Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7598e5a8-5454-4711-bd45-7be164ddcac0.roa
File: 7598e5a8-5454-4711-bd45-7be164ddcac0.roa (raw, json)
Hash identifier: vWDInwiZcfEYxz8IL7VLu3DTbcz8cKRij1UIKlqdIJc=
Subject key identifier: 3B:CF:AF:90:C2:A5:21:E9:5A:FF:31:75:D8:73:55:E1:A2:55:B3:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DA0DFDBA8E10FD0EAB8E79A8A25346B4B786575
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7598e5a8-5454-4711-bd45-7be164ddcac0.roa
Signing time: Sun 19 Oct 2025 03:20:04 +0000
ROA not before: Sun 19 Oct 2025 03:20:04 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:a0:df:db:a8:e1:0f:d0:ea:b8:e7:9a:8a:25:34:6b:4b:78:65:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:20:04 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=3130f80a34cc3047bfb5d07a92db6bb821b6f408f6af6b0aa906fbbebe425698, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:ad:c7:c5:42:e8:2f:0f:90:14:0e:7c:45:
65:46:ee:c3:eb:7f:be:64:c5:8b:46:54:a3:fc:9c:
a7:bb:05:5d:ab:0f:70:29:d8:3a:8e:df:e5:ac:d9:
44:fe:b7:9f:d3:51:96:3b:df:05:ba:2a:2f:1b:f3:
bd:a5:bc:b1:5d:f6:d1:c6:03:41:c8:dc:73:cb:55:
b4:94:79:ed:c3:45:bf:8e:41:00:50:24:10:ee:14:
a3:2c:3f:50:47:3a:d3:65:42:fa:d3:bf:f8:34:b4:
95:ac:d1:c9:23:2f:54:89:30:61:47:39:32:ec:be:
ec:0c:84:8d:e5:23:71:da:3b:b1:db:6b:35:0e:01:
be:9d:30:68:85:97:f8:71:8d:ee:71:a9:d3:65:c5:
d4:c2:95:16:ab:fe:52:34:f0:37:26:ec:7b:10:77:
a1:bb:31:0b:2b:30:0e:80:07:97:2a:e0:a2:e7:75:
15:25:d2:16:a1:ab:c2:ed:77:50:06:a2:8f:4f:d1:
c9:1d:a1:a5:45:69:ae:b4:54:e6:44:51:1d:7f:fe:
46:ee:f8:dc:1c:37:dc:31:c0:e4:32:2f:a3:f7:da:
a6:e4:50:bc:02:b6:b7:f8:89:00:ef:49:2a:99:7f:
18:db:27:0b:6c:f9:83:fa:8f:82:18:b3:68:4c:f6:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:AF:90:C2:A5:21:E9:5A:FF:31:75:D8:73:55:E1:A2:55:B3:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7598e5a8-5454-4711-bd45-7be164ddcac0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:c3:2b:30:38:e2:fb:50:04:63:b2:ed:b6:4e:8a:64:b2:
9e:5c:0f:13:d9:70:52:bf:fd:6e:4d:19:31:e0:e2:77:0e:7d:
cd:02:79:28:83:34:53:54:0a:83:5e:de:84:8c:9a:d7:04:88:
7f:49:93:03:ab:20:b8:2a:2b:65:ad:b4:da:f0:77:32:ca:ac:
86:dd:0b:fd:69:96:e7:97:d6:1a:a1:4c:dc:88:cb:0b:f1:ae:
f7:15:d5:d5:8a:95:eb:3b:04:55:5e:ee:02:7c:eb:b4:c9:34:
da:29:34:75:d1:5a:1e:a5:f0:b5:97:35:4e:c9:2c:dd:fc:2a:
1e:23:a9:21:a2:9f:dd:c8:d5:f2:13:3b:14:04:40:d6:5f:38:
82:53:26:a0:83:b2:45:54:86:7b:2a:10:9d:99:13:69:b8:cb:
79:0c:00:cc:6b:6e:03:2a:a6:5d:fe:e0:b1:20:ac:f1:e2:5b:
d9:4f:1f:8d:5b:02:99:69:d3:8b:74:f2:7e:5f:87:1b:e2:e2:
bb:56:39:9d:f4:c2:c4:3d:50:d5:6a:fd:57:6b:cd:bc:c8:99:
e8:0a:57:62:ce:03:6f:c4:64:65:fd:e1:c7:d5:ff:e0:5b:13:
e3:1a:8f:fc:ba:3d:32:bd:b6:87:b4:f4:82:af:99:d6:68:17:
c4:ff:d7:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXaDf26jhD9DquOeaiiU0a0t4ZXUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMyMDA0WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzMTMwZjgwYTM0Y2MzMDQ3YmZiNWQwN2E5MmRiNmJiODIx
YjZmNDA4ZjZhZjZiMGFhOTA2ZmJiZWJlNDI1Njk4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIRK3HxULoLw+QFA58RWVG7sPrf75kxYtGVKP8nKe7BV2r
D3Ap2DqO3+Ws2UT+t5/TUZY73wW6Ki8b872lvLFd9tHGA0HI3HPLVbSUee3DRb+O
QQBQJBDuFKMsP1BHOtNlQvrTv/g0tJWs0ckjL1SJMGFHOTLsvuwMhI3lI3HaO7Hb
azUOAb6dMGiFl/hxje5xqdNlxdTClRar/lI08Dcm7HsQd6G7MQsrMA6AB5cq4KLn
dRUl0hahq8Ltd1AGoo9P0ckdoaVFaa60VOZEUR1//kbu+NwcN9wxwOQyL6P32qbk
ULwCtrf4iQDvSSqZfxjbJwts+YP6j4IYs2hM9nVLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUO8+vkMKlIela/zF12HNV4aJVswgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc1OThlNWE4LTU0NTQtNDcxMS1iZDQ1LTdiZTE2NGRkY2FjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi3gwDQYJKoZIhvcNAQELBQADggEBAIy2wyswOOL7UARjsu22Topksp5c
DxPZcFK//W5NGTHg4ncOfc0CeSiDNFNUCoNe3oSMmtcEiH9JkwOrILgqK2WttNrw
dzLKrIbdC/1plueX1hqhTNyIywvxrvcV1dWKles7BFVe7gJ867TJNNopNHXRWh6l
8LWXNU7JLN38Kh4jqSGin93I1fITOxQEQNZfOIJTJqCDskVUhnsqEJ2ZE2m4y3kM
AMxrbgMqpl3+4LEgrPHiW9lPH41bAplp04t08n5fhxvi4rtWOZ30wsQ9UNVq/Vdr
zbzImegKV2LOA2/EZGX94cfV/+BbE+Maj/y6PTK9toe09IKvmdZoF8T/1y8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:39 2025 by rpki-client