Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa
File: e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa (raw, json)
Hash identifier: 2y04y1Uo/XJAi1bE7QZ9m963xtvFMVDj3mWD9tibV7M=
Subject key identifier: 71:28:57:59:D1:E1:6A:09:93:CF:9C:84:E7:7B:D7:83:29:88:36:F5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B0BB6C9F058A335D912B7EE28636A7620011594
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa
Signing time: Tue 21 Oct 2025 00:50:04 +0000
ROA not before: Tue 21 Oct 2025 00:50:04 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 202.5.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0b:b6:c9:f0:58:a3:35:d9:12:b7:ee:28:63:6a:76:20:01:15:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:50:04 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=1ae8ec1600ce694e3e6c3a462db97e34d0ca2a1f354ccbab23ea151584840815, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:f1:7c:97:a5:dd:41:22:af:4e:ef:c8:ce:
67:e4:3a:d1:75:50:b3:7e:21:14:3f:e1:d1:8f:53:
a1:b5:a1:a2:c9:b8:b9:28:e0:82:9c:ad:ae:0c:eb:
ec:da:e4:89:77:d3:a2:ff:6b:e7:16:25:08:ea:78:
76:d1:f0:84:1e:f4:a7:ce:50:d8:66:9d:e5:9c:85:
72:93:ec:63:f0:16:c1:17:30:5d:94:2f:bf:26:61:
73:88:c9:b6:a2:90:56:a4:8d:8a:1e:f3:ea:cd:e6:
d2:c9:57:82:15:1e:6a:ae:01:31:a4:1e:d6:71:86:
88:5a:de:4e:36:93:2b:d3:44:f0:f5:18:5c:2c:32:
f9:56:17:42:28:d4:2f:62:1f:a0:6d:51:80:fc:ed:
5d:0b:f0:47:97:c5:2d:66:96:36:b9:f7:35:7f:4f:
d7:c3:1e:6a:e3:a6:ea:f9:e4:aa:c3:0b:fd:84:d3:
16:08:39:39:6b:66:d2:1a:e0:a1:a3:91:d2:db:df:
ca:a4:ae:0f:af:42:11:c2:69:cb:2e:91:a7:e9:d4:
c3:59:f8:04:7d:c6:de:25:a7:98:9f:f2:1c:c5:f2:
c1:82:0e:14:9f:59:4d:8c:d4:49:62:aa:c4:91:52:
cf:ea:6b:80:70:86:ea:f8:81:ec:15:73:6a:8e:dd:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:28:57:59:D1:E1:6A:09:93:CF:9C:84:E7:7B:D7:83:29:88:36:F5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e6c0b6e0-0331-4729-bace-aaa52d6d18c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.170.0/23
Signature Algorithm: sha256WithRSAEncryption
09:98:b1:7e:de:70:b9:e8:a1:e4:c2:81:7c:ab:31:6e:51:cb:
57:a3:18:b7:54:0a:68:76:b3:75:b8:1c:42:c8:26:ef:27:05:
9f:97:bf:21:b0:0c:10:e7:71:cc:b7:2d:ef:80:61:8b:fa:c3:
28:fa:de:5c:9b:b5:58:39:68:85:f8:24:07:ef:fe:e8:f3:03:
22:d7:0e:e4:c5:54:d6:6d:d6:97:71:3c:c4:3d:a6:27:18:3d:
ea:45:4e:1c:ec:bb:d8:2b:2e:9f:8d:cf:b5:34:d5:37:89:5a:
6c:1e:06:ad:10:15:07:67:2e:65:c2:34:87:48:80:82:80:9a:
a7:a2:0f:98:65:71:25:c4:34:28:a2:a2:d6:1c:21:54:46:1f:
6a:58:83:d4:e3:dc:69:4a:26:76:b2:70:55:90:8f:41:5e:67:
f7:e7:e7:e2:1b:15:a4:f1:ee:55:b1:a6:52:e3:dd:d8:07:b0:
21:cf:4c:44:c5:d0:3b:bf:4c:95:85:8c:2a:d6:75:47:ae:7e:
60:c6:c3:12:4a:f7:f2:77:c1:a7:a5:d1:32:6d:12:12:3e:50:
ed:01:3a:03:54:46:23:06:cd:1e:49:7c:57:3b:7f:23:56:67:
25:d1:2a:75:45:a1:19:62:49:da:97:40:75:8d:78:03:0f:a8:
91:2a:6a:b9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOwu2yfBYozXZErfuKGNqdiABFZQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIxMDA1MDA0WhcNMjUxMTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxYWU4ZWMxNjAwY2U2OTRlM2U2YzNhNDYyZGI5N2UzNGQw
Y2EyYTFmMzU0Y2NiYWIyM2VhMTUxNTg0ODQwODE1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcMvF8l6XdQSKvTu/IzmfkOtF1ULN+IRQ/4dGPU6G1oaLJ
uLko4IKcra4M6+za5Il306L/a+cWJQjqeHbR8IQe9KfOUNhmneWchXKT7GPwFsEX
MF2UL78mYXOIybaikFakjYoe8+rN5tLJV4IVHmquATGkHtZxhoha3k42kyvTRPD1
GFwsMvlWF0Io1C9iH6BtUYD87V0L8EeXxS1mlja59zV/T9fDHmrjpur55KrDC/2E
0xYIOTlrZtIa4KGjkdLb38qkrg+vQhHCacsukafp1MNZ+AR9xt4lp5if8hzF8sGC
DhSfWU2M1EliqsSRUs/qa4Bwhur4gewVc2qO3b0BAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcShXWdHhagmTz5yE53vXgymINvUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2U2YzBiNmUwLTAzMzEtNDcyOS1iYWNlLWFhYTUyZDZkMThjMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHKBaowDQYJKoZIhvcNAQELBQADggEBAAmYsX7ecLnooeTCgXyrMW5Ry1ej
GLdUCmh2s3W4HELIJu8nBZ+XvyGwDBDnccy3Le+AYYv6wyj63lybtVg5aIX4JAfv
/ujzAyLXDuTFVNZt1pdxPMQ9picYPepFThzsu9grLp+Nz7U01TeJWmweBq0QFQdn
LmXCNIdIgIKAmqeiD5hlcSXENCiiotYcIVRGH2pYg9Tj3GlKJnaycFWQj0FeZ/fn
5+IbFaTx7lWxplLj3dgHsCHPTETF0Du/TJWFjCrWdUeufmDGwxJK9/J3wael0TJt
EhI+UO0BOgNURiMGzR5JfFc7fyNWZyXRKnVFoRliSdqXQHWNeAMPqJEqark=
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:40:50 2025 by rpki-client