Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9236ae-d0ac-4e0b-aaa4-ac9c59b0e7ac.roa
File: af9236ae-d0ac-4e0b-aaa4-ac9c59b0e7ac.roa (raw, json)
Hash identifier: 1NVy5onQzRPwQujZJ9ZotjnOKnXgQc8ufJ/g9cTIbN0=
Subject key identifier: 10:AE:75:F0:71:5F:C9:25:5D:03:A7:76:3F:25:90:22:71:3A:F9:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2077FFCD46BADCAFB5ADA691213323C3E953025E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9236ae-d0ac-4e0b-aaa4-ac9c59b0e7ac.roa
Signing time: Wed 29 Oct 2025 21:21:50 +0000
ROA not before: Wed 29 Oct 2025 21:21:50 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:77:ff:cd:46:ba:dc:af:b5:ad:a6:91:21:33:23:c3:e9:53:02:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 21:21:50 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=ba41acc7fc7880ca7f36f4704732f5797b2f63f3bf937894f9348c4a332995af, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:17:50:94:42:66:a0:45:ad:ee:ac:7e:55:
03:5b:1e:4b:44:9a:98:b6:25:b0:f3:45:b5:be:3c:
72:70:eb:39:45:25:b7:f5:51:c4:7c:67:3a:a3:c7:
be:06:3f:46:55:d7:49:b9:8f:29:69:f4:c1:82:78:
b5:dd:4d:54:f1:e7:b7:a9:4b:22:6a:89:c2:4b:04:
98:82:1f:db:0a:ce:60:a0:73:80:3a:24:fe:e5:32:
c9:ff:27:29:a9:aa:a0:24:b3:c7:cb:97:c0:5a:d6:
62:0d:81:2c:98:d2:c3:75:e9:21:8e:ad:be:d7:35:
8e:30:08:00:9c:48:4a:32:ce:43:59:2f:be:fa:3e:
66:73:46:d0:86:6d:55:f4:0c:c6:39:41:f6:cd:c0:
2c:b4:d9:1c:a4:43:31:a0:66:95:c8:cd:c6:fb:53:
96:76:75:fa:1e:b5:30:31:68:95:ca:a9:34:35:7c:
5c:30:9e:7d:6c:89:2a:24:d1:18:06:14:2a:8a:24:
f9:4b:2c:d2:31:bd:76:33:6a:68:e6:3c:9a:af:d4:
d9:1f:56:c7:73:0f:81:87:2c:58:56:95:64:e4:12:
7e:e1:9e:e1:b8:d6:cf:a2:2a:76:60:5c:11:af:b2:
2c:02:46:1b:0e:89:27:22:4a:1a:24:a9:a4:e0:cf:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:75:F0:71:5F:C9:25:5D:03:A7:76:3F:25:90:22:71:3A:F9:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af9236ae-d0ac-4e0b-aaa4-ac9c59b0e7ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.130.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:9d:70:67:0f:d7:4a:97:bb:3e:c8:18:30:bb:b8:1b:f0:b0:
fd:46:36:96:e4:75:06:4e:d2:70:b2:f6:d2:ad:51:63:f6:0f:
3d:eb:e8:c1:11:d8:df:ff:bc:61:66:93:ea:6f:7a:e0:0e:73:
01:1f:d6:ca:9f:ee:a0:21:79:68:91:00:2f:52:07:ab:a9:e7:
de:6c:79:c7:90:89:03:5b:fb:df:b8:9d:e7:5b:f3:88:a2:77:
57:91:b0:1f:c3:12:54:cb:a5:08:ee:84:3d:02:bb:33:71:af:
e7:2e:0d:df:71:bf:64:7b:00:15:cc:4a:ae:80:33:a3:eb:8a:
65:62:47:23:ac:38:db:72:65:9c:ab:70:e2:35:bc:fb:fd:80:
3f:65:d1:d1:a3:1c:61:fe:a8:cb:33:e2:c2:ec:7e:d1:ac:0a:
27:2f:34:b2:b5:45:ff:5e:67:ba:7b:02:66:2e:eb:cf:0c:3f:
26:38:bf:63:d2:91:7d:ae:b7:95:2c:2d:88:77:57:ee:db:81:
97:07:37:c9:f6:5f:40:09:1a:88:4b:03:c1:77:ee:fb:f0:4e:
6d:14:cd:96:25:aa:da:cd:dd:66:55:e6:95:17:29:95:40:43:
45:c2:91:e0:08:8d:82:11:0b:10:47:d7:fd:f9:70:4d:14:cf:
37:cd:b8:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIHf/zUa63K+1raaRITMjw+lTAl4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDI5MjEyMTUwWhcNMjUxMjAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYTQxYWNjN2ZjNzg4MGNhN2YzNmY0NzA0NzMyZjU3OTdi
MmY2M2YzYmY5Mzc4OTRmOTM0OGM0YTMzMjk5NWFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8oxdQlEJmoEWt7qx+VQNbHktEmpi2JbDzRbW+PHJw6zlF
Jbf1UcR8Zzqjx74GP0ZV10m5jylp9MGCeLXdTVTx57epSyJqicJLBJiCH9sKzmCg
c4A6JP7lMsn/JympqqAks8fLl8Ba1mINgSyY0sN16SGOrb7XNY4wCACcSEoyzkNZ
L776PmZzRtCGbVX0DMY5QfbNwCy02RykQzGgZpXIzcb7U5Z2dfoetTAxaJXKqTQ1
fFwwnn1siSok0RgGFCqKJPlLLNIxvXYzamjmPJqv1NkfVsdzD4GHLFhWlWTkEn7h
nuG41s+iKnZgXBGvsiwCRhsOiSciShokqaTgz/ePAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUEK518HFfySVdA6d2PyWQInE6+dQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FmOTIzNmFlLWQwYWMtNGUwYi1hYWE0LWFjOWM1OWIwZTdhYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGIEoIwDQYJKoZIhvcNAQELBQADggEBAIydcGcP10qXuz7IGDC7uBvwsP1G
NpbkdQZO0nCy9tKtUWP2Dz3r6MER2N//vGFmk+pveuAOcwEf1sqf7qAheWiRAC9S
B6up595seceQiQNb+9+4nedb84iid1eRsB/DElTLpQjuhD0CuzNxr+cuDd9xv2R7
ABXMSq6AM6PrimViRyOsONtyZZyrcOI1vPv9gD9l0dGjHGH+qMsz4sLsftGsCicv
NLK1Rf9eZ7p7AmYu688MPyY4v2PSkX2ut5UsLYh3V+7bgZcHN8n2X0AJGohLA8F3
7vvwTm0UzZYlqtrN3WZV5pUXKZVAQ0XCkeAIjYIRCxBH1/35cE0UzzfNuEw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:40:23 2025 by rpki-client