Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96fb6667-51fd-400f-a405-463107436b19.roa
File: 96fb6667-51fd-400f-a405-463107436b19.roa (raw, json)
Hash identifier: KaI2388PLUTtvMuC9yFaMdQB9lqad/w60O9eqkUfSXY=
Subject key identifier: 97:AE:6A:2F:14:67:45:55:A9:04:90:DB:5E:F9:7D:EF:14:1D:B0:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5810C6A24E1FDE744D3B57BFBBA3D08FCDB03D16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96fb6667-51fd-400f-a405-463107436b19.roa
Signing time: Mon 20 Oct 2025 02:12:28 +0000
ROA not before: Mon 20 Oct 2025 02:12:28 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:10:c6:a2:4e:1f:de:74:4d:3b:57:bf:bb:a3:d0:8f:cd:b0:3d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:12:28 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=605f48136ca4606210915c2fd8624be856830a60f5aa94f3782d188e1f6f994b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:cc:59:be:ae:14:62:7b:85:8b:50:8d:1d:
9f:61:d7:1a:7c:27:6a:97:d4:dc:16:2e:b2:a7:14:
a1:02:07:02:59:fb:4c:cf:4a:b0:6c:7e:eb:d8:60:
f3:7d:63:5a:58:ed:c3:48:e3:8a:56:fc:8e:8b:3b:
24:a2:fe:c5:14:6e:d0:a1:50:bf:e3:76:b3:ba:a3:
aa:96:6c:6c:50:45:cf:7c:62:ee:88:50:b2:dc:86:
0c:3f:f1:41:ad:d8:c2:98:2c:01:3e:03:7e:79:43:
3b:33:7a:18:75:0d:c6:55:0f:11:b8:c0:92:df:98:
c8:b7:24:33:93:73:e2:61:04:f0:ce:24:18:22:54:
ce:79:fb:19:c4:f4:cc:4f:9c:e8:36:2d:e6:7e:96:
46:22:67:45:00:1e:a4:40:07:45:b3:79:42:3f:ab:
b5:76:d1:e6:55:76:14:5d:e8:2a:0e:81:6d:e3:f6:
24:66:59:cd:e8:a6:5b:fe:43:54:62:b4:46:8b:4f:
46:81:b6:1f:2e:f5:c7:19:32:d3:9b:96:6a:df:fb:
25:6b:cc:d8:f8:e2:10:d5:05:68:3a:56:aa:da:24:
31:5a:bc:a4:8f:04:21:64:63:39:a6:d3:08:d2:11:
0a:88:dd:37:a8:51:93:b4:ab:52:60:ec:30:4c:95:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:6A:2F:14:67:45:55:A9:04:90:DB:5E:F9:7D:EF:14:1D:B0:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/96fb6667-51fd-400f-a405-463107436b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.165.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dc:9a:32:9d:a7:a4:0c:92:d0:57:64:30:e9:be:d5:a9:37:
b3:34:e6:ea:52:cf:a7:82:29:31:49:59:96:3e:bc:f0:1b:38:
ad:a7:71:11:01:77:88:9b:35:b2:4d:12:0f:c9:03:1f:91:c7:
8f:71:d7:58:07:11:5b:d9:9c:b6:f5:20:f6:25:57:27:05:c0:
63:f2:d8:76:09:12:37:91:0f:86:a2:ba:52:3d:b9:ec:02:55:
0c:95:52:12:e6:d1:94:17:0e:a7:ee:99:61:77:3f:69:39:49:
ee:4d:21:81:23:a2:c5:84:d1:8d:53:bb:80:4e:3d:05:81:c8:
97:f6:ee:dc:8d:46:86:ca:47:03:36:71:e6:41:96:ba:52:8e:
bf:fa:99:4c:ac:ed:6f:f9:e8:b2:0a:d6:96:76:d5:26:15:3b:
0f:2e:c4:22:41:a3:54:da:fa:3a:b9:55:4e:21:5b:86:a5:ce:
93:5b:1f:82:af:4e:df:09:d6:9e:08:de:5f:7f:16:93:f3:b6:
e4:37:88:f4:0d:06:6a:87:7d:1c:9e:ea:72:7e:ec:46:6b:b8:
3d:b0:17:b7:a3:f2:18:2c:d1:ad:3e:96:9d:6b:cd:0c:98:65:
1c:d5:56:2d:c5:23:84:1b:9a:08:52:a3:ac:f3:f4:ee:c9:43:
c7:e1:ce:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWBDGok4f3nRNO1e/u6PQj82wPRYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDIxMjI4WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDVmNDgxMzZjYTQ2MDYyMTA5MTVjMmZkODYyNGJlODU2
ODMwYTYwZjVhYTk0ZjM3ODJkMTg4ZTFmNmY5OTRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzL8xZvq4UYnuFi1CNHZ9h1xp8J2qX1NwWLrKnFKECBwJZ
+0zPSrBsfuvYYPN9Y1pY7cNI44pW/I6LOySi/sUUbtChUL/jdrO6o6qWbGxQRc98
Yu6IULLchgw/8UGt2MKYLAE+A355Qzszehh1DcZVDxG4wJLfmMi3JDOTc+JhBPDO
JBgiVM55+xnE9MxPnOg2LeZ+lkYiZ0UAHqRAB0WzeUI/q7V20eZVdhRd6CoOgW3j
9iRmWc3oplv+Q1RitEaLT0aBth8u9ccZMtOblmrf+yVrzNj44hDVBWg6VqraJDFa
vKSPBCFkYzmm0wjSEQqI3TeoUZO0q1Jg7DBMled5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUl65qLxRnRVWpBJDbXvl97xQdsFgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzk2ZmI2NjY3LTUxZmQtNDAwZi1hNDA1LTQ2MzEwNzQzNmIxOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnKUwDQYJKoZIhvcNAQELBQADggEBADTcmjKdp6QMktBXZDDpvtWpN7M0
5upSz6eCKTFJWZY+vPAbOK2ncREBd4ibNbJNEg/JAx+Rx49x11gHEVvZnLb1IPYl
VycFwGPy2HYJEjeRD4aiulI9uewCVQyVUhLm0ZQXDqfumWF3P2k5Se5NIYEjosWE
0Y1Tu4BOPQWByJf27tyNRobKRwM2ceZBlrpSjr/6mUys7W/56LIK1pZ21SYVOw8u
xCJBo1Ta+jq5VU4hW4alzpNbH4KvTt8J1p4I3l9/FpPztuQ3iPQNBmqHfRye6nJ+
7EZruD2wF7ej8hgs0a0+lp1rzQyYZRzVVi3FI4QbmghSo6zz9O7JQ8fhztU=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:59:49 2025 by rpki-client