Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4f228-d10c-4bdd-b7df-1f3e62e5f7f3.roa
File: 77b4f228-d10c-4bdd-b7df-1f3e62e5f7f3.roa (raw, json)
Hash identifier: RK3CzchOf+RaRz5RXwx/PphFMj5sYlHlmSnQ7sg8xYI=
Subject key identifier: EF:F0:5A:A6:F2:E8:99:6C:6E:A7:37:7E:30:FE:FF:25:1E:D1:24:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40D617DFF6366AB9CD8F812FD8EB7BDA7F38D945
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4f228-d10c-4bdd-b7df-1f3e62e5f7f3.roa
Signing time: Sun 19 Oct 2025 00:31:51 +0000
ROA not before: Sun 19 Oct 2025 00:31:51 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d6:17:df:f6:36:6a:b9:cd:8f:81:2f:d8:eb:7b:da:7f:38:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:31:51 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=ada4abae230bd6c06c9bcdc2e3686120f68d1d3609d31cf9b796da7c1a79970f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:da:0c:e2:48:80:25:c7:c3:4e:51:50:f4:
7e:75:ca:d5:d2:80:f0:4f:a8:08:23:72:96:66:f4:
71:cb:10:03:90:6b:b5:96:3d:98:82:6c:4b:04:85:
f6:dc:44:a3:0d:f4:6d:03:18:ba:e7:3c:b4:eb:df:
cb:a7:2a:d2:00:e3:5a:5a:59:5c:3d:03:9b:af:aa:
28:da:2f:9d:69:fb:a4:ae:2e:19:9f:2b:c9:a2:eb:
37:bc:4d:56:1d:89:63:85:88:70:a0:63:26:70:87:
8e:ab:ac:a7:3d:27:a6:2c:90:a7:c0:46:16:80:b6:
54:e2:a7:fa:d0:ba:92:26:01:a7:f8:26:99:4c:13:
3a:4d:59:b1:49:f4:f8:27:51:55:72:a7:97:fc:9b:
c0:e0:c3:1e:39:10:17:65:f4:ff:a4:24:b2:4a:69:
8e:63:6e:13:f8:17:b5:2d:c1:e1:10:c0:56:7e:ae:
7d:8a:cb:65:67:44:94:03:c6:42:69:15:2e:74:a7:
21:60:16:f0:29:6c:59:19:70:0c:bb:17:0d:58:5c:
1b:e8:89:c3:51:81:b7:8d:ab:4d:7b:33:27:d5:ee:
81:99:be:a7:a6:18:6f:54:c7:01:47:28:db:59:35:
96:41:ff:45:52:96:17:1b:18:82:56:ec:31:4d:ff:
25:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:5A:A6:F2:E8:99:6C:6E:A7:37:7E:30:FE:FF:25:1E:D1:24:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77b4f228-d10c-4bdd-b7df-1f3e62e5f7f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.92.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e8:d2:72:0a:2c:36:83:8e:ac:77:83:57:ae:d4:3c:98:12:
2d:52:09:ed:45:4f:d9:0d:c2:f1:03:6f:40:92:8c:ae:5e:ad:
a1:83:49:25:02:fe:a7:8a:26:75:65:8d:44:2f:14:d1:bc:2c:
a7:ec:d8:3a:c7:62:43:92:11:ff:b2:d8:a1:f9:01:b8:96:89:
e4:37:43:42:e0:d1:70:bd:8a:1a:2c:08:5c:44:2e:5a:c3:b0:
c2:fd:b1:fa:34:4a:59:06:01:5e:51:df:e3:59:13:62:ec:af:
02:f7:ca:60:01:de:3c:22:72:23:13:a7:a6:08:8f:94:bb:10:
0c:3b:14:75:6a:64:5a:f0:16:98:28:a7:d8:f5:12:88:99:93:
02:a0:c9:8e:8f:47:3b:99:65:f4:58:bd:85:aa:36:de:5f:c3:
8b:ad:98:d2:99:9c:7f:cf:ef:bd:54:e6:5a:29:70:e5:27:eb:
97:51:8d:71:1f:15:8b:62:c9:9d:2f:9d:29:18:8d:74:17:5f:
eb:5a:63:17:26:ab:16:0b:68:ff:c5:8c:28:2a:5f:00:bd:ec:
e2:b3:de:bd:b5:82:16:92:4f:d2:4e:06:93:48:27:b6:ec:7c:
f9:73:51:81:c7:c1:e9:7d:f1:9f:0c:1c:78:d9:b7:e4:80:58:
db:b8:9a:35
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQNYX3/Y2arnNj4Ev2Ot72n842UUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAzMTUxWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhZGE0YWJhZTIzMGJkNmMwNmM5YmNkYzJlMzY4NjEyMGY2
OGQxZDM2MDlkMzFjZjliNzk2ZGE3YzFhNzk5NzBmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEBtoM4kiAJcfDTlFQ9H51ytXSgPBPqAgjcpZm9HHLEAOQ
a7WWPZiCbEsEhfbcRKMN9G0DGLrnPLTr38unKtIA41paWVw9A5uvqijaL51p+6Su
LhmfK8mi6ze8TVYdiWOFiHCgYyZwh46rrKc9J6YskKfARhaAtlTip/rQupImAaf4
JplMEzpNWbFJ9PgnUVVyp5f8m8Dgwx45EBdl9P+kJLJKaY5jbhP4F7UtweEQwFZ+
rn2Ky2VnRJQDxkJpFS50pyFgFvApbFkZcAy7Fw1YXBvoicNRgbeNq017MyfV7oGZ
vqemGG9UxwFHKNtZNZZB/0VSlhcbGIJW7DFN/yVxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7/BapvLomWxupzd+MP7/JR7RJAowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzc3YjRmMjI4LWQxMGMtNGJkZC1iN2RmLTFmM2U2MmU1ZjdmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi1wwDQYJKoZIhvcNAQELBQADggEBAGjo0nIKLDaDjqx3g1eu1DyYEi1S
Ce1FT9kNwvEDb0CSjK5eraGDSSUC/qeKJnVljUQvFNG8LKfs2DrHYkOSEf+y2KH5
AbiWieQ3Q0Lg0XC9ihosCFxELlrDsML9sfo0SlkGAV5R3+NZE2LsrwL3ymAB3jwi
ciMTp6YIj5S7EAw7FHVqZFrwFpgop9j1EoiZkwKgyY6PRzuZZfRYvYWqNt5fw4ut
mNKZnH/P771U5lopcOUn65dRjXEfFYtiyZ0vnSkYjXQXX+taYxcmqxYLaP/FjCgq
XwC97OKz3r21ghaST9JOBpNIJ7bsfPlzUYHHwel98Z8MHHjZt+SAWNu4mjU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:26 2025 by rpki-client