Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0714ca2f-0e4d-43e8-9fe2-aaa86d662873.roa
File: 0714ca2f-0e4d-43e8-9fe2-aaa86d662873.roa (raw, json)
Hash identifier: jp2VRym2UcV71VnI1eB7zz+ICZW/QVKLjL+UqYtYdgw=
Subject key identifier: 25:D9:CA:68:D1:77:6F:14:7F:50:5A:49:56:8D:4E:B1:4E:08:7C:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BE477FC4074ABBCA7506CAF38ED430DB92ACE2B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0714ca2f-0e4d-43e8-9fe2-aaa86d662873.roa
Signing time: Mon 20 Oct 2025 06:10:09 +0000
ROA not before: Mon 20 Oct 2025 06:10:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e4:77:fc:40:74:ab:bc:a7:50:6c:af:38:ed:43:0d:b9:2a:ce:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:10:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b47c9a18a12f51630d31716608184c756068602ffa48d36f9a408da781bf6a20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ab:6f:cb:3b:90:61:31:b6:c7:21:32:ee:a5:
24:9c:16:3a:16:06:c2:62:65:bc:d0:a8:32:6e:92:
16:c1:3f:26:e3:6d:50:0d:26:5f:07:c7:ce:c2:09:
c4:0c:69:7d:b9:10:fa:e8:d8:31:02:8f:00:21:c3:
db:9a:31:d6:ef:07:d6:c6:8f:bd:b2:cc:45:73:bd:
04:72:76:2d:b4:d1:38:39:91:18:bb:cc:92:10:6d:
91:ed:12:8c:c3:c1:b8:41:a3:0a:3f:fd:dd:78:fc:
48:32:04:2a:9e:e5:3a:77:ab:22:a3:43:20:b0:39:
75:66:af:98:b7:79:32:f0:69:d3:7a:1b:b9:e9:d2:
74:f2:62:88:0d:ba:5d:70:f9:46:b1:e5:9f:18:cd:
e4:b0:9d:b9:8b:8d:a3:f9:38:7b:36:b2:2d:ed:82:
df:c0:ab:1d:1d:7d:54:f4:56:d7:cc:3a:01:36:06:
4f:b3:de:27:d4:11:6e:dd:21:de:e2:2e:f1:f1:05:
72:dc:de:6c:08:6e:33:1d:0b:78:41:5d:09:38:4b:
1a:b4:6f:ee:7c:b4:f4:25:e1:ae:f9:69:d5:47:ed:
ab:ff:96:4d:6c:57:c0:bf:8c:3f:d4:e1:19:6d:ba:
75:40:6b:79:2a:2b:05:51:c1:38:0f:c5:43:e9:15:
3c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D9:CA:68:D1:77:6F:14:7F:50:5A:49:56:8D:4E:B1:4E:08:7C:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0714ca2f-0e4d-43e8-9fe2-aaa86d662873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.247.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f4:4f:cd:4a:a4:05:cc:c0:05:74:b9:89:b4:87:ed:26:47:
dc:ea:cb:07:a8:97:4c:c3:99:8f:e1:43:ea:32:fa:0d:53:a2:
82:68:e0:76:e3:3c:d3:17:01:a1:f1:d7:4b:df:45:4f:31:1d:
42:4c:d1:d5:0a:99:b9:e9:43:01:c3:6c:9d:5a:14:b0:01:ed:
3a:7c:bb:7e:19:b9:2b:c7:bb:60:1a:be:6e:90:74:76:25:e6:
98:26:df:ed:7d:8a:bd:2f:09:3c:57:07:2f:c1:96:26:ed:e7:
39:86:31:b3:0d:60:89:de:a6:a1:ce:c5:f1:9a:41:5a:ce:37:
c2:22:80:44:bd:fb:65:e6:88:e6:8d:d4:8f:44:b4:99:e0:f1:
d5:2f:73:f8:fe:35:28:e0:a2:16:94:00:7e:ad:08:3d:20:27:
a7:83:47:55:81:43:95:4f:58:8c:fd:05:94:27:8a:73:32:b7:
50:91:1b:89:f0:01:43:e5:55:1c:8e:4f:fb:a8:7e:72:7c:95:
e1:8c:0f:97:22:6f:f9:30:f5:7c:28:66:17:2e:c0:5a:0e:07:
bb:b5:56:5d:a1:8d:14:e0:57:7c:6f:96:88:96:d2:8f:f1:6e:
21:72:cc:e7:7d:5e:24:fe:c4:16:51:ba:28:7c:e5:55:20:60:
87:9a:7b:24
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe+R3/EB0q7ynUGyvOO1DDbkqziswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYxMDA5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNDdjOWExOGExMmY1MTYzMGQzMTcxNjYwODE4NGM3NTYw
Njg2MDJmZmE0OGQzNmY5YTQwOGRhNzgxYmY2YTIwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDSq2/LO5BhMbbHITLupSScFjoWBsJiZbzQqDJukhbBPybj
bVANJl8Hx87CCcQMaX25EPro2DECjwAhw9uaMdbvB9bGj72yzEVzvQRydi200Tg5
kRi7zJIQbZHtEozDwbhBowo//d14/EgyBCqe5Tp3qyKjQyCwOXVmr5i3eTLwadN6
G7np0nTyYogNul1w+Uax5Z8YzeSwnbmLjaP5OHs2si3tgt/Aqx0dfVT0VtfMOgE2
Bk+z3ifUEW7dId7iLvHxBXLc3mwIbjMdC3hBXQk4Sxq0b+58tPQl4a75adVH7av/
lk1sV8C/jD/U4RltunVAa3kqKwVRwTgPxUPpFTyfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJdnKaNF3bxR/UFpJVo1OsU4IfCwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA3MTRjYTJmLTBlNGQtNDNlOC05ZmUyLWFhYTg2ZDY2Mjg3My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnvcwDQYJKoZIhvcNAQELBQADggEBAK70T81KpAXMwAV0uYm0h+0mR9zq
yweol0zDmY/hQ+oy+g1TooJo4HbjPNMXAaHx10vfRU8xHUJM0dUKmbnpQwHDbJ1a
FLAB7Tp8u34ZuSvHu2Aavm6QdHYl5pgm3+19ir0vCTxXBy/Blibt5zmGMbMNYIne
pqHOxfGaQVrON8IigES9+2XmiOaN1I9EtJng8dUvc/j+NSjgohaUAH6tCD0gJ6eD
R1WBQ5VPWIz9BZQninMyt1CRG4nwAUPlVRyOT/uofnJ8leGMD5cib/kw9XwoZhcu
wFoOB7u1Vl2hjRTgV3xvloiW0o/xbiFyzOd9XiT+xBZRuih85VUgYIeaeyQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:15 2025 by rpki-client