Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61426427-4401-40d9-b21d-0c01d175bbd5.roa
File: 61426427-4401-40d9-b21d-0c01d175bbd5.roa (raw, json)
Hash identifier: M7BeFp1qI3Uz2eZ/IKqWxuv52lJ/QVJDG5ySMyN/EqI=
Subject key identifier: 35:2F:83:D9:8C:52:32:33:76:B9:A2:2E:43:E7:79:74:30:1F:72:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12995E72E86AFD42F9961729778D4039B631A248
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61426427-4401-40d9-b21d-0c01d175bbd5.roa
Signing time: Sun 19 Oct 2025 01:10:59 +0000
ROA not before: Sun 19 Oct 2025 01:10:59 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:99:5e:72:e8:6a:fd:42:f9:96:17:29:77:8d:40:39:b6:31:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:10:59 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=12a8d555622f738a25c604af8393596bbb10d352b888004498f1fcf6067c63e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ca:c9:dc:b8:e4:e7:0c:3a:dc:d7:c7:bb:40:
fc:7d:37:a5:65:40:23:99:50:14:1b:0d:f5:eb:ea:
4c:ca:39:5d:4e:b3:68:e8:5e:42:cd:b1:0c:0d:3a:
2e:3b:d4:20:b5:46:87:4c:5d:3b:44:3b:1e:87:ed:
a4:99:06:5b:f3:57:77:ab:2f:84:14:f5:c8:0d:1c:
d5:5b:2c:f2:dc:88:ea:2f:d5:5f:f3:86:b5:c4:a0:
80:45:02:d5:83:4d:3e:3d:a7:ff:68:c1:37:cd:de:
2f:9d:5f:a7:c2:c9:34:f0:9f:68:0f:5e:9c:87:0e:
9b:27:68:91:fc:38:7d:f1:83:09:78:d4:db:a0:80:
99:5e:9f:28:e6:62:be:aa:b6:54:bf:c6:3f:2b:cf:
c3:d6:39:4f:fb:24:d7:c1:c3:2c:26:c4:66:fd:97:
46:e2:37:87:45:a3:28:57:6e:d4:08:3d:74:79:79:
7e:3a:74:49:85:7a:12:c3:3f:6c:6a:88:89:1c:f5:
94:63:51:30:7f:69:ec:90:13:b1:60:0c:51:82:8c:
74:b4:13:fc:13:7e:74:f4:30:34:08:4e:3c:7d:a5:
9d:79:fc:b3:c1:9b:34:5d:35:ff:b5:c0:f6:3e:8f:
68:0d:51:24:f7:ff:87:e6:1c:14:d5:7b:92:6d:a1:
a0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2F:83:D9:8C:52:32:33:76:B9:A2:2E:43:E7:79:74:30:1F:72:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/61426427-4401-40d9-b21d-0c01d175bbd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.57.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:69:5a:9d:5f:5b:64:71:ce:1a:0e:1c:9b:f3:35:15:e8:23:
13:06:8d:5b:8e:78:97:ca:da:e3:0c:80:39:b3:fd:c8:cc:d4:
fe:43:09:af:25:5f:60:69:09:84:fa:3c:1e:f2:52:c9:29:4d:
65:80:70:f8:b3:38:00:15:7b:99:05:17:6d:70:fb:00:25:74:
fe:5e:05:07:fb:49:1b:51:6f:32:41:01:cc:a4:ca:17:ec:9d:
d6:65:78:1e:6a:5a:90:55:ff:a6:ae:b4:5e:80:4b:05:08:25:
77:97:90:2b:41:27:04:e5:6d:1a:a0:b9:a4:c4:68:05:68:1e:
37:6c:d8:e9:70:01:40:1c:ae:b0:f6:a9:e8:a1:03:57:85:9d:
51:97:1b:b1:9b:39:31:8f:37:cf:e6:5a:04:03:16:15:ee:e7:
79:3a:07:54:f4:f8:73:7e:87:2d:d6:e8:e7:66:8d:17:0f:31:
3c:44:68:cc:fc:7d:fc:b4:df:7b:9e:9d:77:cc:a4:e8:56:85:
52:88:18:f6:02:81:98:3d:b0:b6:ba:87:62:7c:75:f6:68:ff:
d2:f5:68:c0:cd:1d:f4:4a:77:9e:48:94:cb:b6:1f:17:18:d6:
c9:67:69:15:ef:59:56:76:e2:2e:38:05:cc:b9:c3:c4:ed:f0:
3d:88:34:c2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEplecuhq/UL5lhcpd41AObYxokgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDExMDU5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxMmE4ZDU1NTYyMmY3MzhhMjVjNjA0YWY4MzkzNTk2YmJi
MTBkMzUyYjg4ODAwNDQ5OGYxZmNmNjA2N2M2M2U4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGysncuOTnDDrc18e7QPx9N6VlQCOZUBQbDfXr6kzKOV1O
s2joXkLNsQwNOi471CC1RodMXTtEOx6H7aSZBlvzV3erL4QU9cgNHNVbLPLciOov
1V/zhrXEoIBFAtWDTT49p/9owTfN3i+dX6fCyTTwn2gPXpyHDpsnaJH8OH3xgwl4
1NuggJlenyjmYr6qtlS/xj8rz8PWOU/7JNfBwywmxGb9l0biN4dFoyhXbtQIPXR5
eX46dEmFehLDP2xqiIkc9ZRjUTB/aeyQE7FgDFGCjHS0E/wTfnT0MDQITjx9pZ15
/LPBmzRdNf+1wPY+j2gNUST3/4fmHBTVe5JtoaC9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUNS+D2YxSMjN2uaIuQ+d5dDAfckEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYxNDI2NDI3LTQ0MDEtNDBkOS1iMjFkLTBjMDFkMTc1YmJkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsizkwDQYJKoZIhvcNAQELBQADggEBAL1pWp1fW2RxzhoOHJvzNRXoIxMG
jVuOeJfK2uMMgDmz/cjM1P5DCa8lX2BpCYT6PB7yUskpTWWAcPizOAAVe5kFF21w
+wAldP5eBQf7SRtRbzJBAcykyhfsndZleB5qWpBV/6autF6ASwUIJXeXkCtBJwTl
bRqguaTEaAVoHjds2OlwAUAcrrD2qeihA1eFnVGXG7GbOTGPN8/mWgQDFhXu53k6
B1T0+HN+hy3W6OdmjRcPMTxEaMz8ffy033uenXfMpOhWhVKIGPYCgZg9sLa6h2J8
dfZo/9L1aMDNHfRKd55IlMu2HxcY1slnaRXvWVZ24i44Bcy5w8Tt8D2INMI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:01 2025 by rpki-client