Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28e2ee56-dbcd-49a5-8413-2624903aa27b.roa
File: 28e2ee56-dbcd-49a5-8413-2624903aa27b.roa (raw, json)
Hash identifier: DfXFLbq6q+dvhSikeE98/qZ6MwEu7s0f2ZaS9CS5FhE=
Subject key identifier: 18:66:AC:CD:DA:0B:17:44:5C:60:FF:2D:DB:38:81:52:73:D5:F3:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65001FF6B6588852AAC2DDBA20643DF0E38E7BEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28e2ee56-dbcd-49a5-8413-2624903aa27b.roa
Signing time: Mon 20 Oct 2025 06:10:12 +0000
ROA not before: Mon 20 Oct 2025 06:10:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:00:1f:f6:b6:58:88:52:aa:c2:dd:ba:20:64:3d:f0:e3:8e:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:10:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e2e4dd62ab36df72846256ce9fe2d93985a90a1bf5598c4667e7c65f8cfcd564, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:98:6f:e7:a1:55:f7:40:7f:35:08:73:15:
91:17:9f:85:b7:c1:27:22:aa:4b:e7:8e:a9:c4:e4:
6c:a5:2a:e6:ec:02:f0:a4:cb:88:62:64:ff:d9:e0:
e9:a1:3b:38:33:1e:65:f3:4c:ed:e5:92:68:42:0b:
3d:82:3e:94:23:5e:f8:7c:9d:06:10:02:6d:5c:ff:
28:14:66:3e:1c:fc:92:7a:c2:57:23:e3:57:45:ab:
f8:53:73:6f:ce:74:b8:71:55:1b:02:1a:2a:d8:af:
64:26:9f:51:91:59:5e:5f:fe:39:96:73:d6:c5:a5:
32:90:3e:54:ec:cd:7a:a6:e8:31:ab:9b:b3:2d:c3:
3e:0d:a9:7c:e0:e1:72:9d:06:81:60:e4:66:ee:07:
97:d1:d5:ce:0f:cc:ea:1e:ed:84:f6:62:fc:d7:4d:
05:9d:c5:4b:be:40:36:f8:32:cf:68:0e:e0:44:80:
b4:00:f5:61:00:16:57:77:3b:7a:fc:ae:56:6d:35:
76:a8:5d:99:c5:36:7c:d3:d7:68:f5:4d:8b:92:04:
d4:9a:cb:fc:e0:96:7b:b3:ed:8f:78:34:5a:b5:35:
26:2c:f8:65:7e:14:e5:38:3d:10:3d:03:fb:69:7b:
a9:ef:19:ab:b8:66:fd:19:ba:aa:c7:a0:16:5b:56:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:66:AC:CD:DA:0B:17:44:5C:60:FF:2D:DB:38:81:52:73:D5:F3:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/28e2ee56-dbcd-49a5-8413-2624903aa27b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:2d:93:60:60:fb:79:3d:da:07:ba:e4:7b:db:eb:c7:e5:75:
48:0e:2b:90:07:e5:ec:ef:ca:db:0b:a4:a2:9d:2a:0e:26:25:
3b:3b:01:1a:d4:df:55:ab:c2:06:cc:0b:19:8e:a7:f1:2a:a6:
10:fa:b2:bc:17:4d:d6:9d:9b:7d:88:b5:0e:88:8a:ce:b7:22:
3f:e8:b5:ad:3d:5d:ec:6c:b5:22:e9:fd:3a:37:56:af:24:82:
e1:f0:8d:8b:0b:af:46:fe:f3:06:64:78:4c:76:44:3f:8d:ef:
05:f7:06:d7:5a:b2:f0:d1:0a:b6:54:5b:21:72:75:f3:7f:07:
f9:81:35:8f:5f:c5:83:ce:2b:e9:92:6a:bd:e7:f5:de:4c:94:
d7:4d:39:63:22:3f:b1:28:df:d7:7b:92:4f:76:63:6d:d7:34:
89:18:88:f7:4a:95:67:04:2f:10:b1:51:c8:a7:c5:de:a5:61:
ec:4a:3d:d9:51:a3:45:81:a3:e5:8f:9c:9c:74:ed:1c:2f:34:
10:f2:be:8e:56:17:62:29:ed:50:58:88:67:ad:0e:30:e4:4e:
d7:cb:1d:13:5b:31:73:f7:91:2a:4e:71:b9:f8:f8:e7:b9:21:
c9:69:2d:5b:01:50:88:eb:ba:64:0c:56:00:f3:d5:cc:0b:16:
eb:c9:41:38
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZQAf9rZYiFKqwt26IGQ98OOOe+8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYxMDEyWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMmU0ZGQ2MmFiMzZkZjcyODQ2MjU2Y2U5ZmUyZDkzOTg1
YTkwYTFiZjU1OThjNDY2N2U3YzY1ZjhjZmNkNTY0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxw5hv56FV90B/NQhzFZEXn4W3wSciqkvnjqnE5GylKubs
AvCky4hiZP/Z4OmhOzgzHmXzTO3lkmhCCz2CPpQjXvh8nQYQAm1c/ygUZj4c/JJ6
wlcj41dFq/hTc2/OdLhxVRsCGirYr2Qmn1GRWV5f/jmWc9bFpTKQPlTszXqm6DGr
m7Mtwz4NqXzg4XKdBoFg5GbuB5fR1c4PzOoe7YT2YvzXTQWdxUu+QDb4Ms9oDuBE
gLQA9WEAFld3O3r8rlZtNXaoXZnFNnzT12j1TYuSBNSay/zglnuz7Y94NFq1NSYs
+GV+FOU4PRA9A/tpe6nvGau4Zv0ZuqrHoBZbVhRTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGGaszdoLF0RcYP8t2ziBUnPV8/AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI4ZTJlZTU2LWRiY2QtNDlhNS04NDEzLTI2MjQ5MDNhYTI3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnz4wDQYJKoZIhvcNAQELBQADggEBAKQtk2Bg+3k92ge65Hvb68fldUgO
K5AH5ezvytsLpKKdKg4mJTs7ARrU31WrwgbMCxmOp/EqphD6srwXTdadm32ItQ6I
is63Ij/ota09XexstSLp/To3Vq8kguHwjYsLr0b+8wZkeEx2RD+N7wX3BtdasvDR
CrZUWyFydfN/B/mBNY9fxYPOK+mSar3n9d5MlNdNOWMiP7Eo39d7kk92Y23XNIkY
iPdKlWcELxCxUcinxd6lYexKPdlRo0WBo+WPnJx07RwvNBDyvo5WF2Ip7VBYiGet
DjDkTtfLHRNbMXP3kSpOcbn4+Oe5IclpLVsBUIjrumQMVgDz1cwLFuvJQTg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:04 2025 by rpki-client