Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3417c84c-350a-401e-a2d4-1590a22c1480.roa
File: 3417c84c-350a-401e-a2d4-1590a22c1480.roa (raw, json)
Hash identifier: sDaH+ABPBOEeXTQFmOexHLhaN0W0QVPrqLiP3YRLfmw=
Subject key identifier: DB:5A:BA:A5:EF:5C:3C:82:2C:58:56:0B:6D:E1:20:1A:C9:0B:E7:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B4B116BE647D02B9FDC18AC50DC7CCF77BA5750
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3417c84c-350a-401e-a2d4-1590a22c1480.roa
Signing time: Mon 20 Oct 2025 02:20:08 +0000
ROA not before: Mon 20 Oct 2025 02:20:08 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4b:11:6b:e6:47:d0:2b:9f:dc:18:ac:50:dc:7c:cf:77:ba:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:20:08 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=96446b44f8f9497e105f47719249b09baf442cdd3272dd9c1c946d574ea6027e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:04:e1:a6:18:d4:f9:96:99:6c:64:54:41:
c8:f5:83:e9:0e:74:92:95:cf:91:84:a9:5e:87:10:
7c:f3:fe:f6:bb:58:fa:8c:78:4f:4b:ae:2c:63:b8:
e4:15:7d:be:12:01:39:d3:50:9e:4c:13:da:c4:2c:
07:d0:48:97:fe:45:9f:3a:1e:b0:cd:61:5d:a8:85:
cb:0b:2f:c7:8a:2a:e1:29:8f:01:79:ee:d2:7c:1f:
86:bc:20:a0:b2:c1:51:9e:4a:1c:e5:29:b5:cb:d2:
f8:3d:cf:ae:95:79:ce:f8:7c:c6:21:d5:d4:dd:95:
bb:a5:a8:2a:ed:bb:fa:34:b0:39:0c:3a:49:d9:bd:
a1:aa:73:a0:ec:17:ce:6b:9c:43:f5:7c:f9:77:a7:
1e:72:8c:97:aa:2c:01:d0:69:1b:e7:fb:c6:a2:b7:
4e:1a:23:a6:9f:8a:87:7d:59:cc:ab:f6:99:3c:cd:
6b:13:54:94:c3:22:98:80:bd:4d:8b:9e:1e:32:41:
c9:00:06:c7:2f:3e:71:3a:97:10:e1:3a:07:af:00:
1e:64:bd:9e:16:13:a1:53:43:26:d0:55:d5:c4:0e:
d5:a8:27:62:37:08:2f:9c:21:ee:b7:5d:58:9d:30:
5a:6e:aa:39:ca:d8:4f:71:13:79:e8:73:10:e5:54:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:5A:BA:A5:EF:5C:3C:82:2C:58:56:0B:6D:E1:20:1A:C9:0B:E7:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3417c84c-350a-401e-a2d4-1590a22c1480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.8.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:4f:f0:ca:1a:2b:94:1e:ed:29:8c:c9:42:ac:95:59:43:02:
1a:aa:db:f1:be:76:ee:af:de:eb:41:be:b4:eb:12:5f:34:2d:
64:a1:1d:d7:43:ff:12:7e:fe:15:3a:c1:cf:31:c7:fc:54:66:
0e:30:e1:43:06:45:c8:1e:f7:5c:f8:59:b3:d2:d9:5d:1e:f6:
78:ef:80:21:61:c5:06:b9:b9:2d:b9:4a:85:e3:c8:cc:a6:3d:
c8:6a:2f:43:63:e8:fe:85:71:c7:2f:29:74:af:1f:f2:77:c2:
82:04:80:37:a3:a4:b4:58:6c:16:74:25:ff:ef:40:1e:51:a7:
75:35:20:1f:b0:a9:ea:79:19:c8:90:e2:4a:20:24:53:f7:07:
17:23:65:e8:c6:97:32:86:87:4e:e3:f5:32:16:33:15:b3:2c:
62:24:de:a0:3d:4b:b2:41:13:b0:b5:aa:1a:68:d2:01:71:72:
cc:82:5b:a3:7a:33:d8:6b:46:fa:e7:5d:1b:5a:45:f3:03:f3:
4a:58:46:32:7a:da:a6:72:23:91:61:b8:3d:8f:87:c6:20:52:
84:71:a2:d7:92:fc:27:0d:c3:64:d7:df:08:8e:bb:e7:b9:90:
64:50:f7:c8:83:9a:eb:09:91:b4:16:19:b5:d2:28:0e:e6:57:
74:54:14:72
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC0sRa+ZH0Cuf3BisUNx8z3e6V1AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDIyMDA4WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NjQ0NmI0NGY4Zjk0OTdlMTA1ZjQ3NzE5MjQ5YjA5YmFm
NDQyY2RkMzI3MmRkOWMxYzk0NmQ1NzRlYTYwMjdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClwQThphjU+ZaZbGRUQcj1g+kOdJKVz5GEqV6HEHzz/va7
WPqMeE9LrixjuOQVfb4SATnTUJ5ME9rELAfQSJf+RZ86HrDNYV2ohcsLL8eKKuEp
jwF57tJ8H4a8IKCywVGeShzlKbXL0vg9z66Vec74fMYh1dTdlbulqCrtu/o0sDkM
OknZvaGqc6DsF85rnEP1fPl3px5yjJeqLAHQaRvn+8ait04aI6afiod9Wcyr9pk8
zWsTVJTDIpiAvU2Lnh4yQckABscvPnE6lxDhOgevAB5kvZ4WE6FTQybQVdXEDtWo
J2I3CC+cIe63XVidMFpuqjnK2E9xE3nocxDlVCyRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU21q6pe9cPIIsWFYLbeEgGskL5wcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM0MTdjODRjLTM1MGEtNDAxZS1hMmQ0LTE1OTBhMjJjMTQ4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnggwDQYJKoZIhvcNAQELBQADggEBALxP8MoaK5Qe7SmMyUKslVlDAhqq
2/G+du6v3utBvrTrEl80LWShHddD/xJ+/hU6wc8xx/xUZg4w4UMGRcge91z4WbPS
2V0e9njvgCFhxQa5uS25SoXjyMymPchqL0Nj6P6FcccvKXSvH/J3woIEgDejpLRY
bBZ0Jf/vQB5Rp3U1IB+wqep5GciQ4kogJFP3BxcjZejGlzKGh07j9TIWMxWzLGIk
3qA9S7JBE7C1qhpo0gFxcsyCW6N6M9hrRvrnXRtaRfMD80pYRjJ62qZyI5FhuD2P
h8YgUoRxoteS/CcNw2TX3wiOu+e5kGRQ98iDmusJkbQWGbXSKA7mV3RUFHI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:28 2025 by rpki-client