Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa
File: f242a843-e5ef-4329-a630-1bbe90e85499.roa (raw, json)
Hash identifier: HxmSHE7vLynrah3V92Nw8FnU6KcK6jHODq4ApsvzXl8=
Subject key identifier: 71:CC:60:3A:F3:6B:D6:C9:0C:4E:B5:BA:2C:4C:95:C9:0A:FA:CB:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5714531CAEDD258BB309E2DBB2D69AC06063D1AD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa
Signing time: Sat 18 Oct 2025 05:11:42 +0000
ROA not before: Sat 18 Oct 2025 05:11:42 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 161.178.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:14:53:1c:ae:dd:25:8b:b3:09:e2:db:b2:d6:9a:c0:60:63:d1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 05:11:42 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=1cfd746a38b8258614fbd9900f4879252b62d9b73c9cf9d0dfd86813b6fdf437, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:c6:69:a5:45:d0:a6:b5:bf:08:8e:c7:f5:
29:a7:69:ea:ca:f7:d4:d6:95:e1:05:8a:f6:ab:56:
8c:ee:fd:80:d6:ad:e3:68:03:bb:97:cb:d5:3d:db:
bb:fe:92:3d:bc:89:72:f4:03:a4:b5:bf:1a:b1:1c:
1f:99:43:6b:75:af:91:d2:36:01:b4:00:d2:6a:f0:
ff:e9:0d:7d:5e:ff:e8:dd:e3:b1:64:5a:75:88:bb:
1a:f2:9c:21:49:14:27:ce:64:8d:6e:4a:9d:7a:b1:
23:6f:89:ea:d6:f7:40:08:9b:00:e6:c3:5d:e3:95:
0e:97:2e:07:c6:c3:da:19:e9:28:eb:5e:42:c6:66:
35:ae:24:b5:2b:75:a4:2a:c3:17:fb:31:1d:88:6e:
70:9f:6c:5a:1a:94:72:f0:9f:c4:23:b1:a9:7b:4c:
f9:a5:9c:9c:39:31:20:57:3c:16:41:70:07:e4:95:
dc:6c:4f:51:4e:b3:6d:a2:c2:af:bc:e1:05:35:cc:
23:df:b4:e9:ee:85:6f:28:f0:aa:63:0a:4f:44:96:
6f:99:63:d6:01:81:cb:a2:ac:5b:9c:cc:fa:7c:d1:
3e:0b:e3:a7:0a:d6:3e:55:d4:b7:0a:20:7f:0b:84:
95:3c:d9:d5:f2:06:2f:e5:01:7e:36:80:7f:5a:59:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CC:60:3A:F3:6B:D6:C9:0C:4E:B5:BA:2C:4C:95:C9:0A:FA:CB:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f242a843-e5ef-4329-a630-1bbe90e85499.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.178.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:6a:cd:28:fa:f1:be:18:ab:14:3a:b6:35:df:c6:55:7b:db:
41:da:ff:04:09:72:34:bc:c3:f3:39:83:7b:37:c2:6b:ce:9c:
ea:e7:d9:bb:fa:49:09:52:9c:bd:3d:fa:c3:b2:96:4a:67:e5:
d0:91:da:6c:2f:12:da:1c:8c:7d:c9:be:08:ac:f9:86:a6:0a:
b6:a5:bb:2b:80:92:39:66:8f:65:47:74:31:99:81:48:57:18:
cf:6f:98:fe:de:7d:22:8a:44:93:37:f0:5b:06:d5:3a:06:d2:
8a:44:2d:0d:ec:ff:74:fa:e5:08:5b:47:8b:51:50:cc:a2:fe:
1b:6c:89:12:f5:46:82:72:2d:b2:9f:db:b5:70:e0:6d:36:52:
c7:52:fe:00:07:6e:1d:6d:41:23:c0:9f:f5:99:54:8e:c6:90:
71:8a:94:82:85:20:2f:d3:f0:80:59:62:38:57:58:07:a8:60:
d9:43:98:17:b8:a0:7a:5c:c9:a1:c9:93:2c:a3:59:a6:64:ac:
8b:42:bd:8e:c3:bd:f7:e1:9f:0c:96:a9:d2:c3:8c:08:e5:95:
48:fe:30:bd:3b:15:42:eb:32:d2:e3:b4:67:dc:68:b2:de:fb:
dc:6e:1f:e2:bc:ab:e2:72:fb:21:7b:e9:cc:72:5d:7c:c0:34:
35:0c:11:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVxRTHK7dJYuzCeLbstaawGBj0a0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDUxMTQyWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxY2ZkNzQ2YTM4YjgyNTg2MTRmYmQ5OTAwZjQ4NzkyNTJi
NjJkOWI3M2M5Y2Y5ZDBkZmQ4NjgxM2I2ZmRmNDM3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJxMZppUXQprW/CI7H9SmnaerK99TWleEFivarVozu/YDW
reNoA7uXy9U927v+kj28iXL0A6S1vxqxHB+ZQ2t1r5HSNgG0ANJq8P/pDX1e/+jd
47FkWnWIuxrynCFJFCfOZI1uSp16sSNvierW90AImwDmw13jlQ6XLgfGw9oZ6Sjr
XkLGZjWuJLUrdaQqwxf7MR2IbnCfbFoalHLwn8Qjsal7TPmlnJw5MSBXPBZBcAfk
ldxsT1FOs22iwq+84QU1zCPftOnuhW8o8KpjCk9Elm+ZY9YBgcuirFuczPp80T4L
46cK1j5V1LcKIH8LhJU82dXyBi/lAX42gH9aWeP1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUccxgOvNr1skMTrW6LEyVyQr6y34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YyNDJhODQzLWU1ZWYtNDMyOS1hNjMwLTFiYmU5MGU4NTQ5OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWhsiAwDQYJKoZIhvcNAQELBQADggEBAAxqzSj68b4YqxQ6tjXfxlV720Ha
/wQJcjS8w/M5g3s3wmvOnOrn2bv6SQlSnL09+sOylkpn5dCR2mwvEtocjH3Jvgis
+YamCraluyuAkjlmj2VHdDGZgUhXGM9vmP7efSKKRJM38FsG1ToG0opELQ3s/3T6
5QhbR4tRUMyi/htsiRL1RoJyLbKf27Vw4G02UsdS/gAHbh1tQSPAn/WZVI7GkHGK
lIKFIC/T8IBZYjhXWAeoYNlDmBe4oHpcyaHJkyyjWaZkrItCvY7DvffhnwyWqdLD
jAjllUj+ML07FULrMtLjtGfcaLLe+9xuH+K8q+Jy+yF76cxyXXzANDUMEQg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:34 2025 by rpki-client