Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0409fcec-cd01-45fe-9cc8-2b868e6e3fee.roa
File: 0409fcec-cd01-45fe-9cc8-2b868e6e3fee.roa (raw, json)
Hash identifier: O2Ql+J+k7m3tEXWNmaXv22z+6YqYuNqsOWt9BzB9/LM=
Subject key identifier: 93:48:10:0C:F5:2A:66:24:3E:EC:4C:4A:FA:EA:78:0C:E4:3E:63:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57189188BB7573FD5F5652623E0F3B63FB3C5420
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0409fcec-cd01-45fe-9cc8-2b868e6e3fee.roa
Signing time: Sun 19 Oct 2025 02:31:54 +0000
ROA not before: Sun 19 Oct 2025 02:31:54 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:18:91:88:bb:75:73:fd:5f:56:52:62:3e:0f:3b:63:fb:3c:54:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:31:54 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d9355ba11700dfaf16539e83d678efc83de3a580e57e24d21138f64c7a3b9e83, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:53:e3:f8:33:19:bf:e4:f5:62:f1:1d:e1:5c:
e7:01:c5:59:20:c8:8f:a3:76:8e:f3:43:a2:42:30:
2a:c6:e2:38:b2:06:63:20:fe:83:c9:e5:73:21:e5:
42:eb:58:23:dc:7e:78:53:a7:a1:f8:7a:43:99:73:
d9:be:a3:aa:a7:fb:20:47:d7:b2:25:ac:e3:81:de:
d7:48:ca:37:ab:9a:3a:2e:62:86:db:9a:46:46:52:
9f:e2:a5:89:4d:cb:03:1f:f1:f4:90:81:e8:9c:38:
38:55:e9:70:ff:b2:63:c9:f0:67:14:d4:06:31:bb:
0f:00:50:2a:f2:11:de:87:9b:e4:0c:81:95:f5:78:
29:13:3e:4d:9f:46:d9:af:aa:8c:42:cb:21:cc:08:
55:53:c6:10:b9:42:95:0f:1f:f5:2f:84:9d:5a:82:
72:99:fd:cd:6c:0d:42:79:5c:9e:db:21:d8:0e:df:
eb:f3:0e:6f:c2:97:1c:15:de:80:07:9e:4d:de:cf:
42:46:b9:34:43:08:d4:b2:59:c2:63:e1:3b:2d:6a:
31:b6:b8:e8:b0:6d:35:28:ff:3c:35:a9:c3:6a:9a:
85:06:7a:86:a3:75:10:9e:fb:06:f7:c9:94:32:a1:
9d:af:16:38:cb:1a:31:71:7d:01:69:bc:b2:73:47:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:10:0C:F5:2A:66:24:3E:EC:4C:4A:FA:EA:78:0C:E4:3E:63:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0409fcec-cd01-45fe-9cc8-2b868e6e3fee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.193.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:02:9b:94:da:80:69:e8:b3:17:bd:78:50:3f:49:57:d4:ea:
bf:5c:ed:bd:e6:19:63:9d:b2:3e:f6:d6:e8:a2:54:0a:eb:b8:
9d:8b:2e:e2:51:9f:c3:92:a5:c6:45:d5:a2:0d:06:b8:34:dd:
35:ee:45:e0:52:64:6c:90:cf:5d:98:e2:0f:b0:6d:6f:1e:62:
92:7b:83:67:df:23:e0:dd:8b:5a:93:4c:7a:89:17:cc:7b:07:
34:9e:71:8a:07:6e:5a:a8:ff:07:56:12:10:a5:d6:0d:d8:65:
2e:1f:99:98:42:a4:d1:b1:9f:64:7a:e4:17:b3:14:a0:17:82:
8a:06:57:b1:2a:7b:c0:f6:c7:e7:d1:0b:77:26:80:5c:bf:34:
91:3c:85:38:e3:ee:47:2a:79:93:08:75:ec:46:a1:e7:f8:e4:
38:b5:ad:9e:63:b6:63:0e:4f:7f:f4:ce:87:9d:b7:ea:82:ee:
03:42:fb:50:60:0a:89:cf:77:2b:57:3b:3d:c1:fb:b7:43:46:
1f:8d:80:d0:22:37:81:16:5a:b9:5e:e6:07:ec:5f:d5:54:ff:
c2:e2:f5:57:c3:76:6b:9c:ad:70:20:df:7a:74:f9:88:b9:ab:
1b:58:da:82:de:f5:5d:63:9f:d8:6d:d5:2c:a8:81:c2:df:1c:
9f:bb:ab:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVxiRiLt1c/1fVlJiPg87Y/s8VCAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIzMTU0WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTM1NWJhMTE3MDBkZmFmMTY1MzllODNkNjc4ZWZjODNk
ZTNhNTgwZTU3ZTI0ZDIxMTM4ZjY0YzdhM2I5ZTgzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDyU+P4Mxm/5PVi8R3hXOcBxVkgyI+jdo7zQ6JCMCrG4jiy
BmMg/oPJ5XMh5ULrWCPcfnhTp6H4ekOZc9m+o6qn+yBH17IlrOOB3tdIyjermjou
YobbmkZGUp/ipYlNywMf8fSQgeicODhV6XD/smPJ8GcU1AYxuw8AUCryEd6Hm+QM
gZX1eCkTPk2fRtmvqoxCyyHMCFVTxhC5QpUPH/UvhJ1agnKZ/c1sDUJ5XJ7bIdgO
3+vzDm/ClxwV3oAHnk3ez0JGuTRDCNSyWcJj4TstajG2uOiwbTUo/zw1qcNqmoUG
eoajdRCe+wb3yZQyoZ2vFjjLGjFxfQFpvLJzRzFdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk0gQDPUqZiQ+7ExK+up4DOQ+Y8IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0MDlmY2VjLWNkMDEtNDVmZS05Y2M4LTJiODY4ZTZlM2ZlZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsisEwDQYJKoZIhvcNAQELBQADggEBAKwCm5TagGnosxe9eFA/SVfU6r9c
7b3mGWOdsj721uiiVArruJ2LLuJRn8OSpcZF1aINBrg03TXuReBSZGyQz12Y4g+w
bW8eYpJ7g2ffI+Ddi1qTTHqJF8x7BzSecYoHblqo/wdWEhCl1g3YZS4fmZhCpNGx
n2R65BezFKAXgooGV7Eqe8D2x+fRC3cmgFy/NJE8hTjj7kcqeZMIdexGoef45Di1
rZ5jtmMOT3/0zoedt+qC7gNC+1BgConPdytXOz3B+7dDRh+NgNAiN4EWWrle5gfs
X9VU/8Li9VfDdmucrXAg33p0+Yi5qxtY2oLe9V1jn9ht1SyogcLfHJ+7q3o=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:17 2025 by rpki-client