Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59248837-0012-4ae5-97de-ae05488a121b.roa
File: 59248837-0012-4ae5-97de-ae05488a121b.roa (raw, json)
Hash identifier: J9fb4L1SG1djsMzss2XQ+3hiGBBj2Xi9bq2t9//Fvt4=
Subject key identifier: 23:11:B8:AB:B7:EF:3E:37:5B:A9:A7:D9:46:9D:54:45:16:75:60:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3306F5A4E35CFAC2EF6EC1D5B652C299F181BFF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59248837-0012-4ae5-97de-ae05488a121b.roa
Signing time: Mon 20 Oct 2025 04:52:28 +0000
ROA not before: Mon 20 Oct 2025 04:52:28 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:06:f5:a4:e3:5c:fa:c2:ef:6e:c1:d5:b6:52:c2:99:f1:81:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:52:28 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=e9695867d420196e481fba5a2dfb27b9fe3be02f6f3760d1bc7f9d704f8c9edb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:85:cd:ca:5a:5f:dd:e4:7e:f1:cc:97:15:c4:
3d:eb:b7:62:27:31:84:24:3c:0c:ee:bb:d3:f7:dd:
b9:e8:90:12:72:96:14:64:36:41:4a:98:fc:4c:02:
31:bf:ea:88:0f:d3:43:2c:70:ab:04:8b:b2:43:7c:
7e:3b:67:2b:b6:1b:88:66:1f:ce:1c:7c:5b:01:ab:
d8:02:6e:ec:b5:88:af:3f:18:03:9e:a9:9d:bd:55:
c5:7f:99:dd:4c:4b:6b:44:c0:fb:6d:ea:ce:54:c1:
0c:f2:fa:57:07:b9:9a:84:13:47:92:ed:2e:21:d9:
f5:a4:94:23:d6:c7:9a:05:f8:c8:8c:24:16:2e:d9:
ca:24:23:8b:d7:5e:79:fb:a5:6c:ef:17:47:8d:b2:
aa:df:39:1b:02:8a:91:09:0f:f3:b0:3e:66:e5:c7:
ab:00:06:ba:28:2b:59:dd:70:be:3d:70:35:45:47:
84:c0:94:fd:16:15:5b:36:86:20:a6:54:49:95:17:
52:b7:82:db:32:41:52:67:0b:97:1a:34:a6:46:e9:
ce:60:d1:66:81:9d:3d:01:2b:21:01:3e:1d:bd:c5:
03:22:3a:e4:d0:59:ab:19:1e:26:96:68:bd:bd:3f:
e9:4c:22:67:57:ca:99:6d:d4:9a:dd:10:3e:88:5f:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:11:B8:AB:B7:EF:3E:37:5B:A9:A7:D9:46:9D:54:45:16:75:60:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59248837-0012-4ae5-97de-ae05488a121b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.104.0/22
Signature Algorithm: sha256WithRSAEncryption
87:28:a0:1a:5e:f0:f8:60:a7:96:6d:65:02:dd:ff:5b:d7:6a:
49:38:d0:4d:b3:2a:8e:23:53:4e:16:18:7a:e2:c7:0a:53:ec:
d2:38:15:15:ed:64:89:6b:47:11:af:6c:22:7d:4e:2d:ff:6d:
46:6f:65:89:f9:27:af:0f:82:d7:35:1c:20:94:7b:59:e9:12:
ab:12:64:24:23:ea:58:52:59:9e:ac:c2:f4:fc:62:2f:f9:4e:
2c:17:df:d5:09:36:43:53:21:e7:40:c9:01:c1:f0:34:25:98:
0b:49:9f:4d:eb:e3:91:70:97:8a:4b:5c:fa:12:97:be:90:60:
32:62:04:a1:4c:bf:9c:33:bd:fd:b1:03:13:ac:69:dc:47:55:
d4:9e:90:86:06:0b:21:3c:74:d0:cb:0a:f2:3d:36:1c:6d:3b:
1e:ae:59:24:08:4d:92:98:e8:19:9a:eb:43:2a:55:c8:04:e2:
aa:f4:2d:76:d1:38:cf:b1:da:6d:9a:0f:fd:92:bc:6d:f3:89:
6f:55:93:5c:db:57:a8:96:d7:45:22:37:08:c5:e8:ed:d2:4f:
89:a6:6d:b9:b6:29:30:38:09:a3:de:5d:5c:d6:31:8d:82:7d:
aa:be:18:3d:03:c3:aa:8c:72:45:2e:6e:ff:b0:03:ee:a5:95:
b8:e1:f6:fa
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMwb1pONc+sLvbsHVtlLCmfGBv/IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQ1MjI4WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BlOTY5NTg2N2Q0MjAxOTZlNDgxZmJhNWEyZGZiMjdiOWZl
M2JlMDJmNmYzNzYwZDFiYzdmOWQ3MDRmOGM5ZWRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIhc3KWl/d5H7xzJcVxD3rt2InMYQkPAzuu9P33bnokBJy
lhRkNkFKmPxMAjG/6ogP00MscKsEi7JDfH47Zyu2G4hmH84cfFsBq9gCbuy1iK8/
GAOeqZ29VcV/md1MS2tEwPtt6s5UwQzy+lcHuZqEE0eS7S4h2fWklCPWx5oF+MiM
JBYu2cokI4vXXnn7pWzvF0eNsqrfORsCipEJD/OwPmblx6sABrooK1ndcL49cDVF
R4TAlP0WFVs2hiCmVEmVF1K3gtsyQVJnC5caNKZG6c5g0WaBnT0BKyEBPh29xQMi
OuTQWasZHiaWaL29P+lMImdXyplt1JrdED6IXw8FAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUIxG4q7fvPjdbqafZRp1URRZ1YAwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5MjQ4ODM3LTAwMTItNGFlNS05N2RlLWFlMDU0ODhhMTIxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnWgwDQYJKoZIhvcNAQELBQADggEBAIcooBpe8Phgp5ZtZQLd/1vXakk4
0E2zKo4jU04WGHrixwpT7NI4FRXtZIlrRxGvbCJ9Ti3/bUZvZYn5J68Pgtc1HCCU
e1npEqsSZCQj6lhSWZ6swvT8Yi/5TiwX39UJNkNTIedAyQHB8DQlmAtJn03r45Fw
l4pLXPoSl76QYDJiBKFMv5wzvf2xAxOsadxHVdSekIYGCyE8dNDLCvI9NhxtOx6u
WSQITZKY6Bma60MqVcgE4qr0LXbROM+x2m2aD/2SvG3ziW9Vk1zbV6iW10UiNwjF
6O3ST4mmbbm2KTA4CaPeXVzWMY2Cfaq+GD0Dw6qMckUubv+wA+6llbjh9vo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:52 2025 by rpki-client