Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/189cda02-e63e-41ac-b055-3f668b5522d4.roa
File: 189cda02-e63e-41ac-b055-3f668b5522d4.roa (raw, json)
Hash identifier: 2douaX0PWTcR56XjBZO++asyhKuYOxAVJtO27l0LMYQ=
Subject key identifier: 34:B4:E5:E1:03:02:BA:2F:7B:DC:F7:88:61:12:AC:C6:01:0A:89:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 352648224D85A288B779B0C2257EA6E737481BCD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/189cda02-e63e-41ac-b055-3f668b5522d4.roa
Signing time: Tue 28 Oct 2025 00:21:21 +0000
ROA not before: Tue 28 Oct 2025 00:21:21 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 204.8.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:26:48:22:4d:85:a2:88:b7:79:b0:c2:25:7e:a6:e7:37:48:1b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:21:21 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=e2505e50b0ec8479c5e7c956a02607985cfa102eb66ee8c62606675fb8e1f896, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:11:2f:3a:b9:6b:8e:da:f9:03:83:6b:7f:
ce:02:c8:83:44:f3:c8:26:5d:69:4b:ce:d2:45:15:
0e:ba:ee:cd:d5:2c:d7:36:d1:c5:9c:df:77:45:c3:
9b:e7:1a:f0:9b:31:59:16:54:6b:6e:42:5c:be:16:
3e:14:b2:18:60:a0:0e:36:79:e2:a1:1b:47:b0:b1:
e7:ef:85:fe:c0:42:72:62:3e:7f:1d:62:75:0c:70:
54:e9:6a:c6:7f:84:d3:ce:cd:0a:70:68:3c:21:99:
17:ee:00:73:d1:67:8c:70:98:0d:61:64:64:66:f0:
2a:c5:fc:be:e1:53:c2:8e:b2:6b:9c:b9:04:4d:b7:
7a:f7:5d:eb:77:46:5a:1a:3f:61:fd:42:82:c9:d6:
c3:2a:43:e6:a6:38:26:37:35:ad:9d:0a:e9:07:4e:
c6:5c:7b:f6:00:74:4b:e8:97:99:bc:3e:af:70:2b:
39:f9:8a:e9:40:36:d8:e5:9e:bb:ee:e0:d7:1f:38:
00:5d:1e:f2:1e:26:47:e4:ff:c2:31:bd:5a:98:8d:
82:c9:07:88:dd:eb:f5:91:05:bf:c1:16:6b:10:9b:
dd:80:ab:43:a0:8f:45:45:19:46:eb:b1:e5:31:da:
b4:7f:06:4e:ba:45:18:7c:16:ad:99:9f:b4:6f:43:
ce:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B4:E5:E1:03:02:BA:2F:7B:DC:F7:88:61:12:AC:C6:01:0A:89:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/189cda02-e63e-41ac-b055-3f668b5522d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.8.120.0/21
Signature Algorithm: sha256WithRSAEncryption
66:62:1b:ea:4e:73:74:bd:fa:ad:f1:9f:32:a1:35:98:5e:b5:
44:ec:90:83:4e:d7:4d:53:2a:45:c8:e5:1c:6f:df:97:f2:a1:
cd:77:a8:72:c8:3a:4d:63:f5:91:4f:57:60:44:19:35:60:59:
49:ee:09:5c:0e:d5:26:b2:67:05:4a:f8:1c:ff:b3:26:56:52:
c3:90:01:ee:f4:b2:93:68:77:97:3b:75:07:da:c2:d3:8f:fd:
f8:94:86:e9:96:64:de:85:52:ed:30:74:80:f0:fc:7d:fd:09:
64:7b:50:90:6b:2c:d3:f9:9a:c2:72:e7:cb:4f:28:97:cd:d4:
81:ed:58:2e:90:16:27:f3:84:a0:74:56:8a:23:37:76:ca:ce:
23:a1:7c:f2:77:c0:bb:cb:3b:a3:f4:86:9f:62:ba:06:f2:8a:
e3:17:ae:bb:2c:b7:67:ba:72:51:be:b3:42:bf:ff:af:17:17:
ff:05:f2:e6:65:f9:af:9f:7b:7f:89:c4:2d:7a:85:1f:3d:e9:
e4:e0:15:13:02:05:00:90:0b:a1:5e:29:07:99:58:70:7e:8b:
af:f4:e4:ad:09:2b:c6:40:40:ef:25:81:0f:58:ce:1c:d4:58:
f4:fd:28:1e:04:3e:25:fd:27:66:d7:db:5f:cb:3c:03:a6:34:
49:82:69:54
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNSZIIk2Fooi3ebDCJX6m5zdIG80wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI4MDAyMTIxWhcNMjUxMjAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMjUwNWU1MGIwZWM4NDc5YzVlN2M5NTZhMDI2MDc5ODVj
ZmExMDJlYjY2ZWU4YzYyNjA2Njc1ZmI4ZTFmODk2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEaREvOrlrjtr5A4Nrf84CyINE88gmXWlLztJFFQ667s3V
LNc20cWc33dFw5vnGvCbMVkWVGtuQly+Fj4UshhgoA42eeKhG0ewsefvhf7AQnJi
Pn8dYnUMcFTpasZ/hNPOzQpwaDwhmRfuAHPRZ4xwmA1hZGRm8CrF/L7hU8KOsmuc
uQRNt3r3Xet3RloaP2H9QoLJ1sMqQ+amOCY3Na2dCukHTsZce/YAdEvol5m8Pq9w
Kzn5iulANtjlnrvu4NcfOABdHvIeJkfk/8IxvVqYjYLJB4jd6/WRBb/BFmsQm92A
q0Ogj0VFGUbrseUx2rR/Bk66RRh8Fq2Zn7RvQ84vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNLTl4QMCui973PeIYRKsxgEKiY0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE4OWNkYTAyLWU2M2UtNDFhYy1iMDU1LTNmNjY4YjU1MjJkNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPMCHgwDQYJKoZIhvcNAQELBQADggEBAGZiG+pOc3S9+q3xnzKhNZhetUTs
kINO101TKkXI5Rxv35fyoc13qHLIOk1j9ZFPV2BEGTVgWUnuCVwO1SayZwVK+Bz/
syZWUsOQAe70spNod5c7dQfawtOP/fiUhumWZN6FUu0wdIDw/H39CWR7UJBrLNP5
msJy58tPKJfN1IHtWC6QFifzhKB0VoojN3bKziOhfPJ3wLvLO6P0hp9iugbyiuMX
rrsst2e6clG+s0K//68XF/8F8uZl+a+fe3+JxC16hR896eTgFRMCBQCQC6FeKQeZ
WHB+i6/05K0JK8ZAQO8lgQ9YzhzUWPT9KB4EPiX9J2bX21/LPAOmNEmCaVQ=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:10 2025 by rpki-client