Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64572478-a60e-4940-aaab-15be5f0a7443.roa
File: 64572478-a60e-4940-aaab-15be5f0a7443.roa (raw, json)
Hash identifier: kfxPHbUazcpuFM7fTFquPCrZ9akUPMa4/5b4kN6E51U=
Subject key identifier: 9F:83:DB:FE:BB:6F:1F:6A:FA:24:D6:DA:C1:9E:70:FF:B2:43:46:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12348DFE3E151BB074958A7E2197EC5A88A6879C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64572478-a60e-4940-aaab-15be5f0a7443.roa
Signing time: Mon 20 Oct 2025 03:20:56 +0000
ROA not before: Mon 20 Oct 2025 03:20:56 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:34:8d:fe:3e:15:1b:b0:74:95:8a:7e:21:97:ec:5a:88:a6:87:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:20:56 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=22fb4e69bce982288c6798fac024a5635c4da163be4b5705fdefb59c346e58d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:41:dc:31:53:96:0b:00:40:73:4e:60:69:
8a:c4:25:67:de:74:a6:1c:6c:9f:c8:cf:e9:89:f8:
c6:5a:08:0e:24:78:85:ab:5c:ea:ae:f2:9e:ee:95:
1f:da:f5:4e:0e:42:ca:91:29:a0:74:95:90:1d:18:
bf:97:96:2d:a2:81:d9:bf:ba:bc:1a:9d:e5:87:95:
5c:4b:fe:ac:c9:ab:9d:a7:ec:f5:ce:fb:c7:52:87:
c2:83:d8:08:22:fe:fc:ec:b7:ae:e5:7d:4b:34:ef:
ba:cd:c1:49:9c:f8:49:4b:d9:37:67:10:57:9e:f0:
55:51:ad:05:f5:64:0a:ed:73:e0:5e:4b:bb:e6:46:
fa:62:da:56:cc:8f:a7:6e:90:1c:41:07:db:62:f4:
73:62:ed:72:b9:2b:e9:31:01:13:b4:bc:b7:e1:e6:
19:f0:04:c4:65:91:ab:a7:bb:c8:b6:3e:41:18:18:
cc:71:05:70:a4:15:4a:e7:ee:fb:fa:df:60:1e:dd:
f1:f1:ff:ac:6a:c3:ce:1e:37:d4:3b:5e:9d:19:9b:
c5:f5:3d:9d:74:88:0d:c9:8c:75:bc:2a:a7:e6:6e:
2c:84:47:e7:75:43:da:b2:33:2e:85:a0:07:44:b0:
d6:94:a4:cb:54:1b:d0:e5:c9:9e:d1:d7:ae:5e:80:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:DB:FE:BB:6F:1F:6A:FA:24:D6:DA:C1:9E:70:FF:B2:43:46:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/64572478-a60e-4940-aaab-15be5f0a7443.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.165.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e5:25:d1:54:48:1c:0d:95:4d:0a:bc:de:6a:cd:33:d0:f7:
d8:0f:85:a1:a2:60:ad:18:da:0e:af:90:15:63:44:aa:25:f3:
a3:38:76:54:fe:c7:44:1a:c1:31:50:75:d8:4a:fc:e3:f8:03:
fd:36:9e:9e:15:b1:ed:0f:91:29:d4:10:b7:21:da:5d:1c:00:
4a:21:2e:11:7e:83:77:d4:99:85:f3:16:ba:ab:6e:00:c1:d0:
2b:95:4a:cd:0a:8f:00:ca:32:ee:b1:64:b6:30:2b:7e:96:77:
dd:29:1f:2d:9d:52:b9:1b:7e:54:16:5f:91:2b:c5:9b:ac:1d:
8b:28:d2:70:ea:f9:66:14:7e:0b:cf:d7:d2:3a:03:e5:17:c4:
af:de:e8:f3:58:ce:3c:0a:6b:03:a3:93:38:74:00:fb:9d:6d:
81:10:93:49:9e:24:d8:b4:f8:6f:60:f1:6c:dc:b3:2b:2d:84:
21:68:e2:36:29:e0:35:74:98:b2:e8:db:75:8a:85:88:b8:ad:
c1:b9:ad:8e:d3:08:61:fd:bc:c1:ac:4b:ce:35:05:99:c5:97:
98:aa:54:c1:14:ff:b6:c5:e7:8b:d4:c3:04:a8:ed:e6:4f:05:
78:0a:21:95:87:9d:b6:51:18:a2:29:49:35:50:66:41:e9:f4:
01:3e:5c:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEjSN/j4VG7B0lYp+IZfsWoimh5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDMyMDU2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMmZiNGU2OWJjZTk4MjI4OGM2Nzk4ZmFjMDI0YTU2MzVj
NGRhMTYzYmU0YjU3MDVmZGVmYjU5YzM0NmU1OGQ0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz2UHcMVOWCwBAc05gaYrEJWfedKYcbJ/Iz+mJ+MZaCA4k
eIWrXOqu8p7ulR/a9U4OQsqRKaB0lZAdGL+Xli2igdm/urwaneWHlVxL/qzJq52n
7PXO+8dSh8KD2Agi/vzst67lfUs077rNwUmc+ElL2TdnEFee8FVRrQX1ZArtc+Be
S7vmRvpi2lbMj6dukBxBB9ti9HNi7XK5K+kxARO0vLfh5hnwBMRlkaunu8i2PkEY
GMxxBXCkFUrn7vv632Ae3fHx/6xqw84eN9Q7Xp0Zm8X1PZ10iA3JjHW8KqfmbiyE
R+d1Q9qyMy6FoAdEsNaUpMtUG9DlyZ7R165egEa1AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUn4Pb/rtvH2r6JNbawZ5w/7JDRiwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0NTcyNDc4LWE2MGUtNDk0MC1hYWFiLTE1YmU1ZjBhNzQ0My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn6UwDQYJKoZIhvcNAQELBQADggEBAIDlJdFUSBwNlU0KvN5qzTPQ99gP
haGiYK0Y2g6vkBVjRKol86M4dlT+x0QawTFQddhK/OP4A/02np4Vse0PkSnUELch
2l0cAEohLhF+g3fUmYXzFrqrbgDB0CuVSs0KjwDKMu6xZLYwK36Wd90pHy2dUrkb
flQWX5ErxZusHYso0nDq+WYUfgvP19I6A+UXxK/e6PNYzjwKawOjkzh0APudbYEQ
k0meJNi0+G9g8WzcsysthCFo4jYp4DV0mLLo23WKhYi4rcG5rY7TCGH9vMGsS841
BZnFl5iqVMEU/7bF54vUwwSo7eZPBXgKIZWHnbZRGKIpSTVQZkHp9AE+XD8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:44 2025 by rpki-client