Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92d4826-3ff6-4aac-b251-a0a4277cae3e.roa
File: e92d4826-3ff6-4aac-b251-a0a4277cae3e.roa (raw, json)
Hash identifier: +abChkvltcYfj4wgn43HLCoiW/slUUpnKXYnsKCxnq0=
Subject key identifier: 9E:58:D7:55:E5:75:B1:A5:D1:BC:D1:51:1F:FE:3E:3C:C1:B3:04:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 264751DDFE50057FF265151F321DC9509CC916F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92d4826-3ff6-4aac-b251-a0a4277cae3e.roa
Signing time: Tue 14 Oct 2025 00:41:10 +0000
ROA not before: Tue 14 Oct 2025 00:41:10 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:47:51:dd:fe:50:05:7f:f2:65:15:1f:32:1d:c9:50:9c:c9:16:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:41:10 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=b1fc416bf42e49a1f3bb535e2b82a1589b425a8231106c9cd6d4fd5bb533b0c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:3b:c1:1f:2f:16:d4:81:d6:48:32:c7:69:
0f:89:eb:53:05:40:76:a6:59:94:d4:1b:be:cc:d7:
f9:02:12:35:ee:b9:ac:ec:4e:7c:25:17:3d:7e:29:
41:68:fc:cc:69:f0:ba:ec:52:a4:ad:ba:ff:55:83:
22:05:60:23:d8:a0:41:a1:23:0e:1a:18:df:ec:02:
06:1b:3a:7c:dd:04:28:6c:8e:f3:39:16:41:91:c9:
70:55:a4:8a:59:50:88:0a:a2:b8:60:f4:ad:fd:48:
fe:16:7e:a3:9f:04:c8:5a:8c:fa:50:54:22:c1:23:
86:85:7f:49:99:54:9b:c3:df:bb:e5:dd:a5:11:d3:
e7:07:97:83:74:e8:9a:a7:21:41:ad:85:f5:3f:41:
44:c7:d3:bf:15:a1:3b:8b:d6:bf:39:68:d8:51:3c:
4c:31:73:7f:9d:aa:07:6e:0c:f5:bb:66:bf:cf:79:
af:63:c8:48:2b:fd:2b:39:01:70:44:bf:70:e4:0e:
e6:b5:5a:b6:30:b6:1f:8f:c1:0c:c2:80:39:78:d1:
03:9e:36:15:99:f0:21:21:69:4d:34:ee:77:84:17:
86:ff:33:92:52:79:6e:a5:45:34:b9:5d:fb:45:a3:
79:fb:48:f4:a1:81:16:06:a1:9a:aa:fd:06:1d:20:
12:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:58:D7:55:E5:75:B1:A5:D1:BC:D1:51:1F:FE:3E:3C:C1:B3:04:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e92d4826-3ff6-4aac-b251-a0a4277cae3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.149.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:eb:5d:9e:73:b0:c4:ad:95:b9:54:2b:0d:87:86:8a:69:13:
9e:1b:ee:e5:d6:7a:ca:9f:c4:07:5e:ef:6a:dc:61:3c:8f:85:
bd:21:b9:20:78:c2:24:23:d9:a0:55:90:d8:f6:f4:82:0c:da:
f5:91:19:71:4e:bb:48:00:d3:e5:25:bb:04:43:78:57:8c:17:
99:a9:6a:6a:0a:5b:c9:e8:a7:ea:5b:38:a7:dd:72:55:8c:60:
3e:fb:ff:bb:41:6d:fa:ec:25:21:74:1b:88:d0:ef:8f:ae:b8:
db:67:5c:60:41:de:4a:d8:28:70:71:bd:5f:a1:ab:87:da:27:
cd:0b:8e:c1:19:40:61:77:7a:95:87:71:fa:fa:96:3e:c7:01:
aa:bb:30:34:e0:63:73:e3:52:b8:a5:08:2d:f1:55:9a:38:0d:
a1:13:e3:72:02:27:67:b5:55:1f:d5:f6:57:13:fb:fe:a1:94:
df:fb:bc:7c:91:22:30:02:a9:65:6d:41:4c:96:fa:03:e3:46:
58:db:9c:c0:12:3a:35:32:e1:4f:6b:93:7a:46:9d:c9:f7:a1:
fe:12:f5:60:69:e5:72:23:03:2f:d4:4b:0b:73:0e:15:6e:ab:
d5:67:1e:54:ef:c7:7b:d5:2e:f5:9e:46:cc:3d:44:cd:f6:5e:
c6:88:82:93
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJkdR3f5QBX/yZRUfMh3JUJzJFvQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDA0MTEwWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiMWZjNDE2YmY0MmU0OWExZjNiYjUzNWUyYjgyYTE1ODli
NDI1YTgyMzExMDZjOWNkNmQ0ZmQ1YmI1MzNiMGMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZ5jvBHy8W1IHWSDLHaQ+J61MFQHamWZTUG77M1/kCEjXu
uazsTnwlFz1+KUFo/Mxp8LrsUqStuv9VgyIFYCPYoEGhIw4aGN/sAgYbOnzdBChs
jvM5FkGRyXBVpIpZUIgKorhg9K39SP4WfqOfBMhajPpQVCLBI4aFf0mZVJvD37vl
3aUR0+cHl4N06JqnIUGthfU/QUTH078VoTuL1r85aNhRPEwxc3+dqgduDPW7Zr/P
ea9jyEgr/Ss5AXBEv3DkDua1WrYwth+PwQzCgDl40QOeNhWZ8CEhaU007neEF4b/
M5JSeW6lRTS5XftFo3n7SPShgRYGoZqq/QYdIBLRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnljXVeV1saXRvNFRH/4+PMGzBDowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U5MmQ0ODI2LTNmZjYtNGFhYy1iMjUxLWEwYTQyNzdjYWUzZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsJUwDQYJKoZIhvcNAQELBQADggEBAMrrXZ5zsMStlblUKw2HhoppE54b
7uXWesqfxAde72rcYTyPhb0huSB4wiQj2aBVkNj29IIM2vWRGXFOu0gA0+UluwRD
eFeMF5mpamoKW8nop+pbOKfdclWMYD77/7tBbfrsJSF0G4jQ74+uuNtnXGBB3krY
KHBxvV+hq4faJ80LjsEZQGF3epWHcfr6lj7HAaq7MDTgY3PjUrilCC3xVZo4DaET
43ICJ2e1VR/V9lcT+/6hlN/7vHyRIjACqWVtQUyW+gPjRljbnMASOjUy4U9rk3pG
ncn3of4S9WBp5XIjAy/USwtzDhVuq9VnHlTvx3vVLvWeRsw9RM32XsaIgpM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:42 2025 by rpki-client