Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa
File: bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa (raw, json)
Hash identifier: gj04CbndroMqXzARTb6xv9b527oWdXxbAcrGzPLa6xE=
Subject key identifier: 23:22:CF:46:5F:78:9E:B3:D2:50:45:A0:E0:F2:CD:F5:F3:B1:2D:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09EB8304C1E9E5C2480253A7A5B84C4C0A76F5E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa
Signing time: Fri 31 Oct 2025 00:10:05 +0000
ROA not before: Fri 31 Oct 2025 00:10:05 +0000
ROA not after: Fri 05 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 143.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:eb:83:04:c1:e9:e5:c2:48:02:53:a7:a5:b8:4c:4c:0a:76:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 31 00:10:05 2025 GMT
Not After : Dec 5 23:59:59 2025 GMT
Subject: serialNumber=2f4ba6ace4b7b478d37d750c80ccba8a15e2417355e7a8333d8e0c1d9ba4a34c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:26:eb:8c:72:ca:cb:5b:25:3b:3d:9a:ed:
1f:52:8d:ad:9f:43:4a:29:58:97:c7:7d:64:a7:8c:
54:05:46:48:e2:07:f5:7d:4b:e3:30:87:8f:da:ea:
9d:ee:03:1e:87:73:cb:6b:74:5f:57:bd:bf:6d:9c:
a4:2c:76:7c:51:2e:f4:82:66:80:33:64:1d:05:b5:
a4:b2:c2:65:cc:7f:e4:0c:fd:6c:98:c4:b6:60:62:
80:1f:a9:2c:9b:23:96:3f:6d:7f:b9:e5:b3:f8:a5:
76:fb:8f:2d:9e:a3:ea:3c:6a:c7:79:36:9d:75:d6:
46:48:5a:98:6f:f7:ea:86:bd:b8:a4:a7:b5:20:b6:
6c:4b:1c:6f:a3:c4:79:2d:f0:40:59:ac:2a:6f:50:
52:47:2b:f8:6f:c7:14:b0:eb:1c:8b:e9:83:f6:50:
7f:97:40:c8:fa:6e:94:e1:d0:ed:f1:97:31:69:fb:
2d:e2:cd:68:11:1d:ac:93:c9:a5:14:79:88:ba:08:
7c:33:1a:56:b6:47:82:d7:e0:c3:16:df:03:45:aa:
43:95:7a:ab:d6:9f:09:4d:18:b6:cb:0f:e0:cc:c2:
70:f2:48:4d:0f:d4:bc:10:a7:fc:1b:0d:40:73:2a:
37:7c:22:59:51:51:65:65:8b:b3:33:88:7d:89:04:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:CF:46:5F:78:9E:B3:D2:50:45:A0:E0:F2:CD:F5:F3:B1:2D:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd1f1c8a-4c90-4331-a39c-570f7b79ad54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:70:42:7e:20:89:4c:e5:ad:8b:eb:f5:b8:82:b7:95:6e:a3:
5e:2d:f1:d1:52:92:2f:bc:ef:1c:20:8f:93:97:61:61:88:c7:
3f:ea:3e:1d:80:15:fd:73:3d:75:78:f9:58:bc:a4:54:a2:26:
77:94:7c:79:0f:34:9d:b7:6a:e7:e6:e9:b9:84:82:5e:d0:48:
9c:c3:d7:11:5d:66:58:36:ec:d3:1f:14:a2:f7:74:61:df:fe:
1e:62:95:aa:e6:85:82:89:7f:b0:49:e6:f8:20:36:b8:0d:a7:
4f:9a:ad:66:be:bb:17:1a:24:a3:ae:20:e3:02:e2:10:e4:67:
45:b3:d2:60:6a:30:00:03:57:38:87:30:7f:f0:be:e7:09:b4:
17:58:25:81:8a:a5:e0:9e:af:8f:33:6d:39:41:f9:a3:20:d6:
3e:13:8b:ed:f7:f9:5c:1c:0f:72:95:fb:f8:5d:e3:6e:0c:7b:
ba:73:41:c5:cb:8d:09:ed:9b:78:e9:5c:cb:f5:ef:b9:04:a6:
c7:2a:56:2b:9f:33:eb:d8:3c:ae:bc:0a:44:9f:a6:28:44:24:
f0:3f:48:bd:ae:d8:42:50:4d:f8:6b:58:e8:2e:6b:b9:d4:3a:
fa:2b:42:23:02:1f:9d:e6:8b:da:fa:d7:e6:e7:ec:44:d1:a8:
58:5a:6e:e2
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCeuDBMHp5cJIAlOnpbhMTAp29eUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDMxMDAxMDA1WhcNMjUxMjA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZjRiYTZhY2U0YjdiNDc4ZDM3ZDc1MGM4MGNjYmE4YTE1
ZTI0MTczNTVlN2E4MzMzZDhlMGMxZDliYTRhMzRjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsNSbrjHLKy1slOz2a7R9Sja2fQ0opWJfHfWSnjFQFRkji
B/V9S+Mwh4/a6p3uAx6Hc8trdF9Xvb9tnKQsdnxRLvSCZoAzZB0FtaSywmXMf+QM
/WyYxLZgYoAfqSybI5Y/bX+55bP4pXb7jy2eo+o8asd5Np111kZIWphv9+qGvbik
p7UgtmxLHG+jxHkt8EBZrCpvUFJHK/hvxxSw6xyL6YP2UH+XQMj6bpTh0O3xlzFp
+y3izWgRHayTyaUUeYi6CHwzGla2R4LX4MMW3wNFqkOVeqvWnwlNGLbLD+DMwnDy
SE0P1LwQp/wbDUBzKjd8IllRUWVli7MziH2JBEhnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUIyLPRl94nrPSUEWg4PLN9fOxLVowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JkMWYxYzhhLTRjOTAtNDMzMS1hMzljLTU3MGY3Yjc5YWQ1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCPqzANBgkqhkiG9w0BAQsFAAOCAQEAy3BCfiCJTOWti+v1uIK3lW6jXi3x
0VKSL7zvHCCPk5dhYYjHP+o+HYAV/XM9dXj5WLykVKImd5R8eQ80nbdq5+bpuYSC
XtBInMPXEV1mWDbs0x8Uovd0Yd/+HmKVquaFgol/sEnm+CA2uA2nT5qtZr67Fxok
o64g4wLiEORnRbPSYGowAANXOIcwf/C+5wm0F1glgYql4J6vjzNtOUH5oyDWPhOL
7ff5XBwPcpX7+F3jbgx7unNBxcuNCe2beOlcy/XvuQSmxypWK58z69g8rrwKRJ+m
KEQk8D9Iva7YQlBN+GtY6C5rudQ6+itCIwIfneaL2vrX5ufsRNGoWFpu4g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:58:49 2025 by rpki-client