Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa
File: f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa (raw, json)
Hash identifier: tvnFdA7ZpLh/XOttoFJTiW2Fq8Rfd+pMBsoE9k5S1s4=
Subject key identifier: 88:9C:27:BE:79:1A:34:AF:40:AE:66:53:B7:C8:CD:E6:2B:23:84:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13C0CEA413E083ECC551A56B0F5E4FA9FF48413D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa
Signing time: Sat 18 Oct 2025 04:51:31 +0000
ROA not before: Sat 18 Oct 2025 04:51:31 +0000
ROA not after: Sat 22 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 1.179.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c0:ce:a4:13:e0:83:ec:c5:51:a5:6b:0f:5e:4f:a9:ff:48:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 18 04:51:31 2025 GMT
Not After : Nov 22 23:59:59 2025 GMT
Subject: serialNumber=4f2236dd20d5f4afa24f1d855d2c24cfc898d0e7a2e7dc6becf41c57595cb14b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:d9:ab:6c:c7:22:cb:b7:9f:6c:b5:f1:0d:
a1:9a:07:2b:d0:aa:ee:34:cf:24:cf:e0:14:f9:ab:
cc:3e:20:02:f2:5f:44:a8:d9:30:72:b5:f7:e5:9f:
74:70:dd:2e:83:f8:11:bf:a2:7c:ee:9a:e4:cc:be:
c3:91:a7:df:6f:6c:09:60:2f:9a:19:35:21:1d:0d:
02:42:8a:0c:27:ac:99:2e:d1:2d:46:ac:4b:3e:9f:
c5:bf:3a:dd:68:76:3d:b8:09:45:65:ee:4e:69:94:
21:b1:e9:28:fa:c7:fa:93:02:c3:08:06:10:54:5c:
c0:c5:b6:c5:02:7f:76:48:3f:ab:89:7f:d2:ac:4d:
7c:51:ff:4c:e0:5a:ea:b0:fb:df:1b:e4:6e:52:dd:
37:45:fe:85:77:78:99:2a:a8:60:01:c7:c3:45:45:
65:bd:bc:ce:95:2e:ac:f0:d8:77:c4:bd:ea:f4:b1:
b6:f6:13:a4:1c:3f:45:78:29:db:30:c9:c1:f1:e4:
b7:a9:1c:76:e8:7f:15:1c:0c:53:97:08:fa:68:ac:
23:d8:45:8b:ff:de:25:18:3b:03:dc:eb:5f:a3:f6:
a3:83:e9:74:82:75:82:f2:6c:b3:03:a8:f0:03:46:
3f:39:2c:13:2f:61:bf:8b:39:02:16:92:2a:ea:30:
32:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9C:27:BE:79:1A:34:AF:40:AE:66:53:B7:C8:CD:E6:2B:23:84:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f3245ac3-fa7b-4fd7-a5ab-5d110acbb03f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.179.32.0/21
Signature Algorithm: sha256WithRSAEncryption
10:16:d3:97:a5:f1:fa:09:15:0f:69:ac:66:26:5f:ad:a6:46:
7c:ed:d1:08:e8:15:f1:d1:be:76:10:27:8a:3e:5b:5f:08:ac:
f5:15:aa:e7:b4:7a:a1:68:c2:63:4a:12:5e:c6:fc:0c:7b:5f:
ee:62:5b:3e:d4:0e:78:2f:4d:4d:e6:b8:66:66:4a:58:c1:06:
f0:56:2b:05:3d:15:13:3f:09:0a:75:77:e9:12:d4:b4:c8:f9:
43:b9:9d:a5:61:8f:dc:63:e1:0a:85:38:16:35:fc:11:41:52:
56:b7:73:d6:87:73:11:b2:1a:80:5a:49:6e:f4:81:b1:fa:c0:
91:eb:be:12:bd:19:aa:e7:12:b4:15:bc:b0:f8:03:a3:4d:25:
ed:7b:d5:73:ef:2c:f2:5b:f8:77:2c:ba:48:91:52:15:5e:71:
82:06:14:f9:e9:fe:92:b1:67:f2:bb:5a:e8:9e:c2:2a:53:9a:
87:08:e2:f4:2e:4a:24:15:7c:73:7c:fd:19:15:6a:26:a5:13:
cd:22:6d:fe:7f:59:06:19:cc:75:12:c7:f3:a0:07:c4:6c:7b:
a0:fb:f3:81:58:5b:8a:9f:5f:74:34:05:11:51:7f:aa:b3:b4:
6f:b2:72:26:5a:32:f6:70:a3:40:c9:f4:33:e6:85:b4:ee:8a:
b3:e9:2e:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE8DOpBPgg+zFUaVrD15Pqf9IQT0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE4MDQ1MTMxWhcNMjUxMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A0ZjIyMzZkZDIwZDVmNGFmYTI0ZjFkODU1ZDJjMjRjZmM4
OThkMGU3YTJlN2RjNmJlY2Y0MWM1NzU5NWNiMTRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4PdmrbMciy7efbLXxDaGaByvQqu40zyTP4BT5q8w+IALy
X0So2TBytffln3Rw3S6D+BG/onzumuTMvsORp99vbAlgL5oZNSEdDQJCigwnrJku
0S1GrEs+n8W/Ot1odj24CUVl7k5plCGx6Sj6x/qTAsMIBhBUXMDFtsUCf3ZIP6uJ
f9KsTXxR/0zgWuqw+98b5G5S3TdF/oV3eJkqqGABx8NFRWW9vM6VLqzw2HfEver0
sbb2E6QcP0V4KdswycHx5LepHHbofxUcDFOXCPporCPYRYv/3iUYOwPc61+j9qOD
6XSCdYLybLMDqPADRj85LBMvYb+LOQIWkirqMDIfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUiJwnvnkaNK9ArmZTt8jN5isjhN0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2YzMjQ1YWMzLWZhN2ItNGZkNy1hNWFiLTVkMTEwYWNiYjAzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMBsyAwDQYJKoZIhvcNAQELBQADggEBABAW05el8foJFQ9prGYmX62mRnzt
0QjoFfHRvnYQJ4o+W18IrPUVque0eqFowmNKEl7G/Ax7X+5iWz7UDngvTU3muGZm
SljBBvBWKwU9FRM/CQp1d+kS1LTI+UO5naVhj9xj4QqFOBY1/BFBUla3c9aHcxGy
GoBaSW70gbH6wJHrvhK9GarnErQVvLD4A6NNJe171XPvLPJb+HcsukiRUhVecYIG
FPnp/pKxZ/K7WuiewipTmocI4vQuSiQVfHN8/RkVaialE80ibf5/WQYZzHUSx/Og
B8Rse6D784FYW4qfX3Q0BRFRf6qztG+yciZaMvZwo0DJ9DPmhbTuirPpLlg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:44 2025 by rpki-client