Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3185e4-78b1-419d-bf8d-8fb0efa3d94d.roa
File: 7f3185e4-78b1-419d-bf8d-8fb0efa3d94d.roa (raw, json)
Hash identifier: j0oHGOYmI2oKIjNLhfybw94U7Uw25pAnIfb74kLE/KE=
Subject key identifier: 63:B5:6A:79:C6:18:E3:79:B4:2B:77:50:B4:48:A6:7F:77:7B:BB:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AACB1176D860DFA7D0FCD63E7926850E76AF1FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3185e4-78b1-419d-bf8d-8fb0efa3d94d.roa
Signing time: Mon 20 Oct 2025 06:01:34 +0000
ROA not before: Mon 20 Oct 2025 06:01:34 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ac:b1:17:6d:86:0d:fa:7d:0f:cd:63:e7:92:68:50:e7:6a:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:01:34 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=07361dddfbc2c99e88ff145acd09070b33e77301a7ef2b01be138453a8b94aaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:66:1a:76:b8:91:01:4e:01:58:92:60:d2:
2a:29:6e:8d:5f:9c:ae:6e:4f:e7:44:df:82:8c:a0:
ed:2d:81:2d:84:35:4b:db:d3:68:ce:ea:4a:85:59:
77:13:a6:f7:d3:33:62:d6:ea:26:13:88:2a:8e:1f:
1a:4e:bb:a7:cb:5b:eb:84:20:c1:7c:2c:c7:6f:66:
65:af:54:1b:bd:4f:23:91:29:6f:54:95:cc:f5:e0:
24:18:ec:3f:40:af:1f:1c:ba:d7:1f:c7:ae:87:56:
96:20:8a:02:2e:00:a8:10:7f:ac:f2:f6:38:a5:8a:
55:84:7c:3e:b6:5a:a1:3a:a0:ec:4e:f7:99:24:e7:
fe:6b:85:dc:ef:19:90:91:8a:b3:7b:4f:a8:7e:5b:
7f:95:7a:d4:0f:ba:3a:0e:85:28:f7:35:e0:11:b3:
26:f9:46:24:c3:24:86:45:8c:41:1d:e2:5f:87:1b:
dc:8f:32:5b:a6:d7:a4:12:94:d4:e0:a7:52:b2:2e:
c4:02:00:4f:0d:1c:2b:d1:b1:d0:1f:35:a0:fc:9d:
8b:03:47:68:43:5d:92:4d:8c:f4:96:e5:39:ba:5f:
26:98:d6:40:8c:49:a2:86:21:6e:74:af:37:49:58:
7b:b6:f5:1c:12:d0:11:a7:f9:b5:0c:dc:50:9a:5a:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:6A:79:C6:18:E3:79:B4:2B:77:50:B4:48:A6:7F:77:7B:BB:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3185e4-78b1-419d-bf8d-8fb0efa3d94d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:e0:30:c1:f8:a1:dd:a7:8a:5d:04:f9:6b:f5:b7:49:5b:51:
8b:ae:a6:ae:6f:22:59:20:e1:1b:ec:bd:6b:fe:a8:c2:48:4d:
5c:e1:51:6b:f8:85:21:e1:d6:1f:04:b2:c6:ec:70:e1:7d:6c:
a5:2e:0d:f4:c8:bc:8e:6a:47:8b:2d:8e:29:25:64:c0:41:96:
fc:6e:6d:b2:6a:37:2a:32:9f:8e:5e:f9:6f:7d:99:e4:f7:57:
46:54:a4:d6:3b:4a:40:f2:3a:6d:85:bc:e0:2e:e8:e6:1c:06:
da:07:29:7d:da:3f:7c:5e:71:a8:96:a5:c1:6c:67:3b:b6:cb:
08:6b:e7:3a:1e:3b:d2:97:71:e1:cb:fe:0c:30:9f:c5:5c:16:
28:a1:fb:0c:c7:57:ba:8f:65:bc:60:e1:d5:d4:18:9a:0b:1c:
bc:8c:24:42:c3:1c:64:bb:58:e4:bd:46:e4:d8:7d:c7:ec:95:
b9:7a:a6:53:56:70:80:53:8c:68:e3:49:75:b8:9e:1a:e9:97:
f1:1f:43:9a:cf:af:08:64:61:72:7c:e1:2d:3f:4a:85:6d:73:
a6:49:3d:26:19:3a:36:21:d3:f2:43:b1:6f:d2:a2:55:86:57:
b5:49:f6:33:44:a5:b2:a6:2d:74:29:e1:dc:45:7f:7a:d4:1b:
2a:88:d5:2e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGqyxF22GDfp9D81j55JoUOdq8fwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYwMTM0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNzM2MWRkZGZiYzJjOTllODhmZjE0NWFjZDA5MDcwYjMz
ZTc3MzAxYTdlZjJiMDFiZTEzODQ1M2E4Yjk0YWFmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChWmYadriRAU4BWJJg0iopbo1fnK5uT+dE34KMoO0tgS2E
NUvb02jO6kqFWXcTpvfTM2LW6iYTiCqOHxpOu6fLW+uEIMF8LMdvZmWvVBu9TyOR
KW9Ulcz14CQY7D9Arx8cutcfx66HVpYgigIuAKgQf6zy9jililWEfD62WqE6oOxO
95kk5/5rhdzvGZCRirN7T6h+W3+VetQPujoOhSj3NeARsyb5RiTDJIZFjEEd4l+H
G9yPMlum16QSlNTgp1KyLsQCAE8NHCvRsdAfNaD8nYsDR2hDXZJNjPSW5Tm6XyaY
1kCMSaKGIW50rzdJWHu29RwS0BGn+bUM3FCaWhY3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUY7VqecYY43m0K3dQtEimf3d7u2owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmMzE4NWU0LTc4YjEtNDE5ZC1iZjhkLThmYjBlZmEzZDk0ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANsiyAwDQYJKoZIhvcNAQELBQADggEBAG7gMMH4od2nil0E+Wv1t0lbUYuu
pq5vIlkg4RvsvWv+qMJITVzhUWv4hSHh1h8EssbscOF9bKUuDfTIvI5qR4stjikl
ZMBBlvxubbJqNyoyn45e+W99meT3V0ZUpNY7SkDyOm2FvOAu6OYcBtoHKX3aP3xe
caiWpcFsZzu2ywhr5zoeO9KXceHL/gwwn8VcFiih+wzHV7qPZbxg4dXUGJoLHLyM
JELDHGS7WOS9RuTYfcfslbl6plNWcIBTjGjjSXW4nhrpl/EfQ5rPrwhkYXJ84S0/
SoVtc6ZJPSYZOjYh0/JDsW/SolWGV7VJ9jNEpbKmLXQp4dxFf3rUGyqI1S4=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:24 2025 by rpki-client