Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/883cae7a-6ffe-4e4a-b462-9433615e004e.roa
File: 883cae7a-6ffe-4e4a-b462-9433615e004e.roa (raw, json)
Hash identifier: pIsWGtkWs+oev3RrJQ24B//zyHpXWZ8LGNinOuQ/IAI=
Subject key identifier: C9:B5:14:FA:74:99:7C:73:52:39:65:EC:24:93:DC:B7:3A:17:6E:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E204A8551AD157F60D380E4F5B41AAF3AB1A98A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/883cae7a-6ffe-4e4a-b462-9433615e004e.roa
Signing time: Mon 20 Oct 2025 06:31:33 +0000
ROA not before: Mon 20 Oct 2025 06:31:33 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:20:4a:85:51:ad:15:7f:60:d3:80:e4:f5:b4:1a:af:3a:b1:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:31:33 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8f445fc5dff5b5bd965c140e0b905085281da0df6bc6bd1f21d0217d77860270, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:5e:a8:c4:02:eb:2c:d3:57:a1:b9:8e:89:
0b:d1:00:1f:43:88:ce:1a:d9:f1:bc:e7:0e:5c:8d:
9c:db:cb:62:2a:26:cc:59:6c:97:0b:b5:d7:20:e8:
a7:81:20:48:04:b7:bb:db:df:89:95:2b:c2:e0:f0:
f1:b6:0e:4e:d3:12:41:a9:c4:83:43:2c:e1:39:78:
e6:41:59:b3:f8:b7:a4:46:03:a4:89:b8:c6:3c:da:
0a:5e:44:e3:a4:14:b2:b8:15:e8:ad:8e:be:26:6d:
29:85:14:10:1e:af:b6:ff:32:e0:df:22:db:7f:e3:
44:5d:ed:df:1b:bc:6f:07:3f:52:c8:7f:2e:fa:3b:
29:c7:cd:15:4d:f7:ab:c1:b7:9d:34:4c:24:b0:1a:
68:8e:36:d7:71:71:63:b2:c6:8d:bd:f2:dc:29:8f:
0d:0e:f5:8f:93:25:8d:11:66:71:66:59:ab:c8:bc:
69:f0:bf:c4:3e:87:60:05:8e:fa:ac:71:3c:60:25:
a0:a7:6d:3c:d0:4c:dc:3f:16:8a:22:9c:51:b6:e8:
91:22:ac:e9:53:38:33:7b:83:97:a8:4b:08:cb:2a:
ad:84:24:23:15:91:99:91:2c:61:de:c5:4f:b7:10:
7f:1b:8c:c7:89:31:d0:34:8a:9d:d9:6d:30:ff:8a:
c7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:14:FA:74:99:7C:73:52:39:65:EC:24:93:DC:B7:3A:17:6E:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/883cae7a-6ffe-4e4a-b462-9433615e004e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.122.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1b:37:32:f5:5d:d2:57:0c:d8:54:9b:3b:04:8f:f6:23:45:
12:2d:11:d5:e8:7f:07:eb:b9:46:01:de:91:9a:3e:b7:ad:a6:
73:3f:6d:eb:04:d8:2a:37:6d:62:ed:6f:bf:b4:b3:0e:eb:b4:
ac:44:6f:1b:67:a5:5f:b9:ea:b1:54:cc:81:40:04:a8:77:d8:
91:b9:5f:4b:c7:e2:5a:69:43:6f:16:c5:cc:c5:94:a1:fe:9c:
2c:8e:5f:72:3c:c4:e3:b7:da:f4:ea:4d:a5:41:ce:55:ab:89:
82:37:88:c4:60:6e:5e:78:dd:df:c2:54:f5:ec:09:99:48:55:
23:1f:be:9c:f5:3f:f2:42:99:9a:9b:6b:8c:91:8f:28:0e:49:
2b:6e:51:70:59:64:fd:0b:10:d2:dc:84:02:f2:11:32:c8:3c:
e2:d0:c2:3a:1e:b6:89:3e:ab:d1:29:29:31:1c:ad:c8:09:5a:
25:4d:7e:13:c3:2e:64:20:50:ee:09:7c:aa:e4:a1:ba:91:aa:
8d:4d:5a:83:e6:ee:8e:0c:d7:97:b0:c0:8a:ac:e2:dc:08:3c:
04:7a:75:d4:43:de:a6:50:6e:2f:1a:0d:63:16:86:bc:64:3a:
10:de:6f:cc:45:5a:8a:4c:d5:a9:74:da:fe:99:03:f7:1e:73:
48:ae:21:88
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDiBKhVGtFX9g04Dk9bQarzqxqYowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYzMTMzWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZjQ0NWZjNWRmZjViNWJkOTY1YzE0MGUwYjkwNTA4NTI4
MWRhMGRmNmJjNmJkMWYyMWQwMjE3ZDc3ODYwMjcwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDA3V6oxALrLNNXobmOiQvRAB9DiM4a2fG85w5cjZzby2Iq
JsxZbJcLtdcg6KeBIEgEt7vb34mVK8Lg8PG2Dk7TEkGpxINDLOE5eOZBWbP4t6RG
A6SJuMY82gpeROOkFLK4Feitjr4mbSmFFBAer7b/MuDfItt/40Rd7d8bvG8HP1LI
fy76OynHzRVN96vBt500TCSwGmiONtdxcWOyxo298twpjw0O9Y+TJY0RZnFmWavI
vGnwv8Q+h2AFjvqscTxgJaCnbTzQTNw/FooinFG26JEirOlTODN7g5eoSwjLKq2E
JCMVkZmRLGHexU+3EH8bjMeJMdA0ip3ZbTD/isetAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUybUU+nSZfHNSOWXsJJPctzoXbmUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg4M2NhZTdhLTZmZmUtNGU0YS1iNDYyLTk0MzM2MTVlMDA0ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn3owDQYJKoZIhvcNAQELBQADggEBAIwbNzL1XdJXDNhUmzsEj/YjRRIt
EdXofwfruUYB3pGaPretpnM/besE2Co3bWLtb7+0sw7rtKxEbxtnpV+56rFUzIFA
BKh32JG5X0vH4lppQ28WxczFlKH+nCyOX3I8xOO32vTqTaVBzlWriYI3iMRgbl54
3d/CVPXsCZlIVSMfvpz1P/JCmZqba4yRjygOSStuUXBZZP0LENLchALyETLIPOLQ
wjoetok+q9EpKTEcrcgJWiVNfhPDLmQgUO4JfKrkobqRqo1NWoPm7o4M15ewwIqs
4twIPAR6ddRD3qZQbi8aDWMWhrxkOhDeb8xFWopM1al02v6ZA/cec0iuIYg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:40 2025 by rpki-client