Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa
File: 47ea71af-c756-4483-ae88-621f2adb4c49.roa (raw, json)
Hash identifier: b2PNWG2TWdJ+qkYNAxDNdV1qaM0nxRDVU2cKdpzlNd4=
Subject key identifier: B6:5D:90:97:11:CD:B7:19:0A:89:42:EF:B8:0E:57:F1:23:F8:CF:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 254B2D6E9AD21F89A906DD82B5BCB9F3CA7E71C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa
Signing time: Sun 19 Oct 2025 00:11:19 +0000
ROA not before: Sun 19 Oct 2025 00:11:19 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 104.153.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4b:2d:6e:9a:d2:1f:89:a9:06:dd:82:b5:bc:b9:f3:ca:7e:71:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:11:19 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=bb2ba712b7b4eeb3ae86723099636ea607e66d328cc67c04ec4cfb684d52369f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:19:b0:3f:69:8d:d5:18:01:3c:c3:ba:4a:
9d:37:a5:4b:dd:6c:f1:ed:da:5e:c2:36:9d:61:0f:
dc:21:87:19:bf:30:90:da:23:8d:87:c9:fc:ce:65:
f8:81:be:59:3e:ea:38:a4:ec:30:a5:7f:9a:24:85:
7c:d6:04:8a:26:32:77:84:a9:5b:af:89:c4:48:57:
70:ec:9f:8c:b1:c0:b9:ed:f0:3e:61:49:ef:96:4b:
76:a6:11:42:61:de:64:e3:1e:b9:06:98:c2:52:9a:
6a:bf:39:0e:1b:1d:61:a8:19:e9:7f:c1:2e:6b:77:
33:28:e6:6b:02:6c:53:ba:18:7f:33:b6:99:2d:38:
ee:00:3f:e0:66:40:23:d5:3d:3e:15:6e:f1:f2:c8:
01:b7:2f:b4:6f:69:83:48:9d:99:66:de:c3:66:5c:
6f:e4:51:23:74:ff:fd:91:6e:d0:fe:b1:3b:bd:ce:
51:d2:85:0f:61:09:7d:66:76:f9:60:2c:fe:a3:2e:
e3:58:c1:82:8e:31:a0:33:ae:a2:41:17:7e:ae:b5:
ca:a6:67:c4:ee:78:2b:ca:fa:48:0d:d5:aa:71:c4:
b7:fe:15:08:ab:1d:41:d8:f9:ed:cb:6b:1b:f3:86:
f6:63:9c:0f:bc:e6:ef:25:e5:46:e2:a2:4c:d8:cd:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5D:90:97:11:CD:B7:19:0A:89:42:EF:B8:0E:57:F1:23:F8:CF:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47ea71af-c756-4483-ae88-621f2adb4c49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.116.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:25:27:1f:4e:ec:af:06:df:6b:b9:a3:13:2f:9f:6b:2e:e3:
b3:11:07:87:85:18:f3:1e:86:c7:8c:f9:ca:e6:26:a3:fd:3a:
e3:38:51:18:80:1e:40:d8:69:f0:62:28:5a:db:f0:b5:e4:83:
52:76:09:8b:0a:6f:49:15:29:81:c3:bd:8b:30:f3:a3:97:28:
3c:cc:4b:9f:51:cf:bf:f1:09:bd:a9:ee:0b:c8:17:b2:d2:32:
6f:3d:05:9d:8e:5a:ae:58:e0:3d:02:4f:b4:fb:69:5e:ae:e4:
8b:08:5c:8c:a0:e0:42:c8:6e:b3:b8:38:e8:d4:91:2b:7f:ea:
05:9e:c3:9d:01:c9:11:5a:94:b7:d3:66:60:40:ca:14:19:8e:
37:74:9f:c0:f5:4f:31:6e:cf:ac:c4:92:dc:c3:a8:27:54:40:
ea:00:8d:bb:e2:6f:81:46:83:3c:43:3f:83:b2:0b:8d:6d:cf:
9b:fe:4a:5d:6b:62:5f:03:5f:f0:a3:2c:03:1c:18:0f:02:ee:
4c:5e:85:ee:e2:5d:d2:c6:39:f7:fc:0d:c7:5f:19:9b:76:ee:
be:b9:f4:b2:bc:47:1d:06:6c:78:e7:ad:2b:98:f0:41:f4:83:
94:5f:57:63:03:52:7c:06:54:d3:a4:34:76:f9:39:06:1c:53:
ca:8c:58:a4
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJUstbprSH4mpBt2Ctby588p+ccgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAxMTE5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiYjJiYTcxMmI3YjRlZWIzYWU4NjcyMzA5OTYzNmVhNjA3
ZTY2ZDMyOGNjNjdjMDRlYzRjZmI2ODRkNTIzNjlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCkyhmwP2mN1RgBPMO6Sp03pUvdbPHt2l7CNp1hD9whhxm/
MJDaI42HyfzOZfiBvlk+6jik7DClf5okhXzWBIomMneEqVuvicRIV3Dsn4yxwLnt
8D5hSe+WS3amEUJh3mTjHrkGmMJSmmq/OQ4bHWGoGel/wS5rdzMo5msCbFO6GH8z
tpktOO4AP+BmQCPVPT4VbvHyyAG3L7RvaYNInZlm3sNmXG/kUSN0//2RbtD+sTu9
zlHShQ9hCX1mdvlgLP6jLuNYwYKOMaAzrqJBF36utcqmZ8TueCvK+kgN1apxxLf+
FQirHUHY+e3LaxvzhvZjnA+85u8l5UbiokzYzS+ZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUtl2QlxHNtxkKiULvuA5X8SP4zz0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ3ZWE3MWFmLWM3NTYtNDQ4My1hZTg4LTYyMWYyYWRiNGM0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABomXQwDQYJKoZIhvcNAQELBQADggEBALwlJx9O7K8G32u5oxMvn2su47MR
B4eFGPMehseM+crmJqP9OuM4URiAHkDYafBiKFrb8LXkg1J2CYsKb0kVKYHDvYsw
86OXKDzMS59Rz7/xCb2p7gvIF7LSMm89BZ2OWq5Y4D0CT7T7aV6u5IsIXIyg4ELI
brO4OOjUkSt/6gWew50ByRFalLfTZmBAyhQZjjd0n8D1TzFuz6zEktzDqCdUQOoA
jbvib4FGgzxDP4OyC41tz5v+Sl1rYl8DX/CjLAMcGA8C7kxehe7iXdLGOff8Dcdf
GZt27r659LK8Rx0GbHjnrSuY8EH0g5RfV2MDUnwGVNOkNHb5OQYcU8qMWKQ=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:32:49 2025 by rpki-client