Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0444173c-6b64-4b04-a166-fcb50d75e4be.roa
File: 0444173c-6b64-4b04-a166-fcb50d75e4be.roa (raw, json)
Hash identifier: C5deeJlHZ9a/vbhKUp2SbWBJizKbk/CHS8KfcuJ/OD0=
Subject key identifier: 1B:B2:8D:87:F3:E0:54:70:55:13:AF:B4:3E:42:EE:4E:EC:43:BC:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50F8FF3857D387C198A3A464809F011A469B5EE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0444173c-6b64-4b04-a166-fcb50d75e4be.roa
Signing time: Mon 20 Oct 2025 00:20:59 +0000
ROA not before: Mon 20 Oct 2025 00:20:59 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f8:ff:38:57:d3:87:c1:98:a3:a4:64:80:9f:01:1a:46:9b:5e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:20:59 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=6df4247256f1b387daa101d8255a1b87e6a191d573535ca1e4bd33e72a1d4d67, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:8d:0c:19:a1:e2:54:9f:fa:3b:38:19:69:
7a:bf:bc:e2:0c:24:50:78:17:ac:45:c7:e1:d1:79:
e7:41:a9:82:95:b0:a3:a6:6c:1f:8c:ac:51:d6:d6:
fc:1c:de:1a:3f:6d:f8:d9:17:65:6f:7d:e4:20:45:
f8:72:f6:0a:c7:91:6b:30:f8:d1:9c:84:85:32:99:
80:0f:0f:6e:af:4e:a6:bb:ca:4e:5e:48:0e:e3:c3:
96:13:38:89:d0:4d:90:09:23:9a:60:9d:64:b3:fc:
f2:68:bb:a3:4c:92:aa:b9:41:f0:d6:ac:42:cf:69:
3c:76:11:d4:6a:22:16:d0:a8:e1:e9:09:17:3b:c0:
9d:d2:ae:12:1c:77:57:ee:90:7a:48:ae:5b:e5:81:
ba:ba:0c:af:a1:11:0f:59:61:d1:63:f7:8c:24:ae:
0d:dd:d4:05:43:65:1b:98:fc:ea:55:f2:5e:eb:20:
ef:63:13:29:44:84:81:8c:62:8b:51:56:3d:ef:89:
06:d6:4a:06:e6:55:6f:b0:f8:3b:13:21:a9:14:db:
da:9d:f4:73:4f:41:3a:4c:97:47:a4:d5:35:af:1e:
d8:db:80:07:c1:8e:7e:35:f3:e6:58:83:3e:78:a4:
39:01:9b:45:ed:59:d1:11:4d:b6:c5:30:51:ec:b1:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B2:8D:87:F3:E0:54:70:55:13:AF:B4:3E:42:EE:4E:EC:43:BC:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0444173c-6b64-4b04-a166-fcb50d75e4be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.139.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9a:36:bd:b5:5f:be:91:14:83:c9:4a:8c:41:15:05:be:28:
31:ec:f5:88:a0:a0:35:0f:8d:6e:fe:9e:5f:f5:8e:f9:c4:2f:
a8:b7:4e:02:1d:7e:78:8f:b1:12:a4:ce:27:1b:7e:fd:83:8c:
79:59:74:9d:92:34:4d:56:3a:3d:b6:90:1e:df:f1:11:8a:5b:
dd:3a:9a:c4:d0:6b:be:18:23:65:83:8f:0d:41:ce:14:63:d6:
d7:d1:81:4d:66:6d:03:f6:9d:15:b8:58:72:3c:b3:5b:c0:0d:
07:a2:1c:61:44:89:c0:2e:75:07:80:7b:09:ab:e0:df:c9:f0:
7d:0b:5b:1b:2a:6e:a9:c6:58:58:6d:52:b1:79:03:dd:a3:5a:
f5:66:27:56:a3:d7:77:ed:b0:eb:19:21:ed:d5:f8:19:c2:a6:
db:39:eb:16:6d:57:90:75:65:51:fa:64:a5:5e:a1:58:38:f0:
14:6f:f9:f2:11:6b:94:20:89:bf:1e:a1:13:9a:77:a4:ba:41:
d9:e9:40:83:9b:6d:dc:e2:21:92:c7:34:c9:c0:8b:ab:18:ac:
54:80:93:95:6a:ad:35:05:75:0a:4a:b2:81:91:b3:02:fd:66:
f5:60:7b:24:a2:35:9c:e6:23:5b:31:1d:38:1d:2d:c4:4b:58:
04:a9:13:48
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUPj/OFfTh8GYo6RkgJ8BGkabXuIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAyMDU5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZGY0MjQ3MjU2ZjFiMzg3ZGFhMTAxZDgyNTVhMWI4N2U2
YTE5MWQ1NzM1MzVjYTFlNGJkMzNlNzJhMWQ0ZDY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnIY0MGaHiVJ/6OzgZaXq/vOIMJFB4F6xFx+HReedBqYKV
sKOmbB+MrFHW1vwc3ho/bfjZF2VvfeQgRfhy9grHkWsw+NGchIUymYAPD26vTqa7
yk5eSA7jw5YTOInQTZAJI5pgnWSz/PJou6NMkqq5QfDWrELPaTx2EdRqIhbQqOHp
CRc7wJ3SrhIcd1fukHpIrlvlgbq6DK+hEQ9ZYdFj94wkrg3d1AVDZRuY/OpV8l7r
IO9jEylEhIGMYotRVj3viQbWSgbmVW+w+DsTIakU29qd9HNPQTpMl0ek1TWvHtjb
gAfBjn418+ZYgz54pDkBm0XtWdERTbbFMFHsscSdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUG7KNh/PgVHBVE6+0PkLuTuxDvD8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA0NDQxNzNjLTZiNjQtNGIwNC1hMTY2LWZjYjUwZDc1ZTRiZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnoswDQYJKoZIhvcNAQELBQADggEBABGaNr21X76RFIPJSoxBFQW+KDHs
9YigoDUPjW7+nl/1jvnEL6i3TgIdfniPsRKkzicbfv2DjHlZdJ2SNE1WOj22kB7f
8RGKW906msTQa74YI2WDjw1BzhRj1tfRgU1mbQP2nRW4WHI8s1vADQeiHGFEicAu
dQeAewmr4N/J8H0LWxsqbqnGWFhtUrF5A92jWvVmJ1aj13ftsOsZIe3V+BnCpts5
6xZtV5B1ZVH6ZKVeoVg48BRv+fIRa5Qgib8eoROad6S6QdnpQIObbdziIZLHNMnA
i6sYrFSAk5VqrTUFdQpKsoGRswL9ZvVgeySiNZzmI1sxHTgdLcRLWASpE0g=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:45 2025 by rpki-client