Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/205b81e1-94f4-436c-8b91-d61ce3e7634b.roa
File: 205b81e1-94f4-436c-8b91-d61ce3e7634b.roa (raw, json)
Hash identifier: PQOvv/In8fY2O9fubxUo4EludZJ9pnO5PCe2sTwB9l8=
Subject key identifier: EF:D4:74:5D:4B:E5:05:05:62:E0:48:D3:DB:08:03:E4:94:88:50:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26264E2BF28527E7B3915A828E07136B2556BC17
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/205b81e1-94f4-436c-8b91-d61ce3e7634b.roa
Signing time: Mon 20 Oct 2025 02:51:41 +0000
ROA not before: Mon 20 Oct 2025 02:51:41 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:26:4e:2b:f2:85:27:e7:b3:91:5a:82:8e:07:13:6b:25:56:bc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:51:41 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=71d3d11efd16ba1d0b18ba17a0ec88036133bcb853ba4b96c82fdd3a8e8ab29d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:e4:a9:f3:59:05:7f:48:b7:35:ec:d4:6f:
d2:a1:aa:2c:aa:6d:75:3a:63:46:46:d1:03:0c:6a:
59:a8:2b:d9:c6:b4:39:a8:e8:d2:0f:5b:f1:0a:3d:
bc:7c:d9:bd:e5:a4:92:46:94:b3:da:5c:31:3c:92:
f6:93:3e:11:4d:24:7a:cf:14:83:be:53:d6:35:54:
6c:bb:e7:14:d8:be:b5:f1:2e:25:6d:28:6d:8e:b4:
09:35:2e:7a:45:05:5c:74:77:f9:da:7c:e5:f8:95:
87:a7:f9:07:c0:06:95:74:d5:f7:e9:14:05:de:89:
92:e9:1f:db:e5:95:25:8d:0b:20:f4:65:cc:71:80:
6a:ec:86:5e:48:14:ee:c2:2d:62:cb:3e:46:ae:6a:
47:45:9a:bb:b7:50:76:b1:3c:c7:df:49:47:fa:aa:
73:f0:4f:54:fe:30:02:7e:ca:e9:be:51:af:13:cf:
16:1e:2f:2a:1e:1e:b7:4b:48:21:73:7e:c8:04:72:
1c:c0:8f:69:2d:6f:63:5e:53:1e:43:81:61:a3:5a:
5d:99:e7:7f:87:22:30:8a:c4:81:62:4a:20:3c:56:
8a:f6:c9:00:ab:e6:48:aa:13:a5:53:26:3f:a3:14:
1c:cf:e6:f9:99:50:e2:74:fa:1c:92:a2:77:3b:e4:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:74:5D:4B:E5:05:05:62:E0:48:D3:DB:08:03:E4:94:88:50:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/205b81e1-94f4-436c-8b91-d61ce3e7634b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.145.0/24
Signature Algorithm: sha256WithRSAEncryption
08:03:bc:72:e5:e2:bd:20:2a:72:9a:15:b3:45:01:c7:73:14:
80:dc:47:28:42:08:dd:54:b7:25:f6:e9:45:48:3e:2b:6b:08:
72:d4:7e:d4:ec:a5:88:1a:8a:ca:83:08:09:2b:32:78:c7:fe:
c9:2a:04:47:71:5a:20:f0:59:77:9d:30:e2:d5:7c:97:b5:90:
9b:9c:3f:c8:c5:4d:f9:65:92:0d:8d:93:a8:57:d9:53:e3:0e:
5e:74:9a:af:c5:8c:f7:ff:fa:6f:08:aa:cd:51:03:0b:b8:5f:
17:be:fd:74:32:19:a9:f9:2a:1a:93:c7:a3:fd:ca:2e:37:56:
07:31:81:a7:b4:d8:39:4a:0d:df:ec:cd:80:75:a9:03:1e:3b:
92:84:8a:35:af:2e:4c:74:d0:34:ba:0f:bd:b6:1e:96:d8:5c:
62:fc:75:f6:01:bc:1a:ea:33:a6:e3:3e:64:dd:87:0f:fb:bc:
e6:33:24:6c:e5:97:92:59:d9:aa:b9:f1:6e:8f:28:6c:72:fc:
29:50:1e:22:49:91:f6:51:63:93:ef:4f:2e:21:11:dc:46:89:
b7:da:63:d2:e0:4c:5a:df:b7:3d:b7:dd:a6:05:02:0d:4b:93:
eb:03:79:f0:4a:60:27:2d:26:b7:8c:b8:ff:db:1f:84:2e:d1:
20:11:95:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJiZOK/KFJ+ezkVqCjgcTayVWvBcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDI1MTQxWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWQzZDExZWZkMTZiYTFkMGIxOGJhMTdhMGVjODgwMzYx
MzNiY2I4NTNiYTRiOTZjODJmZGQzYThlOGFiMjlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClbeSp81kFf0i3NezUb9KhqiyqbXU6Y0ZG0QMMalmoK9nG
tDmo6NIPW/EKPbx82b3lpJJGlLPaXDE8kvaTPhFNJHrPFIO+U9Y1VGy75xTYvrXx
LiVtKG2OtAk1LnpFBVx0d/nafOX4lYen+QfABpV01ffpFAXeiZLpH9vllSWNCyD0
ZcxxgGrshl5IFO7CLWLLPkauakdFmru3UHaxPMffSUf6qnPwT1T+MAJ+yum+Ua8T
zxYeLyoeHrdLSCFzfsgEchzAj2ktb2NeUx5DgWGjWl2Z53+HIjCKxIFiSiA8Vor2
yQCr5kiqE6VTJj+jFBzP5vmZUOJ0+hySonc75HsbAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU79R0XUvlBQVi4EjT2wgD5JSIUIkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIwNWI4MWUxLTk0ZjQtNDM2Yy04YjkxLWQ2MWNlM2U3NjM0Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnJEwDQYJKoZIhvcNAQELBQADggEBAAgDvHLl4r0gKnKaFbNFAcdzFIDc
RyhCCN1UtyX26UVIPitrCHLUftTspYgaisqDCAkrMnjH/skqBEdxWiDwWXedMOLV
fJe1kJucP8jFTfllkg2Nk6hX2VPjDl50mq/FjPf/+m8Iqs1RAwu4Xxe+/XQyGan5
KhqTx6P9yi43Vgcxgae02DlKDd/szYB1qQMeO5KEijWvLkx00DS6D722HpbYXGL8
dfYBvBrqM6bjPmTdhw/7vOYzJGzll5JZ2aq58W6PKGxy/ClQHiJJkfZRY5PvTy4h
EdxGibfaY9LgTFrftz233aYFAg1Lk+sDefBKYCctJreMuP/bH4Qu0SARlfk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:04 2025 by rpki-client