Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa
File: c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa (raw, json)
Hash identifier: CgWDCUoo3OKrA361IolfmzE1WHxiSisGqMJP5v4hgys=
Subject key identifier: 19:04:6B:D4:2D:64:62:CC:D4:61:9B:19:E0:5C:4D:A5:53:6D:26:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A1321C8CE50799EA0F6F0D567AAC3E54C1C7756
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa
Signing time: Wed 05 Nov 2025 00:40:12 +0000
ROA not before: Wed 05 Nov 2025 00:40:12 +0000
ROA not after: Wed 10 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.78.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:13:21:c8:ce:50:79:9e:a0:f6:f0:d5:67:aa:c3:e5:4c:1c:77:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 5 00:40:12 2025 GMT
Not After : Dec 10 23:59:59 2025 GMT
Subject: serialNumber=259cb899c544bf7aa5eb344c0bd86c8fe7f3f48a3aeddfc3f6f1e67c2f5230c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:a8:80:17:d5:f2:e5:76:38:7d:eb:34:39:
01:e9:39:a2:ea:a7:33:9e:ec:5d:d6:fc:44:d8:e3:
07:0b:fc:cd:20:f6:e8:68:b7:d8:94:3e:57:eb:a1:
0f:11:e9:3c:73:42:91:32:d5:19:60:b4:0a:4f:44:
64:ad:11:4b:fa:c9:fc:62:e6:9a:67:7b:f6:3c:93:
7b:89:cc:ce:cc:09:76:fd:67:a3:b6:2b:d3:c1:ca:
90:b6:46:79:f1:a2:07:fe:3b:ae:7c:fc:7d:2d:db:
19:79:3e:5c:06:e1:72:5c:82:e2:e8:00:37:cd:09:
95:1b:1e:a1:d1:85:4c:67:25:07:20:d2:e5:81:9b:
8f:7a:2f:8d:c2:42:27:c2:e2:f8:24:cc:34:d9:a9:
12:32:00:c7:0c:eb:97:0f:01:4c:fc:91:97:b9:15:
e5:f5:a8:76:c0:d7:df:7d:9b:3a:53:08:df:bf:27:
e2:76:04:25:d6:85:96:41:44:d7:d3:16:e3:8c:cc:
a4:07:ec:1f:0c:55:2a:4f:66:9f:5e:ac:ec:dc:82:
bf:85:2f:e2:34:e4:b3:bc:a2:90:a4:05:f9:fa:a5:
59:7c:65:4d:a2:73:50:f7:2c:be:12:eb:ef:17:c9:
b7:10:2f:af:d2:2f:e2:41:51:ad:e9:d9:f0:cc:d5:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:6B:D4:2D:64:62:CC:D4:61:9B:19:E0:5C:4D:A5:53:6D:26:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4c28d27-ae81-4877-9c93-6322e55fc6ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:8b:ba:fd:10:5a:c1:09:79:e6:cc:ee:20:32:a3:34:9f:5d:
02:a8:2f:2a:8b:4f:84:38:7c:45:41:d8:b8:a0:7a:bc:5b:a3:
4d:ce:75:80:79:a0:1b:4f:38:95:26:d6:a8:ba:fd:2a:20:92:
c1:af:1b:3e:4b:5a:76:39:43:cc:cd:67:85:88:51:99:d4:be:
a9:e4:14:a7:ea:b2:c9:42:8e:cc:c9:73:d2:19:f9:0b:68:bb:
e7:d0:64:26:f5:5c:87:c5:f9:a1:4c:0a:53:bb:42:99:b8:0b:
f4:93:0d:78:77:f5:17:39:81:37:42:4f:2c:51:79:8a:bb:d8:
6a:7d:1f:a8:a0:e7:dc:76:30:91:87:ed:58:28:19:80:5e:98:
db:bf:49:95:eb:9e:f8:77:ff:52:d7:72:40:04:a3:51:77:25:
73:a9:c5:05:3c:2f:08:b5:c8:15:a8:b7:cc:41:b4:19:0e:9d:
e1:69:be:d9:fa:63:8c:27:6c:94:b1:41:fa:13:72:c7:a4:e1:
52:96:3e:ff:13:6a:fd:19:95:51:60:f6:1a:33:cc:56:18:20:
5c:88:57:fd:39:d6:02:be:04:7a:19:8a:29:57:68:60:16:08:
36:5e:06:66:37:4c:c0:d0:16:aa:57:90:f2:83:bf:86:68:10:
20:73:09:df
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOhMhyM5QeZ6g9vDVZ6rD5Uwcd1YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTA1MDA0MDEyWhcNMjUxMjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTljYjg5OWM1NDRiZjdhYTVlYjM0NGMwYmQ4NmM4ZmU3
ZjNmNDhhM2FlZGRmYzNmNmYxZTY3YzJmNTIzMGMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdbaiAF9Xy5XY4fes0OQHpOaLqpzOe7F3W/ETY4wcL/M0g
9uhot9iUPlfroQ8R6TxzQpEy1RlgtApPRGStEUv6yfxi5ppne/Y8k3uJzM7MCXb9
Z6O2K9PBypC2Rnnxogf+O658/H0t2xl5PlwG4XJcguLoADfNCZUbHqHRhUxnJQcg
0uWBm496L43CQifC4vgkzDTZqRIyAMcM65cPAUz8kZe5FeX1qHbA1999mzpTCN+/
J+J2BCXWhZZBRNfTFuOMzKQH7B8MVSpPZp9erOzcgr+FL+I05LO8opCkBfn6pVl8
ZU2ic1D3LL4S6+8XybcQL6/SL+JBUa3p2fDM1cyVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGQRr1C1kYszUYZsZ4FxNpVNtJl8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0YzI4ZDI3LWFlODEtNDg3Ny05YzkzLTYzMjJlNTVmYzZlYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHY5k4wDQYJKoZIhvcNAQELBQADggEBAH6Luv0QWsEJeebM7iAyozSfXQKo
LyqLT4Q4fEVB2Ligerxbo03OdYB5oBtPOJUm1qi6/SogksGvGz5LWnY5Q8zNZ4WI
UZnUvqnkFKfqsslCjszJc9IZ+Qtou+fQZCb1XIfF+aFMClO7Qpm4C/STDXh39Rc5
gTdCTyxReYq72Gp9H6ig59x2MJGH7VgoGYBemNu/SZXrnvh3/1LXckAEo1F3JXOp
xQU8Lwi1yBWot8xBtBkOneFpvtn6Y4wnbJSxQfoTcsek4VKWPv8Tav0ZlVFg9hoz
zFYYIFyIV/051gK+BHoZiilXaGAWCDZeBmY3TMDQFqpXkPKDv4ZoECBzCd8=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:49 2025 by rpki-client