Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76c599da-2f69-4a1b-aef8-d158b75cad0d.roa
File: 76c599da-2f69-4a1b-aef8-d158b75cad0d.roa (raw, json)
Hash identifier: 6iqL0CXHWUvLIwD9DkGwx37ufX0XLHbrQBepommcNok=
Subject key identifier: 82:5C:59:90:E8:33:D7:06:F5:0D:D6:D5:CF:5B:35:BD:3C:14:46:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61432CF0188C70C4546DFE0AEBBC070E5AF2BA28
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76c599da-2f69-4a1b-aef8-d158b75cad0d.roa
Signing time: Mon 20 Oct 2025 05:30:55 +0000
ROA not before: Mon 20 Oct 2025 05:30:55 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:2c:f0:18:8c:70:c4:54:6d:fe:0a:eb:bc:07:0e:5a:f2:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:30:55 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=0338e8355b7fd555bba9c91f0d80b1bac3e6b599721e57bed97be6c760f9cf1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:e7:53:37:87:bf:9b:48:45:ac:d1:80:af:
80:45:25:9b:5b:d2:b3:d4:72:0e:71:81:ed:e4:3d:
42:a8:bf:96:29:fd:44:7a:5c:eb:21:6e:f6:81:b2:
0f:d9:2d:7f:b4:f5:b7:de:37:23:a1:88:5e:07:45:
d8:86:c2:c1:94:aa:7a:d2:7c:62:f1:93:df:8d:b1:
01:69:dd:f4:80:be:af:e5:80:84:76:9d:c6:6c:06:
7c:1b:d0:59:16:28:33:5c:07:cd:40:f7:af:f1:21:
4a:0f:29:5e:f6:33:7e:2c:2c:49:c4:1d:b3:93:01:
15:63:cb:83:59:76:0a:4e:68:8d:0c:8d:18:0c:2f:
f5:81:56:41:ea:06:5e:a4:18:fd:76:88:7f:77:d7:
87:f0:af:b6:95:f5:a1:d2:31:13:4b:c6:47:d7:64:
e2:99:2a:39:0d:13:37:2b:bb:9f:da:ca:be:c3:90:
39:03:98:65:44:90:8f:d2:56:d4:00:87:28:36:b4:
09:23:bf:d7:4a:3a:40:96:46:b5:ec:8d:c2:28:ea:
69:3a:31:16:21:34:35:b2:3a:75:2c:2c:e5:7a:6d:
b3:72:34:f5:83:46:97:e3:d0:be:c7:6b:1f:0e:0c:
f7:b8:d9:ff:07:80:c4:2d:16:28:db:fa:a2:ab:e1:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5C:59:90:E8:33:D7:06:F5:0D:D6:D5:CF:5B:35:BD:3C:14:46:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76c599da-2f69-4a1b-aef8-d158b75cad0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.175.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e8:f6:13:44:82:45:f1:0b:1a:2f:67:14:65:ed:9c:44:01:
bb:a1:59:cf:6f:58:b7:d8:52:a0:8e:12:43:7b:e6:a6:e3:7b:
9b:a0:44:81:b5:d9:9f:92:da:00:5f:fe:c5:dd:00:2d:cb:de:
a9:76:52:ce:7f:1d:f2:a9:f9:a2:58:d8:c3:27:45:cb:9f:fe:
75:71:6c:4d:6a:34:fe:90:9b:98:98:78:a1:2c:57:45:3f:a5:
0d:72:00:a3:59:c6:a9:c5:db:a7:29:a7:bc:b4:3c:84:33:5e:
fb:80:a6:d7:3d:3e:17:dc:7a:ac:92:de:ba:52:30:a0:1c:ba:
76:86:4e:61:0a:d5:87:ae:d3:5c:70:4e:ce:e9:25:11:8c:e4:
f7:22:19:9e:c0:d3:7a:27:49:54:bd:d8:78:7e:0b:a9:60:b4:
a5:7b:93:69:d5:cb:59:5c:12:45:c9:48:8b:e9:fb:d8:a2:77:
c0:34:d2:64:c4:26:c6:2d:9b:70:9a:ab:29:c9:54:3b:a3:0a:
0a:01:50:c1:2d:bf:13:a0:ca:c1:f0:07:0b:01:a0:9a:34:80:
44:92:28:44:65:22:89:ab:c9:6d:33:21:ca:a0:75:bd:b5:61:
5a:72:32:70:fb:4b:01:62:96:f2:9a:a5:7c:2d:2c:43:b8:94:
19:d6:04:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYUMs8BiMcMRUbf4K67wHDlryuigwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUzMDU1WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMzM4ZTgzNTViN2ZkNTU1YmJhOWM5MWYwZDgwYjFiYWMz
ZTZiNTk5NzIxZTU3YmVkOTdiZTZjNzYwZjljZjFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbxOdTN4e/m0hFrNGAr4BFJZtb0rPUcg5xge3kPUKov5Yp
/UR6XOshbvaBsg/ZLX+09bfeNyOhiF4HRdiGwsGUqnrSfGLxk9+NsQFp3fSAvq/l
gIR2ncZsBnwb0FkWKDNcB81A96/xIUoPKV72M34sLEnEHbOTARVjy4NZdgpOaI0M
jRgML/WBVkHqBl6kGP12iH9314fwr7aV9aHSMRNLxkfXZOKZKjkNEzcru5/ayr7D
kDkDmGVEkI/SVtQAhyg2tAkjv9dKOkCWRrXsjcIo6mk6MRYhNDWyOnUsLOV6bbNy
NPWDRpfj0L7Hax8ODPe42f8HgMQtFijb+qKr4fcPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUglxZkOgz1wb1DdbVz1s1vTwURikwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc2YzU5OWRhLTJmNjktNGExYi1hZWY4LWQxNThiNzVjYWQwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsna8wDQYJKoZIhvcNAQELBQADggEBADno9hNEgkXxCxovZxRl7ZxEAbuh
Wc9vWLfYUqCOEkN75qbje5ugRIG12Z+S2gBf/sXdAC3L3ql2Us5/HfKp+aJY2MMn
Rcuf/nVxbE1qNP6Qm5iYeKEsV0U/pQ1yAKNZxqnF26cpp7y0PIQzXvuAptc9Phfc
eqyS3rpSMKAcunaGTmEK1Yeu01xwTs7pJRGM5PciGZ7A03onSVS92Hh+C6lgtKV7
k2nVy1lcEkXJSIvp+9iid8A00mTEJsYtm3CaqynJVDujCgoBUMEtvxOgysHwBwsB
oJo0gESSKERlIomryW0zIcqgdb21YVpyMnD7SwFilvKapXwtLEO4lBnWBIw=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:41 2025 by rpki-client