AF:04:0A:25:41:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19009579047025A5392341EBB99A2D32F9B3FF25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa
Signing time: Sun 19 Oct 2025 02:11:03 +0000
ROA not before: Sun 19 Oct 2025 02:11:03 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 207.21.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:00:95:79:04:70:25:a5:39:23:41:eb:b9:9a:2d:32:f9:b3:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:11:03 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=9a77dc1345f7f854f463544081e9fecf0b39fd792c3bbda711feafa9ba1c7f34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:76:a2:99:f4:45:8e:28:d1:71:c2:17:88:
9d:48:f1:77:c3:2c:9a:08:45:c9:16:38:b1:4e:c4:
27:bd:2e:86:3c:db:a1:f4:1c:f4:20:1d:00:22:bf:
cf:3a:d6:9a:c8:3b:32:00:34:ca:27:76:25:a6:b4:
cd:3b:ed:98:d9:35:af:c7:70:3d:32:b0:3a:c8:1b:
dd:0e:17:57:29:46:e9:18:9a:98:33:6e:af:4c:fb:
1a:80:1f:32:bd:77:31:a3:39:be:1b:30:7f:64:35:
ac:e3:ce:a5:90:6f:e1:27:f4:ff:23:01:56:b6:e6:
1a:3e:e7:7b:97:01:c2:a0:95:0c:14:d7:00:e1:1d:
a9:83:f2:f7:a0:d1:90:48:5d:ea:c6:09:49:48:02:
a4:dd:a3:c6:1c:71:64:82:b4:d7:4e:8d:68:3f:98:
da:32:84:a0:01:84:e2:8f:59:8f:e8:98:db:ad:7a:
0d:28:a8:71:f3:3e:38:a8:3b:49:c5:ee:78:9c:72:
03:ef:69:cd:02:9d:42:7e:50:c3:60:db:6f:67:2a:
7e:24:e1:d1:1b:9e:22:96:20:09:06:d5:66:8a:2d:
4a:90:22:5a:c4:14:23:40:ee:1d:4c:14:63:89:50:
5d:b0:eb:9e:8d:5e:23:9e:7b:e8:19:19:49:5b:dd:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:BC:B7:8A:67:51:F4:28:4B:BF:CB:A1:22:AF:04:0A:25:41:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1875431-4714-40a0-876a-6f900c906c52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:66:dc:d3:3c:0f:76:c7:56:a8:3b:ec:04:77:a4:07:53:
48:20:a6:bb:e9:15:7b:fd:bf:13:24:f0:0f:c2:2a:91:ae:08:
c5:75:01:54:fa:30:db:3a:c6:56:c1:69:fe:92:45:5f:02:6c:
19:f7:1d:92:fc:38:62:6a:e6:b7:81:50:f5:2f:99:3c:4e:f5:
37:e5:44:de:fa:90:07:f7:e6:9d:30:bf:3c:21:ca:b5:00:7c:
a6:09:e1:6a:d6:40:cc:69:bd:a6:48:62:67:d0:a3:05:aa:ee:
34:34:70:84:21:9e:84:ee:ac:8a:cc:49:23:62:54:8f:ee:d2:
24:09:de:60:19:ea:db:ea:51:99:82:2a:d8:d2:37:56:32:bc:
c3:39:0a:6e:43:7b:e2:77:b2:1a:2b:95:dc:b4:1f:77:25:18:
7d:aa:5b:11:ea:e8:90:b0:73:6a:10:1d:cf:a9:36:93:f5:6e:
a2:69:de:b4:2d:06:10:ae:ab:10:0c:a5:05:d5:ab:d3:93:4b:
41:53:1d:99:3e:62:d6:0b:c9:f7:96:2a:a6:15:25:40:8a:20:
d7:8f:49:60:84:0a:b1:a6:2d:60:2a:59:53:76:62:ed:37:f1:
f4:91:36:51:8d:e5:fd:6f:b6:64:ca:a7:b4:67:0b:54:a9:80:
9a:c9:4e:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGQCVeQRwJaU5I0HruZotMvmz/yUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIxMTAzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTc3ZGMxMzQ1ZjdmODU0ZjQ2MzU0NDA4MWU5ZmVjZjBi
MzlmZDc5MmMzYmJkYTcxMWZlYWZhOWJhMWM3ZjM0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDF5naimfRFjijRccIXiJ1I8XfDLJoIRckWOLFOxCe9LoY8
26H0HPQgHQAiv8861prIOzIANMondiWmtM077ZjZNa/HcD0ysDrIG90OF1cpRukY
mpgzbq9M+xqAHzK9dzGjOb4bMH9kNazjzqWQb+En9P8jAVa25ho+53uXAcKglQwU
1wDhHamD8veg0ZBIXerGCUlIAqTdo8YccWSCtNdOjWg/mNoyhKABhOKPWY/omNut
eg0oqHHzPjioO0nF7niccgPvac0CnUJ+UMNg229nKn4k4dEbniKWIAkG1WaKLUqQ
IlrEFCNA7h1MFGOJUF2w656NXiOee+gZGUlb3aGjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEG28t4pnUfQoS7/LoSKvBAolQUUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2QxODc1NDMxLTQ3MTQtNDBhMC04NzZhLTZmOTAwYzkwNmM1Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADPFfUwDQYJKoZIhvcNAQELBQADggEBAI7qZtzTPA92x1aoO+wEd6QHU0gg
prvpFXv9vxMk8A/CKpGuCMV1AVT6MNs6xlbBaf6SRV8CbBn3HZL8OGJq5reBUPUv
mTxO9TflRN76kAf35p0wvzwhyrUAfKYJ4WrWQMxpvaZIYmfQowWq7jQ0cIQhnoTu
rIrMSSNiVI/u0iQJ3mAZ6tvqUZmCKtjSN1YyvMM5Cm5De+J3shorldy0H3clGH2q
WxHq6JCwc2oQHc+pNpP1bqJp3rQtBhCuqxAMpQXVq9OTS0FTHZk+YtYLyfeWKqYV
JUCKINePSWCECrGmLWAqWVN2Yu038fSRNlGN5f1vtmTKp7RnC1SpgJrJTsY=
-----END CERTIFICATE-----
Generated at Tue Oct 21 04:49:30 2025 by rpki-client