Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa
File: 86928c79-5b49-45a0-867b-64a68ed13bd7.roa (raw, json)
Hash identifier: rj1Qy70CHigqvqPuPNC5XdiOiqClh+oTL5FpRnvbJjc=
Subject key identifier: 32:F2:5A:A7:76:BD:19:F1:7D:D8:DD:6E:A2:37:3D:44:CA:B6:C0:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E4F072304807E5B598D3E99EF1279153FE22844
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa
Signing time: Fri 31 Oct 2025 00:00:21 +0000
ROA not before: Fri 31 Oct 2025 00:00:21 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 50.19.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4f:07:23:04:80:7e:5b:59:8d:3e:99:ef:12:79:15:3f:e2:28:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:00:21 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=690fa615b0a14a090b4862e77ebf01f07c261ad67be0b7ce6e7c7e368033b977, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:24:7f:06:a8:44:34:a5:08:39:a8:6d:45:
2b:2c:ad:70:7d:01:4c:45:13:4f:a2:a5:ed:b7:21:
5c:56:0d:bb:22:01:06:ef:41:f0:3b:40:e6:15:c8:
ac:5d:b6:4d:5e:e5:a2:79:61:bb:a8:26:8a:b0:15:
e9:be:c1:00:f7:72:1c:94:c0:43:7f:76:e5:c6:f8:
7f:f8:62:3a:d7:b5:11:6a:91:d5:0d:5f:21:d4:f1:
ae:cf:78:3f:2d:5c:cf:c0:77:5d:53:5e:da:ed:24:
65:85:13:be:31:93:d5:04:a0:0b:26:85:1c:e4:44:
cc:ed:0f:cd:01:fd:cb:01:12:ff:45:c5:da:a2:21:
75:b2:e8:8f:2f:12:20:45:f8:80:13:5f:be:e9:70:
49:40:16:9c:20:c4:d6:fb:1f:df:da:d6:2f:36:5b:
61:97:59:c9:7c:8f:f7:3c:18:16:60:78:c5:73:01:
5b:e4:44:b1:90:1b:61:32:a5:c8:c7:08:18:7d:3e:
1a:1e:11:ab:2f:d3:6f:6f:f4:13:5c:7e:32:dd:73:
8b:d9:f3:06:b6:12:cb:07:48:8f:ce:05:1a:a2:ee:
db:c4:46:72:52:60:69:12:2b:79:28:bd:52:35:78:
70:9a:7c:82:cc:24:33:26:2a:08:d7:d1:28:59:50:
7a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:5A:A7:76:BD:19:F1:7D:D8:DD:6E:A2:37:3D:44:CA:B6:C0:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:a8:14:81:d3:87:7a:ca:93:28:9c:b6:35:be:da:a5:7b:0e:
14:2d:2c:51:1e:47:5c:4e:42:01:43:02:ff:d9:19:14:55:19:
cc:4e:24:c2:20:6d:1c:32:bd:3c:f5:e9:da:21:56:a6:19:4d:
b4:1f:d7:84:79:6d:ef:c4:5e:49:0f:d3:d4:b6:d4:68:79:a2:
69:7a:51:54:8e:17:5e:8f:e4:dc:2f:8c:c7:1b:5e:60:54:fc:
2c:54:f1:57:76:96:b5:1a:23:61:4f:65:f9:79:0c:e3:a5:df:
43:45:5f:47:f3:14:5a:55:f7:da:20:16:91:1e:7c:d0:35:a9:
af:da:5d:a4:ee:2a:be:ff:ed:8e:4c:34:28:8a:22:77:2e:71:
4e:b0:3a:c5:6b:4d:68:ce:d1:9d:19:89:2f:c9:b6:cd:f6:75:
b5:38:10:b2:82:8c:1a:4b:82:3f:60:21:7d:7e:97:10:8c:c3:
84:e6:b5:f1:5b:32:88:a3:b5:27:17:59:2d:e1:a0:ca:97:9b:
68:80:30:57:83:a8:2c:23:0f:ec:54:ac:fd:46:0f:79:0a:55:
c3:bf:59:59:11:c9:c6:49:13:ad:08:94:46:47:6f:12:f2:e5:
10:3e:b8:e2:8f:e6:3b:1b:a3:f8:d3:cd:f7:04:f0:64:7c:23:
eb:9c:8f:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHk8HIwSAfltZjT6Z7xJ5FT/iKEQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDAwMDIxWhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OTBmYTYxNWIwYTE0YTA5MGI0ODYyZTc3ZWJmMDFmMDdj
MjYxYWQ2N2JlMGI3Y2U2ZTdjN2UzNjgwMzNiOTc3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/USR/BqhENKUIOahtRSssrXB9AUxFE0+ipe23IVxWDbsi
AQbvQfA7QOYVyKxdtk1e5aJ5YbuoJoqwFem+wQD3chyUwEN/duXG+H/4YjrXtRFq
kdUNXyHU8a7PeD8tXM/Ad11TXtrtJGWFE74xk9UEoAsmhRzkRMztD80B/csBEv9F
xdqiIXWy6I8vEiBF+IATX77pcElAFpwgxNb7H9/a1i82W2GXWcl8j/c8GBZgeMVz
AVvkRLGQG2EypcjHCBh9PhoeEasv029v9BNcfjLdc4vZ8wa2EssHSI/OBRqi7tvE
RnJSYGkSK3kovVI1eHCafILMJDMmKgjX0ShZUHprAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMvJap3a9GfF92N1uojc9RMq2wHQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg2OTI4Yzc5LTViNDktNDVhMC04NjdiLTY0YTY4ZWQxM2JkNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQyE9AwDQYJKoZIhvcNAQELBQADggEBALqoFIHTh3rKkyictjW+2qV7DhQt
LFEeR1xOQgFDAv/ZGRRVGcxOJMIgbRwyvTz16dohVqYZTbQf14R5be/EXkkP09S2
1Gh5oml6UVSOF16P5NwvjMcbXmBU/CxU8Vd2lrUaI2FPZfl5DOOl30NFX0fzFFpV
99ogFpEefNA1qa/aXaTuKr7/7Y5MNCiKIncucU6wOsVrTWjO0Z0ZiS/Jts32dbU4
ELKCjBpLgj9gIX1+lxCMw4TmtfFbMoijtScXWS3hoMqXm2iAMFeDqCwjD+xUrP1G
D3kKVcO/WVkRycZJE60IlEZHbxLy5RA+uOKP5jsbo/jTzfcE8GR8I+ucj4k=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:34 2025 by rpki-client