Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
File: 1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json)
Hash identifier: iXtoj/Lkiwo7hpN9I9PaRhyDnjSwnb/fj6CzLFGISZk=
Subject key identifier: 87:96:F6:DC:46:DD:57:1C:27:0F:73:7B:CC:AE:0D:B0:60:73:D6:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 745BF25CE4488B54A5B46A61D35E4FC682EB1E1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
Signing time: Sun 02 Nov 2025 00:30:42 +0000
ROA not before: Sun 02 Nov 2025 00:30:42 +0000
ROA not after: Sun 07 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5b:f2:5c:e4:48:8b:54:a5:b4:6a:61:d3:5e:4f:c6:82:eb:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 2 00:30:42 2025 GMT
Not After : Dec 7 23:59:59 2025 GMT
Subject: serialNumber=25a95c7c20a3304599ee4a69f2e0138df7a9d49ee33c8268c3a08876672f8114, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:66:c1:33:d6:fa:65:e2:f4:67:e9:da:04:
e9:c5:6c:cf:98:a3:ec:78:0b:aa:d7:8d:2f:0c:0d:
fb:2f:a1:30:69:7d:87:b4:1c:eb:5a:7b:3b:c8:17:
e8:7b:7e:ef:77:81:7b:c4:fa:cf:9d:e3:61:e1:50:
1d:8b:23:0c:5c:90:58:89:22:5d:5c:9d:50:ab:70:
80:f0:64:d0:51:06:1c:8c:d3:0c:54:b0:ca:84:e4:
51:6a:47:f7:87:42:a0:7b:f5:2f:16:02:48:25:29:
fc:8c:06:53:b2:37:ed:cf:d3:79:47:61:ba:91:bc:
61:4a:52:a5:e1:ab:a6:38:00:8e:fa:b3:f6:59:e8:
0f:e5:79:52:62:b7:b4:5b:4a:50:e5:91:87:d8:f8:
b7:d1:03:4d:ce:ab:cb:8d:8c:81:7e:80:bc:b8:83:
9a:01:b0:e2:25:52:56:7f:7f:b1:58:ac:b8:74:f0:
a3:0b:ee:ec:a9:04:98:c4:8c:4e:85:14:b1:bf:7a:
05:e5:9a:1e:ac:23:92:75:96:13:33:0c:47:51:75:
93:d0:0b:c8:13:24:0d:11:29:4f:95:f9:d2:cc:9a:
f8:48:4e:37:85:1b:71:f4:ba:5f:9e:19:e8:d2:fb:
d8:9c:f9:b3:32:d9:a5:fa:46:ea:8e:b8:3c:12:cf:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:96:F6:DC:46:DD:57:1C:27:0F:73:7B:CC:AE:0D:B0:60:73:D6:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.188.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2d:be:bb:a2:5b:18:42:9b:47:3e:31:7a:3d:64:7d:73:dc:
55:66:af:66:e2:65:99:5c:92:ed:36:85:1a:b3:59:46:b6:4d:
96:c9:de:89:3b:a9:6f:9d:9e:44:7e:79:78:90:c5:31:0f:e7:
68:20:19:36:2a:2b:49:ac:f7:02:56:bf:e7:c4:37:69:46:c9:
9d:d7:88:02:60:3f:19:be:87:d5:d9:45:5e:19:3d:e8:03:74:
05:27:59:de:73:19:3e:55:1a:02:f1:7d:63:73:12:d0:68:52:
b4:af:df:9a:e9:4c:8b:45:e1:3c:b3:7a:77:f1:04:a2:03:a6:
41:d0:49:dc:2e:52:73:bf:40:90:8d:e3:1b:5f:e4:63:96:14:
c9:e4:9b:90:2d:93:fb:1c:fd:01:c9:74:40:1d:b0:06:8c:93:
32:e2:b5:03:64:47:41:1e:ee:1d:13:07:7d:b7:a0:0d:62:92:
24:73:98:87:a2:70:8d:f0:ec:bb:10:f4:c1:70:18:e7:17:fc:
0d:db:f1:c0:3b:25:c7:d1:0e:85:fe:10:1a:44:50:31:ad:69:
32:c5:5f:e8:cc:d9:ba:d1:ae:58:5a:d8:7f:8f:33:f1:39:96:
b5:0f:e9:80:d8:9d:80:a7:f8:5a:6b:04:8f:d3:cb:4f:79:b0:
6e:9b:e6:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdFvyXORIi1SltGph015PxoLrHh8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTAyMDAzMDQyWhcNMjUxMjA3MjM1OTU5
WjB6MUkwRwYDVQQFE0AyNWE5NWM3YzIwYTMzMDQ1OTllZTRhNjlmMmUwMTM4ZGY3
YTlkNDllZTMzYzgyNjhjM2EwODg3NjY3MmY4MTE0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHg2bBM9b6ZeL0Z+naBOnFbM+Yo+x4C6rXjS8MDfsvoTBp
fYe0HOtaezvIF+h7fu93gXvE+s+d42HhUB2LIwxckFiJIl1cnVCrcIDwZNBRBhyM
0wxUsMqE5FFqR/eHQqB79S8WAkglKfyMBlOyN+3P03lHYbqRvGFKUqXhq6Y4AI76
s/ZZ6A/leVJit7RbSlDlkYfY+LfRA03Oq8uNjIF+gLy4g5oBsOIlUlZ/f7FYrLh0
8KML7uypBJjEjE6FFLG/egXlmh6sI5J1lhMzDEdRdZPQC8gTJA0RKU+V+dLMmvhI
TjeFG3H0ul+eGejS+9ic+bMy2aX6RuqOuDwSz6D3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUh5b23EbdVxwnD3N7zK4NsGBz1hgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFmNDcwMTYwLTBmM2QtNGM1YS1hNzVmLTg3NDBmMjAwN2UyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjl7wwDQYJKoZIhvcNAQELBQADggEBAIgtvruiWxhCm0c+MXo9ZH1z3FVm
r2biZZlcku02hRqzWUa2TZbJ3ok7qW+dnkR+eXiQxTEP52ggGTYqK0ms9wJWv+fE
N2lGyZ3XiAJgPxm+h9XZRV4ZPegDdAUnWd5zGT5VGgLxfWNzEtBoUrSv35rpTItF
4TyzenfxBKIDpkHQSdwuUnO/QJCN4xtf5GOWFMnkm5Atk/sc/QHJdEAdsAaMkzLi
tQNkR0Ee7h0TB323oA1ikiRzmIeicI3w7LsQ9MFwGOcX/A3b8cA7JcfRDoX+EBpE
UDGtaTLFX+jM2brRrlha2H+PM/E5lrUP6YDYnYCn+FprBI/Ty095sG6b5ig=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:01 2025 by rpki-client