Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59020d10-33a8-455b-ab1c-cdb48298dcea.roa
File: 59020d10-33a8-455b-ab1c-cdb48298dcea.roa (raw, json)
Hash identifier: nRfAbsykI2O1Kw8GAkRSjjFSfsk+lr2PUr5SzhQmYmM=
Subject key identifier: 8E:CC:FC:17:D3:65:34:55:91:47:49:63:1A:EA:AA:4C:3E:C3:5A:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0564A2C83266DF710758224744472E7142183AF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59020d10-33a8-455b-ab1c-cdb48298dcea.roa
Signing time: Mon 20 Oct 2025 06:31:30 +0000
ROA not before: Mon 20 Oct 2025 06:31:30 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:64:a2:c8:32:66:df:71:07:58:22:47:44:47:2e:71:42:18:3a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:31:30 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d4b87271303bf0c483c62e8fc277cbb7c9f5d71883431f2d46f4dcc4d16b1721, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d5:f4:e2:f2:c0:bc:b9:06:e2:b7:1f:8c:5c:
32:84:69:8e:3a:56:d3:fe:0f:31:0d:fe:ac:ba:1a:
b6:87:09:cb:de:7b:67:90:4e:14:97:99:fb:18:3d:
45:64:a0:4d:b1:64:be:9a:2e:f0:12:66:d9:66:54:
57:8e:df:56:ec:70:71:9c:57:9c:50:cf:2c:60:b8:
ed:98:e5:31:12:f4:40:21:a1:b6:b0:38:bc:90:f9:
fb:0a:7a:82:03:0b:b1:34:64:d4:ac:ed:94:92:74:
68:96:2d:59:24:5f:22:3e:97:4e:3b:53:9b:1e:46:
4e:c1:d6:0e:30:3c:c4:3d:7f:0f:a5:37:89:63:e5:
09:a3:ec:41:f1:26:2c:a2:32:6e:ca:21:bc:25:ae:
06:25:d2:20:c4:f5:b5:e6:8a:74:f3:8e:cf:9b:2c:
2b:4f:0e:db:18:5d:92:bc:d5:bc:9c:18:ca:6e:a9:
7c:1a:d0:2f:62:8c:3c:54:86:12:3e:a5:12:2c:68:
05:76:1f:66:b4:04:88:6f:f1:9a:e1:5b:05:30:27:
04:f0:79:8b:91:8b:76:83:1b:bf:96:a5:35:78:7e:
37:7f:10:59:a8:be:bd:fd:40:ea:9b:43:8f:e9:d0:
e4:aa:63:b8:c6:ac:aa:d1:72:28:e4:23:c6:dc:0b:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CC:FC:17:D3:65:34:55:91:47:49:63:1A:EA:AA:4C:3E:C3:5A:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59020d10-33a8-455b-ab1c-cdb48298dcea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.224.0/19
Signature Algorithm: sha256WithRSAEncryption
bf:d9:c9:57:f5:99:50:57:fb:20:38:83:8d:85:6b:75:8a:6b:
39:63:b6:44:99:58:8c:84:c6:3c:6d:e1:d0:05:c8:53:66:00:
f8:bb:49:87:d4:8c:05:5b:40:64:cc:70:5f:d7:94:5f:c9:da:
a7:73:7e:eb:7d:03:36:2f:85:c2:e2:5c:22:0e:f8:07:52:b2:
70:7e:db:93:7a:9c:62:76:c0:06:04:1c:5e:f4:02:3a:b4:1d:
c9:1e:12:2c:82:32:e9:51:eb:15:cd:d3:48:dc:1b:be:9b:0a:
b4:e2:37:bf:07:ab:d3:b8:19:7b:82:80:dc:74:75:da:ae:fb:
b0:a8:01:27:9b:da:b7:f4:0d:d5:11:80:1c:8a:54:b2:ff:47:
7c:93:a7:ca:09:25:f4:3c:e6:b4:74:2e:f1:3e:04:ec:ea:2a:
0f:9a:e0:e6:73:1a:c6:96:64:86:99:b2:cf:da:86:ea:93:48:
a1:8c:b0:22:4b:3a:99:c3:04:ad:48:44:af:46:ea:fc:42:9e:
80:f1:8b:30:39:1d:00:a5:65:73:87:ec:78:c4:80:fc:59:bb:
03:2c:44:c7:9c:01:dc:ff:de:bd:33:6e:4f:49:8f:7d:19:c0:
bd:3a:d2:c0:85:7a:77:04:cc:8a:73:86:0e:1a:cb:41:77:fa:
9f:af:91:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBWSiyDJm33EHWCJHREcucUIYOvcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYzMTMwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNGI4NzI3MTMwM2JmMGM0ODNjNjJlOGZjMjc3Y2JiN2M5
ZjVkNzE4ODM0MzFmMmQ0NmY0ZGNjNGQxNmIxNzIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCc1fTi8sC8uQbitx+MXDKEaY46VtP+DzEN/qy6GraHCcve
e2eQThSXmfsYPUVkoE2xZL6aLvASZtlmVFeO31bscHGcV5xQzyxguO2Y5TES9EAh
obawOLyQ+fsKeoIDC7E0ZNSs7ZSSdGiWLVkkXyI+l047U5seRk7B1g4wPMQ9fw+l
N4lj5Qmj7EHxJiyiMm7KIbwlrgYl0iDE9bXminTzjs+bLCtPDtsYXZK81bycGMpu
qXwa0C9ijDxUhhI+pRIsaAV2H2a0BIhv8ZrhWwUwJwTweYuRi3aDG7+WpTV4fjd/
EFmovr39QOqbQ4/p0OSqY7jGrKrRcijkI8bcC9V7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjsz8F9NlNFWRR0ljGuqqTD7DWscwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5MDIwZDEwLTMzYTgtNDU1Yi1hYjFjLWNkYjQ4Mjk4ZGNlYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVsneAwDQYJKoZIhvcNAQELBQADggEBAL/ZyVf1mVBX+yA4g42Fa3WKazlj
tkSZWIyExjxt4dAFyFNmAPi7SYfUjAVbQGTMcF/XlF/J2qdzfut9AzYvhcLiXCIO
+AdSsnB+25N6nGJ2wAYEHF70Ajq0HckeEiyCMulR6xXN00jcG76bCrTiN78Hq9O4
GXuCgNx0ddqu+7CoASeb2rf0DdURgByKVLL/R3yTp8oJJfQ85rR0LvE+BOzqKg+a
4OZzGsaWZIaZss/ahuqTSKGMsCJLOpnDBK1IRK9G6vxCnoDxizA5HQClZXOH7HjE
gPxZuwMsRMecAdz/3r0zbk9Jj30ZwL060sCFencEzIpzhg4ay0F3+p+vkVo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:30 2025 by rpki-client