Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d455592-3270-47a9-a140-7b4fe0fb6a62.roa
File: 5d455592-3270-47a9-a140-7b4fe0fb6a62.roa (raw, json)
Hash identifier: VMsIh9or8VARdgTeiZVMCKRe3NUkruNYLxAi0fyeB/M=
Subject key identifier: A0:0A:00:A0:45:97:FB:32:B1:16:3B:4F:05:72:16:C6:10:13:D7:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D0517BD5EEE3DA250ECCDAD8A1A935515637F6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d455592-3270-47a9-a140-7b4fe0fb6a62.roa
Signing time: Sun 19 Oct 2025 02:42:10 +0000
ROA not before: Sun 19 Oct 2025 02:42:10 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:05:17:bd:5e:ee:3d:a2:50:ec:cd:ad:8a:1a:93:55:15:63:7f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:42:10 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=217629d4993b7a089f305ff81c86a95d70c76f1cd851cf8e9a8eeb8e3548e372, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:ee:7d:b9:8a:5b:f7:7b:d5:82:10:a2:5b:
ac:58:49:8f:9f:37:5f:30:db:ae:16:42:04:4c:ed:
49:2e:2b:d6:51:40:be:98:d3:8e:6d:eb:25:47:a9:
c3:a7:a3:c6:39:2f:c4:21:c2:ce:07:ff:c7:a4:ee:
05:f4:71:8d:36:9c:e0:a9:64:fe:f4:f9:8b:a6:cd:
6d:b2:bf:bd:81:6f:2e:f3:87:85:94:e2:27:02:08:
ba:1f:76:47:36:20:01:40:e3:ff:f7:0c:14:22:0d:
57:e3:33:a4:a2:42:fb:30:60:6d:bd:18:ea:ed:6f:
47:61:3b:d3:61:ee:45:fd:b1:59:00:95:ee:ed:d1:
71:c8:f3:43:0c:e3:f7:ef:b8:77:2d:26:9b:98:b6:
83:6b:1c:09:b0:cc:17:60:e7:3e:a6:3c:34:7c:59:
af:94:b9:d8:79:5c:4d:fa:34:d2:fb:d2:1d:2b:52:
22:89:99:ff:f6:04:4e:b4:5a:dd:0e:fb:4c:c3:99:
8e:81:fe:07:e3:73:5f:04:5c:b4:04:f3:55:6e:d5:
d3:dc:44:b6:5e:77:36:91:0f:41:f8:a2:8c:12:9f:
38:67:9b:85:10:83:8f:ea:13:dd:90:42:49:8a:7d:
e0:3a:c6:46:61:c0:40:01:ed:48:b5:ca:b1:29:6e:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:00:A0:45:97:FB:32:B1:16:3B:4F:05:72:16:C6:10:13:D7:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d455592-3270-47a9-a140-7b4fe0fb6a62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.66.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8f:1b:df:1b:14:1d:9b:29:b1:d1:18:e8:4a:83:d8:ae:85:
c1:2c:58:10:ec:e0:46:a8:26:77:9b:d4:79:fd:db:0a:1f:09:
20:7b:bb:2a:09:ea:41:ae:b6:a2:04:80:cf:e7:8a:a5:a7:f4:
4f:95:e6:ff:5f:d3:41:f1:9f:06:2c:0a:3e:98:31:32:f2:d2:
50:ac:25:37:23:e8:60:d7:3c:af:18:7a:85:b1:50:28:b6:3d:
c3:e0:d3:5b:99:e2:34:c6:4f:9a:a6:39:40:7f:c1:2a:ae:1b:
5f:d0:96:8b:a7:43:df:b2:2f:78:6f:27:1b:a7:1d:50:77:96:
11:0c:e2:89:a9:d2:aa:7c:80:e1:57:f2:f3:73:29:39:dd:5d:
e5:ed:0d:32:b6:b5:94:70:8c:86:a5:bd:29:42:f3:32:cd:e3:
d4:5f:27:71:b4:b4:49:00:83:ed:d8:df:4e:fb:1d:a9:e9:15:
95:97:18:ab:fc:46:88:a1:dc:ad:1c:14:33:f8:2d:98:66:74:
62:bf:b7:6d:15:eb:1d:41:45:ba:65:fb:6f:1e:cc:04:4a:cd:
f7:8e:25:15:7f:6f:d2:5d:a0:6e:02:d4:1b:3a:72:a1:26:af:
b6:26:41:9e:fd:89:ef:87:52:84:8b:bb:ea:e0:04:84:ec:b6:
a3:9f:b3:14
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPQUXvV7uPaJQ7M2tihqTVRVjf2wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDI0MjEwWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTc2MjlkNDk5M2I3YTA4OWYzMDVmZjgxYzg2YTk1ZDcw
Yzc2ZjFjZDg1MWNmOGU5YThlZWI4ZTM1NDhlMzcyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9JO59uYpb93vVghCiW6xYSY+fN18w264WQgRM7UkuK9ZR
QL6Y045t6yVHqcOno8Y5L8Qhws4H/8ek7gX0cY02nOCpZP70+YumzW2yv72Bby7z
h4WU4icCCLofdkc2IAFA4//3DBQiDVfjM6SiQvswYG29GOrtb0dhO9Nh7kX9sVkA
le7t0XHI80MM4/fvuHctJpuYtoNrHAmwzBdg5z6mPDR8Wa+Uudh5XE36NNL70h0r
UiKJmf/2BE60Wt0O+0zDmY6B/gfjc18EXLQE81Vu1dPcRLZedzaRD0H4oowSnzhn
m4UQg4/qE92QQkmKfeA6xkZhwEAB7Ui1yrEpbhLZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUoAoAoEWX+zKxFjtPBXIWxhAT18YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVkNDU1NTkyLTMyNzAtNDdhOS1hMTQwLTdiNGZlMGZiNmE2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi0IwDQYJKoZIhvcNAQELBQADggEBAHqPG98bFB2bKbHRGOhKg9iuhcEs
WBDs4EaoJneb1Hn92wofCSB7uyoJ6kGutqIEgM/niqWn9E+V5v9f00HxnwYsCj6Y
MTLy0lCsJTcj6GDXPK8YeoWxUCi2PcPg01uZ4jTGT5qmOUB/wSquG1/QlounQ9+y
L3hvJxunHVB3lhEM4omp0qp8gOFX8vNzKTndXeXtDTK2tZRwjIalvSlC8zLN49Rf
J3G0tEkAg+3Y3077HanpFZWXGKv8Roih3K0cFDP4LZhmdGK/t20V6x1BRbpl+28e
zARKzfeOJRV/b9JdoG4C1Bs6cqEmr7YmQZ79ie+HUoSLu+rgBITstqOfsxQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:20 2025 by rpki-client