Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356f9916-7a7f-42a7-a9d7-e7661413101f.roa
File: 356f9916-7a7f-42a7-a9d7-e7661413101f.roa (raw, json)
Hash identifier: gyCLZ6h0P10mbaGPMUKTv5ZnAhxFTs7Z1MG2wJ/e4JA=
Subject key identifier: 2E:59:56:65:39:E5:F0:7C:9B:F1:F9:8C:D4:AF:AD:83:CA:C4:15:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09302AD83FD6696CC5FCB45DB8D8309ECCDC343A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356f9916-7a7f-42a7-a9d7-e7661413101f.roa
Signing time: Mon 20 Oct 2025 06:31:34 +0000
ROA not before: Mon 20 Oct 2025 06:31:34 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:30:2a:d8:3f:d6:69:6c:c5:fc:b4:5d:b8:d8:30:9e:cc:dc:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:31:34 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b4f4f120606d95b2fea9d50454949bf25fc0a80278fa2b3266a064a763b33a10, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:7b:36:91:ee:16:ee:86:8c:c4:11:e0:ba:
3a:f9:76:e4:6b:24:b4:f4:ea:57:e2:5a:a1:58:3e:
8e:f2:9c:ff:03:90:64:c5:8d:82:0a:94:85:84:06:
62:7a:06:30:98:75:a6:71:fb:4d:ac:12:3e:9a:58:
16:52:28:5d:ae:4f:15:a0:14:c8:6d:64:42:d7:72:
3b:4d:d2:81:3f:a3:5b:73:82:4a:57:64:e7:98:14:
c4:cf:0d:7b:c4:c3:38:86:39:35:1e:dd:11:92:fd:
d2:30:8e:58:f3:98:1b:82:d7:fe:13:da:ac:ef:f9:
bf:cd:e3:4e:0c:52:5c:d7:58:12:73:97:59:41:b5:
2d:1b:58:6c:b6:ae:f3:f3:2b:c0:92:68:06:90:ea:
90:0f:50:8e:43:1e:80:12:9d:9e:78:4c:b3:e9:f3:
e7:96:9a:72:b2:70:b8:2c:21:d3:6a:41:e7:2d:4f:
7c:5d:98:a2:f1:88:d2:46:11:e5:72:c1:5d:45:e9:
aa:77:e3:df:11:20:a6:df:5a:57:67:56:4e:ed:10:
c6:ea:22:b7:3a:23:75:d4:f9:68:b4:01:0f:a8:97:
b1:f2:b2:8c:67:2b:57:db:dd:b5:26:63:e1:7c:09:
df:45:ea:ee:2d:cf:d5:29:d3:31:50:de:fa:b5:ea:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:59:56:65:39:E5:F0:7C:9B:F1:F9:8C:D4:AF:AD:83:CA:C4:15:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356f9916-7a7f-42a7-a9d7-e7661413101f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.208.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:1c:9c:45:72:9e:1a:94:ef:ec:24:5b:fa:ce:70:18:f5:12:
12:c3:8e:4a:1b:e1:4c:37:ef:a5:0e:92:51:3e:f3:fa:f5:71:
5a:93:f1:d5:1c:75:3b:43:5f:6f:2a:ca:7e:8f:b4:28:35:62:
bb:d8:dd:cd:2f:2c:f8:51:c8:d2:72:38:9e:d9:0c:57:53:ac:
37:fc:b3:32:a4:21:91:24:ba:be:84:73:af:d7:c3:8e:e5:7e:
a7:22:bc:d5:46:88:b0:bc:ff:3b:a8:4f:72:31:33:dc:a2:ad:
fb:48:18:bd:2c:43:d9:8b:43:b8:9a:a9:89:f4:eb:a6:5f:63:
bb:ba:81:d2:8b:7c:50:cf:5e:cb:b2:0c:b6:77:33:7b:52:c9:
cc:6b:92:0d:87:5f:34:4c:af:96:ef:65:70:5c:2f:cc:c2:42:
4e:ef:68:43:05:ab:10:c8:9f:6b:0d:76:38:1a:8a:36:2d:a4:
c7:9b:da:4d:d3:54:a8:b5:33:0d:03:d9:f9:c1:5b:75:bb:6a:
5b:56:6c:78:7b:0d:6c:22:a9:1b:ed:4c:e3:bb:81:32:e0:70:
e4:4f:11:00:26:13:93:79:a6:cb:fb:ae:45:52:4d:e3:94:3a:
e7:de:a0:2b:d2:03:48:fe:15:25:6a:7e:dd:5d:4f:eb:3e:fa:
c4:ec:57:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCTAq2D/WaWzF/LRduNgwnszcNDowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYzMTM0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNGY0ZjEyMDYwNmQ5NWIyZmVhOWQ1MDQ1NDk0OWJmMjVm
YzBhODAyNzhmYTJiMzI2NmEwNjRhNzYzYjMzYTEwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCFnHs2ke4W7oaMxBHgujr5duRrJLT06lfiWqFYPo7ynP8D
kGTFjYIKlIWEBmJ6BjCYdaZx+02sEj6aWBZSKF2uTxWgFMhtZELXcjtN0oE/o1tz
gkpXZOeYFMTPDXvEwziGOTUe3RGS/dIwjljzmBuC1/4T2qzv+b/N404MUlzXWBJz
l1lBtS0bWGy2rvPzK8CSaAaQ6pAPUI5DHoASnZ54TLPp8+eWmnKycLgsIdNqQect
T3xdmKLxiNJGEeVywV1F6ap3498RIKbfWldnVk7tEMbqIrc6I3XU+Wi0AQ+ol7Hy
soxnK1fb3bUmY+F8Cd9F6u4tz9Up0zFQ3vq16uOrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULllWZTnl8Hyb8fmM1K+tg8rEFUwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM1NmY5OTE2LTdhN2YtNDJhNy1hOWQ3LWU3NjYxNDEzMTAxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsn9AwDQYJKoZIhvcNAQELBQADggEBALgcnEVynhqU7+wkW/rOcBj1EhLD
jkob4Uw376UOklE+8/r1cVqT8dUcdTtDX28qyn6PtCg1YrvY3c0vLPhRyNJyOJ7Z
DFdTrDf8szKkIZEkur6Ec6/Xw47lfqcivNVGiLC8/zuoT3IxM9yirftIGL0sQ9mL
Q7iaqYn066ZfY7u6gdKLfFDPXsuyDLZ3M3tSycxrkg2HXzRMr5bvZXBcL8zCQk7v
aEMFqxDIn2sNdjgaijYtpMeb2k3TVKi1Mw0D2fnBW3W7altWbHh7DWwiqRvtTOO7
gTLgcORPEQAmE5N5psv7rkVSTeOUOufeoCvSA0j+FSVqft1dT+s++sTsVxQ=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:25 2025 by rpki-client