Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbb9e8b-01d3-4041-974c-2cabc9e7db14.roa
File: 6fbb9e8b-01d3-4041-974c-2cabc9e7db14.roa (raw, json)
Hash identifier: zTuvJyoDcomdPmaEtzbTU+67Cz/GAY7uP1rbLW8tifs=
Subject key identifier: E4:1D:BD:EB:2E:93:62:DE:1E:37:A9:82:49:30:5C:FC:58:2C:2B:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53DCEF92A5FC6FF459EE58515B7D903828204164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbb9e8b-01d3-4041-974c-2cabc9e7db14.roa
Signing time: Mon 20 Oct 2025 06:02:16 +0000
ROA not before: Mon 20 Oct 2025 06:02:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:dc:ef:92:a5:fc:6f:f4:59:ee:58:51:5b:7d:90:38:28:20:41:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:02:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=80cae7362af73b291f7c182cfc94d19e0171161b94b29df1a1cd728f01b3ce73, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c9:f8:e8:cc:c3:93:30:8a:43:6d:a3:dd:1e:
29:af:fe:cd:d8:18:3c:bc:97:ba:b9:90:07:48:3d:
59:ee:9b:cf:d3:71:cf:86:09:14:c4:d7:d8:d7:62:
27:15:ca:22:89:67:52:b0:48:c7:a3:89:2e:4c:50:
3b:c4:52:ef:f4:f3:2f:91:d0:12:68:8d:05:a0:b7:
54:47:16:3d:e8:ae:12:3e:16:f7:20:0f:ca:17:a3:
6f:3c:56:10:c2:e9:36:af:82:92:ec:d4:a9:95:de:
26:c3:15:cb:67:15:ed:b1:26:f6:51:86:ad:90:c2:
29:b3:5a:8a:5f:b8:20:97:3b:e0:a9:87:a8:68:62:
29:9f:a1:b7:36:cd:dc:75:8d:57:8e:6c:41:90:1e:
c2:8f:d1:09:f6:47:ac:76:3c:b8:00:73:45:fd:7a:
1b:e2:22:d0:ff:ac:cf:6b:79:ff:2c:18:8e:d1:18:
b4:f9:44:56:bd:f3:63:ec:b8:90:7b:b6:44:64:23:
49:56:09:f4:7b:4d:08:c1:bd:6a:f3:2a:4f:28:d9:
86:cc:31:b3:c0:b8:a8:40:08:fe:08:6f:ce:63:3c:
90:b3:c6:97:7f:b3:5f:57:d6:7f:23:72:3f:9f:8e:
c8:88:b2:9f:e8:1c:3c:c1:65:38:55:51:22:b8:00:
3c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:1D:BD:EB:2E:93:62:DE:1E:37:A9:82:49:30:5C:FC:58:2C:2B:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fbb9e8b-01d3-4041-974c-2cabc9e7db14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.135.0/24
Signature Algorithm: sha256WithRSAEncryption
68:67:a6:25:56:9b:56:1d:c5:a6:f7:51:79:0d:10:47:9b:23:
cc:1a:30:d4:27:9b:a7:b8:75:3f:ba:96:a1:84:a9:8e:b2:d5:
c6:df:3f:a0:ab:29:3d:d3:86:69:a6:77:25:ab:1c:69:f7:58:
07:c3:80:77:2c:3e:58:85:e0:00:5c:42:2f:00:f6:da:83:b9:
55:01:e0:90:1b:14:24:91:ea:7c:d5:ca:64:be:e9:67:7d:a3:
39:26:fa:12:c9:5d:bf:6f:c0:5b:f1:c5:44:42:4e:b6:b3:bf:
f9:55:b9:28:29:65:9f:32:2d:3c:34:c6:ad:27:ea:c8:c5:0b:
ee:21:11:5f:40:c0:39:ea:12:4a:a5:11:af:66:cc:cb:0e:81:
7a:19:ed:7c:60:ea:2e:80:03:a4:7d:b4:6e:38:2a:16:22:ab:
29:11:5c:41:da:1b:d7:ae:33:a5:b8:6c:ad:5e:7d:ca:cd:66:
11:b3:28:1b:7c:d8:5f:26:82:9b:49:cb:f4:35:ad:04:d0:b0:
20:d4:20:26:33:0a:30:9c:4b:82:ec:08:34:06:bb:32:b7:ce:
37:c3:1d:7d:72:f4:e8:4c:fa:44:58:ed:89:18:6c:86:05:3a:
e1:d5:99:8e:b2:25:ee:d4:64:cf:6d:ed:cc:e5:91:f3:9b:6b:
57:30:18:f2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU9zvkqX8b/RZ7lhRW32QOCggQWQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYwMjE2WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4MGNhZTczNjJhZjczYjI5MWY3YzE4MmNmYzk0ZDE5ZTAx
NzExNjFiOTRiMjlkZjFhMWNkNzI4ZjAxYjNjZTczMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTyfjozMOTMIpDbaPdHimv/s3YGDy8l7q5kAdIPVnum8/T
cc+GCRTE19jXYicVyiKJZ1KwSMejiS5MUDvEUu/08y+R0BJojQWgt1RHFj3orhI+
FvcgD8oXo288VhDC6TavgpLs1KmV3ibDFctnFe2xJvZRhq2QwimzWopfuCCXO+Cp
h6hoYimfobc2zdx1jVeObEGQHsKP0Qn2R6x2PLgAc0X9ehviItD/rM9ref8sGI7R
GLT5RFa982PsuJB7tkRkI0lWCfR7TQjBvWrzKk8o2YbMMbPAuKhACP4Ib85jPJCz
xpd/s19X1n8jcj+fjsiIsp/oHDzBZThVUSK4ADwrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5B296y6TYt4eN6mCSTBc/FgsK3UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZmYmI5ZThiLTAxZDMtNDA0MS05NzRjLTJjYWJjOWU3ZGIxNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnocwDQYJKoZIhvcNAQELBQADggEBAGhnpiVWm1Ydxab3UXkNEEebI8wa
MNQnm6e4dT+6lqGEqY6y1cbfP6CrKT3ThmmmdyWrHGn3WAfDgHcsPliF4ABcQi8A
9tqDuVUB4JAbFCSR6nzVymS+6Wd9ozkm+hLJXb9vwFvxxURCTrazv/lVuSgpZZ8y
LTw0xq0n6sjFC+4hEV9AwDnqEkqlEa9mzMsOgXoZ7Xxg6i6AA6R9tG44KhYiqykR
XEHaG9euM6W4bK1efcrNZhGzKBt82F8mgptJy/Q1rQTQsCDUICYzCjCcS4LsCDQG
uzK3zjfDHX1y9OhM+kRY7YkYbIYFOuHVmY6yJe7UZM9t7czlkfOba1cwGPI=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:12 2025 by rpki-client