Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa
File: 98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa (raw, json)
Hash identifier: w+FAk3gmVY1YHt/2YceMDTaFl2Ww5fHZfoC64UOKySs=
Subject key identifier: AA:B3:A3:49:AC:17:9C:38:47:EB:EB:C3:23:5B:EC:B9:6A:00:18:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 509E3B6688EB9AA2955988DF768F7F81FA5C757B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa
Signing time: Wed 05 Nov 2025 00:20:12 +0000
ROA not before: Wed 05 Nov 2025 00:20:12 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 124.24.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:9e:3b:66:88:eb:9a:a2:95:59:88:df:76:8f:7f:81:fa:5c:75:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:20:12 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=634b814b15165061704478ac237bd455c68655465ba8d32fbf69709cdde9b2c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:eb:89:de:6a:f3:a9:9e:38:82:bd:de:3d:39:
66:97:ed:27:43:ec:2b:ce:60:2c:dc:f1:7e:82:20:
8e:e4:88:fe:f4:15:1e:6d:8f:40:89:5b:f6:dc:b0:
76:52:aa:e5:ce:eb:a8:2d:16:ff:d0:17:34:3f:80:
68:62:a0:35:b8:e9:37:b2:ca:f8:b1:91:44:91:0b:
d2:e0:ad:27:75:94:e9:f1:ac:8d:dc:38:e4:34:58:
13:e7:59:c4:a4:ac:a7:ab:77:2f:28:72:27:e5:bb:
31:0c:7e:0c:fc:72:7d:b4:6a:a3:a3:0f:ea:11:61:
c8:0b:57:48:5c:80:c1:cb:e1:c9:bc:0e:fd:45:80:
02:3c:7e:4d:a8:64:ad:c6:b4:7f:09:45:44:81:7d:
dc:2d:17:87:db:47:08:40:2f:49:5d:15:7b:21:91:
c2:59:3d:83:55:cd:10:16:2c:fa:9c:fb:b6:02:81:
ad:5c:b7:4c:0c:e8:63:f5:43:2f:fa:2d:ea:ef:cb:
64:a4:4c:17:bf:10:dc:18:c3:d0:37:9d:de:b9:68:
49:78:aa:77:7b:ec:2c:27:d2:23:fe:a3:fb:a7:89:
dd:ac:8a:1a:9c:c3:17:06:7f:73:98:d9:97:bc:9c:
8a:9f:bc:9e:3a:a5:b8:c3:4e:58:87:29:22:46:4d:
0e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:A3:49:AC:17:9C:38:47:EB:EB:C3:23:5B:EC:B9:6A:00:18:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/98b5bff1-41c4-4141-92fb-20e5d8600f7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.24.192.0/18
Signature Algorithm: sha256WithRSAEncryption
03:69:ab:6f:96:05:1c:45:0f:0e:f5:f5:44:26:82:93:c1:b2:
48:ef:0a:5f:d1:98:89:16:0b:be:65:1c:5f:19:35:b4:54:02:
5e:b0:0a:89:e5:87:8a:d6:c2:3f:81:5a:9e:d6:32:04:10:c5:
79:0e:d1:0e:8e:93:0f:aa:46:79:c8:98:15:53:7a:f0:2a:cd:
b6:52:ac:8c:e4:a9:5a:61:2b:56:16:9f:d7:60:e6:f8:6e:4e:
1d:32:ee:46:b2:70:2f:c0:65:6e:a4:32:e9:f0:c8:3a:28:bd:
3a:97:28:9d:ce:ab:18:f7:cd:93:68:a8:e3:91:1e:14:5a:ee:
3f:37:0c:62:68:81:38:6e:b3:95:8c:c8:59:91:dc:ab:b0:fb:
9a:3a:24:03:97:1c:9a:ab:fd:cf:18:d8:6b:48:f2:3f:c2:a4:
1f:f8:53:13:91:22:d3:2d:51:f1:26:0c:fd:a9:76:cb:53:f7:
86:b0:e8:15:c4:33:78:55:59:ac:e8:b3:eb:c2:44:02:92:f2:
06:a8:fa:9a:c7:d3:1c:27:20:80:15:90:ff:85:04:24:05:03:
d4:d0:83:96:e1:bd:79:e3:d1:11:4a:87:d5:c7:a0:8b:89:f5:
19:f3:16:b7:3b:09:1b:ac:41:67:6e:4a:ce:0d:91:f1:94:0b:
25:ad:d1:1c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUJ47ZojrmqKVWYjfdo9/gfpcdXswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA1MDAyMDEyWhcNMjUxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MzRiODE0YjE1MTY1MDYxNzA0NDc4YWMyMzdiZDQ1NWM2
ODY1NTQ2NWJhOGQzMmZiZjY5NzA5Y2RkZTliMmMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDb64neavOpnjiCvd49OWaX7SdD7CvOYCzc8X6CII7kiP70
FR5tj0CJW/bcsHZSquXO66gtFv/QFzQ/gGhioDW46TeyyvixkUSRC9LgrSd1lOnx
rI3cOOQ0WBPnWcSkrKerdy8ocifluzEMfgz8cn20aqOjD+oRYcgLV0hcgMHL4cm8
Dv1FgAI8fk2oZK3GtH8JRUSBfdwtF4fbRwhAL0ldFXshkcJZPYNVzRAWLPqc+7YC
ga1ct0wM6GP1Qy/6Lervy2SkTBe/ENwYw9A3nd65aEl4qnd77Cwn0iP+o/unid2s
ihqcwxcGf3OY2Ze8nIqfvJ46pbjDTliHKSJGTQ6/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqrOjSawXnDhH6+vDI1vsuWoAGIQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk4YjViZmYxLTQxYzQtNDE0MS05MmZiLTIwZTVkODYwMGY3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZ8GMAwDQYJKoZIhvcNAQELBQADggEBAANpq2+WBRxFDw719UQmgpPBskjv
Cl/RmIkWC75lHF8ZNbRUAl6wConlh4rWwj+BWp7WMgQQxXkO0Q6Okw+qRnnImBVT
evAqzbZSrIzkqVphK1YWn9dg5vhuTh0y7kaycC/AZW6kMunwyDoovTqXKJ3Oqxj3
zZNoqOORHhRa7j83DGJogThus5WMyFmR3Kuw+5o6JAOXHJqr/c8Y2GtI8j/CpB/4
UxORItMtUfEmDP2pdstT94aw6BXEM3hVWazos+vCRAKS8gao+prH0xwnIIAVkP+F
BCQFA9TQg5bhvXnj0RFKh9XHoIuJ9RnzFrc7CRusQWduSs4NkfGUCyWt0Rw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:49:25 2025 by rpki-client