Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0b082cc-6f0b-4d57-b515-3322e8ae010d.roa
File: e0b082cc-6f0b-4d57-b515-3322e8ae010d.roa (raw, json)
Hash identifier: +Ornq1Q2DKmXnttcQNjPT6wr93FHI26xFZrqV/t5fq4=
Subject key identifier: 45:EB:BF:BF:FB:93:27:77:3C:CB:1D:3E:DF:69:51:4A:A4:13:4D:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 649EBEA0E95C79335EFA4B33E044F609F0FCA8E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0b082cc-6f0b-4d57-b515-3322e8ae010d.roa
Signing time: Tue 14 Oct 2025 15:42:58 +0000
ROA not before: Tue 14 Oct 2025 15:42:58 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9e:be:a0:e9:5c:79:33:5e:fa:4b:33:e0:44:f6:09:f0:fc:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 15:42:58 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=dc4d3c986e348a32a9d2fd894092a0c5c6ba69303eec377397076275fed6023e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:96:e5:73:8b:7f:49:e4:cd:82:8a:ef:df:dc:
11:d6:b5:17:d6:7e:13:52:2c:2b:68:7b:a7:a6:85:
51:a0:b9:98:5e:ce:8e:87:38:4c:09:9f:2c:97:8d:
12:bf:14:7f:34:bf:55:18:38:ee:46:4f:77:c5:1c:
c1:5f:1c:c2:09:19:a5:c2:f0:b0:44:15:bd:17:41:
de:52:2a:10:45:3c:e1:a3:c7:90:ba:cc:c4:aa:43:
04:64:cc:0f:13:2c:1f:e5:d8:f5:c5:7c:5b:e3:84:
8b:19:0a:55:c5:0e:72:ac:31:1f:90:70:03:25:d0:
ef:a4:36:c9:9d:b5:50:f9:e2:77:d4:3d:23:79:15:
98:af:4b:49:d6:ae:11:a5:7b:22:07:82:3c:a2:c0:
ae:5b:18:6c:4e:27:df:93:61:0a:e8:5a:ec:8e:c2:
10:64:aa:e7:20:28:35:0d:3d:1e:fe:f8:a1:3f:d2:
fa:70:a7:ff:03:4f:b9:32:79:9d:c5:74:2d:e9:dd:
f1:56:5a:98:3a:9a:ad:de:57:a3:18:86:40:e1:2b:
2f:b6:06:15:19:1c:cf:94:28:02:71:2f:8a:67:e7:
e7:a5:38:fb:f9:ae:16:36:57:b4:b9:e4:24:5b:6a:
89:54:65:62:18:ed:51:42:34:98:de:0e:6a:f5:01:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EB:BF:BF:FB:93:27:77:3C:CB:1D:3E:DF:69:51:4A:A4:13:4D:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0b082cc-6f0b-4d57-b515-3322e8ae010d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
c7:17:7d:af:05:45:a9:76:62:ba:68:25:e9:3c:af:00:16:5d:
23:cb:f8:52:f5:09:ec:d0:e6:80:db:4c:6d:fc:25:c0:4e:33:
57:af:ac:69:a9:8a:8e:61:04:c2:8c:5c:36:b8:5a:03:b5:dd:
af:a0:62:96:ad:e4:5b:46:6a:e5:fa:e3:a6:30:54:56:f6:44:
3e:39:40:8e:bf:7c:ce:87:69:90:59:c7:07:fe:5a:f9:1e:f3:
32:46:82:b2:a3:c0:3a:55:c2:47:63:10:fe:d5:5f:08:f5:2e:
37:24:7b:01:c7:6e:ea:61:48:51:42:49:cb:1c:fb:54:e5:b3:
2e:c2:3a:bc:f8:f8:51:f3:56:c0:00:b1:91:9c:38:68:27:35:
32:8d:4f:77:5c:5f:d2:5e:58:fb:83:05:ad:ca:c3:80:e4:7a:
a6:1e:14:60:56:c2:3d:40:b6:f5:e8:94:f8:4a:ad:d4:c1:56:
d0:d3:dc:af:0c:b8:a3:46:31:db:4f:6d:1b:f2:73:74:bd:7c:
e2:95:0c:ad:c3:7d:9e:73:3f:8a:46:2e:3a:2d:9e:b6:83:0d:
57:a9:70:76:8f:22:a6:24:c2:dc:8f:17:0d:d3:cc:a8:70:5e:
98:7f:25:a4:d1:1b:da:f2:2b:4d:c8:a7:3e:ac:e0:80:8d:82:
59:66:da:bb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZJ6+oOlceTNe+ksz4ET2CfD8qOQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTU0MjU4WhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYzRkM2M5ODZlMzQ4YTMyYTlkMmZkODk0MDkyYTBjNWM2
YmE2OTMwM2VlYzM3NzM5NzA3NjI3NWZlZDYwMjNlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrluVzi39J5M2Ciu/f3BHWtRfWfhNSLCtoe6emhVGguZhe
zo6HOEwJnyyXjRK/FH80v1UYOO5GT3fFHMFfHMIJGaXC8LBEFb0XQd5SKhBFPOGj
x5C6zMSqQwRkzA8TLB/l2PXFfFvjhIsZClXFDnKsMR+QcAMl0O+kNsmdtVD54nfU
PSN5FZivS0nWrhGleyIHgjyiwK5bGGxOJ9+TYQroWuyOwhBkqucgKDUNPR7++KE/
0vpwp/8DT7kyeZ3FdC3p3fFWWpg6mq3eV6MYhkDhKy+2BhUZHM+UKAJxL4pn5+el
OPv5rhY2V7S55CRbaolUZWIY7VFCNJjeDmr1AR15AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUReu/v/uTJ3c8yx0+32lRSqQTTXMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2UwYjA4MmNjLTZmMGItNGQ1Ny1iNTE1LTMzMjJlOGFlMDEwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKCsIwwDQYJKoZIhvcNAQELBQADggEBAMcXfa8FRal2YrpoJek8rwAWXSPL
+FL1CezQ5oDbTG38JcBOM1evrGmpio5hBMKMXDa4WgO13a+gYpat5FtGauX646Yw
VFb2RD45QI6/fM6HaZBZxwf+Wvke8zJGgrKjwDpVwkdjEP7VXwj1LjckewHHbuph
SFFCScsc+1Tlsy7COrz4+FHzVsAAsZGcOGgnNTKNT3dcX9JeWPuDBa3Kw4DkeqYe
FGBWwj1AtvXolPhKrdTBVtDT3K8MuKNGMdtPbRvyc3S9fOKVDK3DfZ5zP4pGLjot
nraDDVepcHaPIqYkwtyPFw3TzKhwXph/JaTRG9ryK03Ipz6s4ICNgllm2rs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:43 2025 by rpki-client