Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef2be3e-59fc-4ced-8b7e-7686d919feb1.roa
File: 3ef2be3e-59fc-4ced-8b7e-7686d919feb1.roa (raw, json)
Hash identifier: OC7L7qLdMtkxag23QQtPDYM1DQjJ8HnTzU5iuYRZyWg=
Subject key identifier: CC:92:AF:BC:3F:B2:76:59:B2:2E:36:86:4C:BC:6D:86:D9:33:CB:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5645F65F4963F563CB63919C80FD36664B6B0548
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef2be3e-59fc-4ced-8b7e-7686d919feb1.roa
Signing time: Mon 20 Oct 2025 00:10:39 +0000
ROA not before: Mon 20 Oct 2025 00:10:39 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:45:f6:5f:49:63:f5:63:cb:63:91:9c:80:fd:36:66:4b:6b:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:10:39 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=cec9071070cbc85a5c853b281352b25d06f6771f72a55b1184519bc55cabb5cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:12:b9:42:3f:5a:3d:ed:2e:8e:39:a0:b6:
74:c1:30:c6:f3:f0:4f:41:b8:53:aa:a7:16:62:95:
fd:8e:e9:02:fc:de:41:b1:30:e1:13:78:1d:2e:df:
a0:a9:f5:73:47:52:a8:e1:3b:a4:51:2a:55:37:e7:
0b:ad:f8:62:07:0c:e5:ab:10:0c:3d:95:06:d9:b1:
a9:30:94:db:1b:2c:5c:e7:48:f3:31:18:b2:23:05:
5d:bf:6d:f7:86:b7:0e:26:ad:4a:a3:4e:be:54:c5:
92:d7:2a:fd:bd:77:a1:63:77:c2:d9:ca:17:aa:6a:
0c:82:65:f6:15:5f:88:3f:8a:ee:06:44:f4:57:93:
b7:cc:09:bd:f3:51:d5:c1:40:32:54:aa:58:85:71:
63:cc:72:50:04:7a:c9:c5:e5:9b:5c:f8:20:d4:a1:
8f:cf:2e:67:ce:51:11:ff:6f:b2:05:e8:0f:e3:dc:
7d:0c:9e:6f:51:8f:7e:fe:ce:e8:a1:84:ae:9f:fc:
a7:3d:52:e3:9a:62:18:bd:61:60:c3:66:2c:e4:a7:
f8:14:73:99:07:74:5e:64:ae:ac:74:e2:5e:38:3c:
25:04:c0:7e:fd:f5:a2:9b:dd:33:32:67:bd:64:9a:
de:a7:f8:12:a7:79:fd:4d:9c:eb:da:4f:10:1d:17:
01:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:92:AF:BC:3F:B2:76:59:B2:2E:36:86:4C:BC:6D:86:D9:33:CB:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3ef2be3e-59fc-4ced-8b7e-7686d919feb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.154.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2a:1d:33:0d:b1:3e:2c:34:82:77:5b:06:2d:17:db:34:73:
bd:ac:87:ae:41:86:2e:b5:b4:75:8a:b0:5b:15:d9:a7:12:47:
c7:2a:9e:18:2f:fd:6f:d1:0f:e4:26:e5:25:bb:33:1a:80:2c:
d6:75:f2:88:75:d7:b0:5d:e7:64:4d:ed:9f:d2:02:7e:30:d1:
38:76:3e:5b:08:2d:f6:41:57:9b:13:40:1a:d7:78:da:b1:64:
d9:82:8f:85:bf:d9:56:7f:d7:dc:f1:ae:9f:58:8f:04:6d:5d:
23:c1:d1:d1:14:6a:af:9c:5c:d0:34:fd:51:bc:61:ac:2d:fc:
67:50:cb:e7:2c:92:10:68:7f:32:3a:1f:a0:0f:33:45:46:9e:
d7:5e:c4:63:cf:06:68:96:30:4a:f5:0e:cf:c7:db:e1:5a:cd:
dc:4d:8b:23:ac:8c:89:1c:7e:a7:8e:28:d4:76:c6:16:76:cb:
c9:de:a0:20:7f:38:d6:38:29:e7:02:47:c4:45:59:39:71:85:
6c:65:ea:5e:dc:2b:d4:f2:8d:8e:fa:ec:ee:94:b0:68:09:0d:
c6:32:78:9e:f1:00:0a:ab:d8:c3:e1:a3:87:37:f4:15:a6:7c:
c6:43:b8:eb:35:cd:95:6f:bb:31:24:27:3e:ef:50:47:d5:95:
a1:0e:34:2a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVkX2X0lj9WPLY5GcgP02ZktrBUgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAxMDM5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWM5MDcxMDcwY2JjODVhNWM4NTNiMjgxMzUyYjI1ZDA2
ZjY3NzFmNzJhNTViMTE4NDUxOWJjNTVjYWJiNWNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKTRK5Qj9aPe0ujjmgtnTBMMbz8E9BuFOqpxZilf2O6QL8
3kGxMOETeB0u36Cp9XNHUqjhO6RRKlU35wut+GIHDOWrEAw9lQbZsakwlNsbLFzn
SPMxGLIjBV2/bfeGtw4mrUqjTr5UxZLXKv29d6Fjd8LZyheqagyCZfYVX4g/iu4G
RPRXk7fMCb3zUdXBQDJUqliFcWPMclAEesnF5Ztc+CDUoY/PLmfOURH/b7IF6A/j
3H0Mnm9Rj37+zuihhK6f/Kc9UuOaYhi9YWDDZizkp/gUc5kHdF5krqx04l44PCUE
wH799aKb3TMyZ71kmt6n+BKnef1NnOvaTxAdFwH5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzJKvvD+ydlmyLjaGTLxthtkzy7QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNlZjJiZTNlLTU5ZmMtNGNlZC04YjdlLTc2ODZkOTE5ZmViMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn5owDQYJKoZIhvcNAQELBQADggEBADkqHTMNsT4sNIJ3WwYtF9s0c72s
h65Bhi61tHWKsFsV2acSR8cqnhgv/W/RD+Qm5SW7MxqALNZ18oh117Bd52RN7Z/S
An4w0Th2PlsILfZBV5sTQBrXeNqxZNmCj4W/2VZ/19zxrp9YjwRtXSPB0dEUaq+c
XNA0/VG8Yawt/GdQy+cskhBofzI6H6APM0VGntdexGPPBmiWMEr1Ds/H2+FazdxN
iyOsjIkcfqeOKNR2xhZ2y8neoCB/ONY4KecCR8RFWTlxhWxl6l7cK9TyjY767O6U
sGgJDcYyeJ7xAAqr2MPho4c39BWmfMZDuOs1zZVvuzEkJz7vUEfVlaEONCo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:57 2025 by rpki-client