Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/442a9945-a1f5-4c6a-ae66-324e494fdd70.roa
File: 442a9945-a1f5-4c6a-ae66-324e494fdd70.roa (raw, json)
Hash identifier: FPRwBVcpMALhcSUW/Vi5wm/s+sLTJMM3xk2aYvtbDOY=
Subject key identifier: 70:36:45:4E:60:06:CD:D7:2B:EF:37:BD:26:BC:58:02:EC:52:F0:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 745F5F3726E5291448F1EA0672BA02D2C5588969
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/442a9945-a1f5-4c6a-ae66-324e494fdd70.roa
Signing time: Mon 20 Oct 2025 02:40:10 +0000
ROA not before: Mon 20 Oct 2025 02:40:10 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5f:5f:37:26:e5:29:14:48:f1:ea:06:72:ba:02:d2:c5:58:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:40:10 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=ab6030ffbcc368c8c93edd7aa3daf6de68a1bd923716136a8e5aa51c8d55f41b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:70:af:f6:45:90:4d:97:80:7d:af:1e:76:
54:9b:8d:ad:a9:62:10:95:75:a6:73:0b:44:8e:9b:
25:01:79:cc:8b:b4:81:19:e0:3a:61:34:6a:cb:9d:
0b:83:5a:22:44:2c:e7:93:2e:85:3c:0e:a0:c8:8c:
32:00:5d:6f:3e:a6:08:31:f6:ea:50:a7:f3:e5:80:
5a:b1:b5:d7:5e:96:93:37:92:77:ed:79:79:62:fc:
df:5e:a0:15:6a:8b:4c:d6:9f:97:94:d8:17:19:3f:
ff:11:d1:6b:21:44:9e:3f:3e:8d:01:62:d9:6e:9b:
10:23:de:b8:c8:52:7b:50:bc:ad:3e:57:8e:51:fb:
34:79:37:75:d6:da:69:d7:c5:44:21:96:25:13:ab:
86:ec:3d:e9:b6:95:db:0f:3b:55:7f:4b:fa:37:02:
89:6c:ef:86:76:7d:47:5e:00:00:55:f2:c8:c2:fe:
54:0e:43:9b:c3:85:0f:bf:94:14:9e:60:38:47:28:
71:3c:da:fb:15:56:70:fb:3a:dc:33:a1:d7:94:7a:
16:42:21:4f:62:29:1b:49:b5:62:ea:cf:bd:a9:6b:
41:25:27:02:ac:d9:0d:e8:d6:0b:f2:40:44:31:ac:
a5:3e:92:73:da:25:2c:57:d9:76:41:9d:68:f9:16:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:45:4E:60:06:CD:D7:2B:EF:37:BD:26:BC:58:02:EC:52:F0:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/442a9945-a1f5-4c6a-ae66-324e494fdd70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.92.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:1b:4a:38:ce:32:c5:fe:ec:02:60:07:2c:f2:bb:8f:73:61:
89:47:68:10:d8:bc:8f:f2:fa:82:86:e2:70:56:d7:07:c6:5e:
75:0f:b0:b9:5c:a7:57:4c:33:0b:68:26:4d:ec:0b:a3:2d:e6:
4c:ab:7e:dc:6b:14:de:a4:3e:f6:fb:f5:56:0b:be:8f:79:c1:
fa:55:a4:28:6b:a3:a5:25:2b:97:7a:08:05:e0:4b:ef:a5:3b:
3b:3a:63:57:61:31:51:88:9c:d3:ec:ca:46:cb:5a:1d:48:6a:
99:49:03:50:f9:9f:5d:c9:df:61:c7:c6:81:ae:b8:cf:24:d0:
dc:92:ca:2e:4c:17:23:e0:ea:6a:56:ab:e1:3a:87:09:2f:fc:
69:46:8e:7b:76:12:03:80:55:50:23:d1:f4:15:b5:04:cf:2a:
f8:17:fe:e4:5f:3b:cd:d2:31:92:8c:b6:dc:c9:46:0b:70:04:
3b:5e:66:9a:d0:54:78:f0:4b:8f:25:30:fc:52:de:68:45:6f:
eb:ac:6a:f4:c5:c8:d5:13:ea:32:3a:e2:b5:6f:39:c7:ff:d0:
2c:45:79:e2:69:cc:80:34:4c:3c:ad:1e:a6:1a:37:81:02:94:
cf:e0:ea:e0:d6:b1:37:14:15:3c:c6:4e:96:6c:43:e5:91:38:
a1:1b:8d:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdF9fNyblKRRI8eoGcroC0sVYiWkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDI0MDEwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYjYwMzBmZmJjYzM2OGM4YzkzZWRkN2FhM2RhZjZkZTY4
YTFiZDkyMzcxNjEzNmE4ZTVhYTUxYzhkNTVmNDFiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXM3Cv9kWQTZeAfa8edlSbja2pYhCVdaZzC0SOmyUBecyL
tIEZ4DphNGrLnQuDWiJELOeTLoU8DqDIjDIAXW8+pggx9upQp/PlgFqxtddelpM3
knfteXli/N9eoBVqi0zWn5eU2BcZP/8R0WshRJ4/Po0BYtlumxAj3rjIUntQvK0+
V45R+zR5N3XW2mnXxUQhliUTq4bsPem2ldsPO1V/S/o3Aols74Z2fUdeAABV8sjC
/lQOQ5vDhQ+/lBSeYDhHKHE82vsVVnD7OtwzodeUehZCIU9iKRtJtWLqz72pa0El
JwKs2Q3o1gvyQEQxrKU+knPaJSxX2XZBnWj5Fuc5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcDZFTmAGzdcr7ze9JrxYAuxS8DQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ0MmE5OTQ1LWExZjUtNGM2YS1hZTY2LTMyNGU0OTRmZGQ3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnlwwDQYJKoZIhvcNAQELBQADggEBAMgbSjjOMsX+7AJgByzyu49zYYlH
aBDYvI/y+oKG4nBW1wfGXnUPsLlcp1dMMwtoJk3sC6Mt5kyrftxrFN6kPvb79VYL
vo95wfpVpChro6UlK5d6CAXgS++lOzs6Y1dhMVGInNPsykbLWh1IaplJA1D5n13J
32HHxoGuuM8k0NySyi5MFyPg6mpWq+E6hwkv/GlGjnt2EgOAVVAj0fQVtQTPKvgX
/uRfO83SMZKMttzJRgtwBDteZprQVHjwS48lMPxS3mhFb+usavTFyNUT6jI64rVv
Ocf/0CxFeeJpzIA0TDytHqYaN4EClM/g6uDWsTcUFTzGTpZsQ+WROKEbjdw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:48 2025 by rpki-client