Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36cc5665-2025-48c0-add3-132d1e81bd8c.roa
File: 36cc5665-2025-48c0-add3-132d1e81bd8c.roa (raw, json)
Hash identifier: 1ioqnE7rW9cfofhqoOTgUjeTegxxY/Ch9QVs94VQm3w=
Subject key identifier: 79:74:D6:C7:62:1C:0E:C2:46:A8:7F:5E:80:6A:10:69:58:C2:7A:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A392B81F0ADCB300B0455A81ABB9167941B3E27
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36cc5665-2025-48c0-add3-132d1e81bd8c.roa
Signing time: Sun 19 Oct 2025 02:50:10 +0000
ROA not before: Sun 19 Oct 2025 02:50:10 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:39:2b:81:f0:ad:cb:30:0b:04:55:a8:1a:bb:91:67:94:1b:3e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:50:10 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d97d8c2e495c9633a84803bacb037d012f6882e1cf1a4e82ce7aaa7c6ffac9e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:ce:99:b9:71:92:cd:95:06:b9:8a:19:f7:
5b:92:79:bc:2a:30:15:94:12:fe:4c:f0:0b:8d:e7:
34:dd:8f:be:6e:5e:77:8b:1f:f0:46:38:77:4f:e9:
02:8c:47:42:a9:6f:db:6a:21:cb:a1:f9:81:e9:3e:
d5:f6:46:d1:2c:d6:ab:2c:7a:1e:59:ab:d8:5b:60:
e3:fe:2c:58:0f:37:ed:3b:00:67:ce:0f:a4:ed:af:
10:e3:ef:db:03:6a:36:46:ae:2c:7b:e3:ec:ad:2a:
db:ef:ec:99:d9:a7:f3:a2:90:00:a5:ae:ec:6d:9c:
54:b7:72:fd:e6:fe:c2:85:7f:bb:3d:b0:23:46:c4:
86:a8:00:c7:2e:29:33:f8:64:d0:6d:51:dc:53:24:
d4:e5:28:5e:9b:3e:93:28:fc:3e:52:7f:3a:a8:f8:
81:c2:32:1a:74:e9:90:99:c7:ba:60:ad:33:cf:08:
cd:ae:3f:d1:ca:43:2e:21:d8:c2:e0:ff:8e:1b:1d:
dd:47:b3:63:ec:9c:d6:9b:de:6e:3a:75:1f:db:0a:
98:57:b5:56:8a:ff:eb:86:c9:ef:fd:68:6d:be:de:
15:67:e9:db:3e:78:6e:c9:10:72:cd:72:12:e7:4c:
c7:dd:47:d0:34:85:1f:be:2f:8a:84:2b:23:2e:2b:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:74:D6:C7:62:1C:0E:C2:46:A8:7F:5E:80:6A:10:69:58:C2:7A:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36cc5665-2025-48c0-add3-132d1e81bd8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:52:00:7d:4d:01:f7:77:45:f8:28:f4:12:be:28:5b:84:9c:
a6:5b:d7:51:6b:d4:eb:f9:39:24:53:d3:3b:bc:0e:ad:a5:05:
d1:97:95:a6:a9:bf:a1:ca:a9:0f:18:e6:24:8f:19:7d:77:26:
c5:f3:6f:66:26:bc:41:43:f2:81:7c:ea:0f:87:b2:95:15:d5:
bf:9d:62:f7:17:ad:ab:78:16:e1:ca:c4:d4:d2:c3:77:9d:ab:
f8:c9:8d:59:31:ca:23:b0:15:54:49:37:d8:63:47:d3:d3:c6:
02:58:00:ed:8c:4b:a3:33:8f:52:d7:df:6c:94:62:ef:a6:69:
69:fb:6e:2d:ed:08:33:23:e6:38:6c:83:62:51:b7:11:31:8c:
42:20:bd:aa:a8:38:cc:05:51:07:47:b9:ee:43:70:f0:a2:62:
c2:62:14:57:11:ba:b4:1c:8d:23:d7:70:83:d7:dd:3a:39:02:
bb:5b:c5:cc:98:3a:61:99:08:0a:b6:26:a2:3b:7d:ce:0b:b3:
8d:1d:15:d4:b1:d5:92:5e:2c:63:f6:d4:86:c1:d0:0a:01:76:
d2:95:40:cd:fc:d6:80:f8:8c:e6:de:d8:7d:56:10:f3:67:b5:
87:68:ea:fa:31:58:71:66:3e:f2:77:66:80:06:d9:43:a9:74:
65:56:a1:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGjkrgfCtyzALBFWoGruRZ5QbPicwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDI1MDEwWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTdkOGMyZTQ5NWM5NjMzYTg0ODAzYmFjYjAzN2QwMTJm
Njg4MmUxY2YxYTRlODJjZTdhYWE3YzZmZmFjOWUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCcYM6ZuXGSzZUGuYoZ91uSebwqMBWUEv5M8AuN5zTdj75u
XneLH/BGOHdP6QKMR0Kpb9tqIcuh+YHpPtX2RtEs1qsseh5Zq9hbYOP+LFgPN+07
AGfOD6TtrxDj79sDajZGrix74+ytKtvv7JnZp/OikAClruxtnFS3cv3m/sKFf7s9
sCNGxIaoAMcuKTP4ZNBtUdxTJNTlKF6bPpMo/D5Sfzqo+IHCMhp06ZCZx7pgrTPP
CM2uP9HKQy4h2MLg/44bHd1Hs2PsnNab3m46dR/bCphXtVaK/+uGye/9aG2+3hVn
6ds+eG7JEHLNchLnTMfdR9A0hR++L4qEKyMuK7iHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeXTWx2IcDsJGqH9egGoQaVjCeiAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2Y2M1NjY1LTIwMjUtNDhjMC1hZGQzLTEzMmQxZTgxYmQ4Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi1cwDQYJKoZIhvcNAQELBQADggEBADxSAH1NAfd3Rfgo9BK+KFuEnKZb
11Fr1Ov5OSRT0zu8Dq2lBdGXlaapv6HKqQ8Y5iSPGX13JsXzb2YmvEFD8oF86g+H
spUV1b+dYvcXrat4FuHKxNTSw3edq/jJjVkxyiOwFVRJN9hjR9PTxgJYAO2MS6Mz
j1LX32yUYu+maWn7bi3tCDMj5jhsg2JRtxExjEIgvaqoOMwFUQdHue5DcPCiYsJi
FFcRurQcjSPXcIPX3To5ArtbxcyYOmGZCAq2JqI7fc4Ls40dFdSx1ZJeLGP21IbB
0AoBdtKVQM381oD4jObe2H1WEPNntYdo6voxWHFmPvJ3ZoAG2UOpdGVWoYk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:29 2025 by rpki-client