Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deb5fef-6fc5-42fe-a574-ac45136b5507.roa
File: 0deb5fef-6fc5-42fe-a574-ac45136b5507.roa (raw, json)
Hash identifier: QTWxXhx82631hqCSw69m8Zbk2L4wvGag5934Ekdo3Ew=
Subject key identifier: 95:CC:1A:F6:79:7A:D9:31:67:4C:F4:DE:62:B0:12:E9:B9:BD:1A:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D4FE1F6159945FF53A9F7FB0C3667E6895570A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deb5fef-6fc5-42fe-a574-ac45136b5507.roa
Signing time: Sun 19 Oct 2025 03:12:17 +0000
ROA not before: Sun 19 Oct 2025 03:12:17 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4f:e1:f6:15:99:45:ff:53:a9:f7:fb:0c:36:67:e6:89:55:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:12:17 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b9d77796bf2d7a34e25df4f621f1226bb65ed16d454f228bca5529266646ced2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:ff:e6:f2:68:4d:2e:3b:57:21:0c:09:ad:
40:24:bc:ca:04:7a:d6:f1:0b:23:26:8e:ae:76:8e:
2c:8a:97:42:80:81:a8:dc:60:b9:c5:60:7c:70:fe:
27:12:03:5b:5d:ff:65:c2:ac:24:9d:22:4e:f7:22:
06:73:76:71:0b:39:11:ab:2a:3c:6a:ff:7f:38:d4:
75:25:b8:2f:f9:b2:e8:d9:d5:bc:04:f8:b2:a1:97:
28:4b:7d:c9:51:0b:66:98:23:a1:0a:ac:2b:68:23:
66:3e:57:83:2d:a7:2f:f7:4d:34:bc:2c:5f:06:22:
12:3e:6a:85:75:2f:c0:f8:0c:d2:40:1f:e7:86:86:
24:1a:f5:83:f9:f9:d7:c4:f4:85:eb:08:89:f0:a4:
6d:95:5c:d0:96:cf:a6:1f:c5:62:3b:8f:25:0c:98:
77:95:42:dd:bf:74:38:84:fb:bf:4d:49:fd:a8:67:
08:43:5f:92:f3:e9:58:ab:c7:4c:ee:60:33:8b:c6:
8c:7d:13:1a:d1:2d:c3:22:54:c8:ea:96:f5:d0:34:
57:52:65:8d:cc:14:c3:09:8e:1f:51:45:cd:d6:37:
5e:b7:7a:6d:87:0b:77:36:84:6f:e5:54:43:c8:67:
ec:67:80:04:4a:62:ec:f0:9c:6d:02:cb:ff:3a:82:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CC:1A:F6:79:7A:D9:31:67:4C:F4:DE:62:B0:12:E9:B9:BD:1A:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0deb5fef-6fc5-42fe-a574-ac45136b5507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.42.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:74:bb:0b:9f:a0:55:c0:af:5b:29:18:8e:20:b0:c8:01:ba:
8d:bd:38:10:a9:c2:d7:ab:30:87:03:c4:a8:d1:6e:74:a7:75:
6f:20:e6:88:0d:6f:cd:2e:34:19:72:52:86:df:d5:0d:59:07:
2d:40:f9:7c:b9:e8:b2:1a:3f:67:6f:2a:12:80:4d:b4:ee:36:
41:38:e9:31:5a:1a:72:15:9d:2b:c7:70:0c:e7:fd:aa:21:2e:
e2:86:e2:9a:80:fb:65:f8:f0:74:8e:11:16:fa:69:e7:4a:c3:
c1:29:dc:b3:3b:87:f0:4a:5a:b6:45:62:3f:0f:80:61:a5:c3:
e3:9a:2a:3a:a4:d3:92:02:47:39:5e:f3:e6:09:ec:fd:57:54:
5d:56:bb:1d:0c:d7:14:80:02:cb:23:2b:3f:73:fb:e8:b6:20:
3f:6c:9b:45:f4:83:1b:42:c5:de:13:d4:a9:d0:3e:5b:6a:e1:
5c:70:2c:a4:f7:a8:28:5b:ca:26:ab:b5:50:98:c1:40:19:89:
fb:5f:32:73:24:8e:2d:a5:7a:a8:9b:42:d2:71:90:a4:ef:c1:
44:d5:21:df:fe:ee:af:fb:a8:ab:54:ab:b4:1d:d2:bf:af:7f:
dc:51:93:dc:8b:63:62:e4:d9:38:28:c6:69:4a:26:c0:12:d2:
58:f0:ce:fe
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfU/h9hWZRf9Tqff7DDZn5olVcKYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMxMjE3WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWQ3Nzc5NmJmMmQ3YTM0ZTI1ZGY0ZjYyMWYxMjI2YmI2
NWVkMTZkNDU0ZjIyOGJjYTU1MjkyNjY2NDZjZWQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbRf/m8mhNLjtXIQwJrUAkvMoEetbxCyMmjq52jiyKl0KA
gajcYLnFYHxw/icSA1td/2XCrCSdIk73IgZzdnELORGrKjxq/3841HUluC/5sujZ
1bwE+LKhlyhLfclRC2aYI6EKrCtoI2Y+V4Mtpy/3TTS8LF8GIhI+aoV1L8D4DNJA
H+eGhiQa9YP5+dfE9IXrCInwpG2VXNCWz6YfxWI7jyUMmHeVQt2/dDiE+79NSf2o
ZwhDX5Lz6Virx0zuYDOLxox9ExrRLcMiVMjqlvXQNFdSZY3MFMMJjh9RRc3WN163
em2HC3c2hG/lVEPIZ+xngARKYuzwnG0Cy/86gswbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUlcwa9nl62TFnTPTeYrAS6bm9GtowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBkZWI1ZmVmLTZmYzUtNDJmZS1hNTc0LWFjNDUxMzZiNTUwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsiyowDQYJKoZIhvcNAQELBQADggEBALJ0uwufoFXAr1spGI4gsMgBuo29
OBCpwterMIcDxKjRbnSndW8g5ogNb80uNBlyUobf1Q1ZBy1A+Xy56LIaP2dvKhKA
TbTuNkE46TFaGnIVnSvHcAzn/aohLuKG4pqA+2X48HSOERb6aedKw8Ep3LM7h/BK
WrZFYj8PgGGlw+OaKjqk05ICRzle8+YJ7P1XVF1Wux0M1xSAAssjKz9z++i2ID9s
m0X0gxtCxd4T1KnQPltq4VxwLKT3qChbyiartVCYwUAZiftfMnMkji2leqibQtJx
kKTvwUTVId/+7q/7qKtUq7Qd0r+vf9xRk9yLY2Lk2TgoxmlKJsAS0ljwzv4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:10 2025 by rpki-client