Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bcba626-9c7d-4be9-aa2d-5f569d477f9d.roa
File: 9bcba626-9c7d-4be9-aa2d-5f569d477f9d.roa (raw, json)
Hash identifier: k924R35XW874nl8+TkMBirpASk9bCJsUo1NnPl8g/EA=
Subject key identifier: 6A:3F:EA:61:BA:30:9D:0D:BF:06:0A:BA:D5:90:5B:6E:29:E0:E1:BA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0C9A2E67B00B2D39C15F5009DED861D4C26051B3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bcba626-9c7d-4be9-aa2d-5f569d477f9d.roa
Signing time: Sun 19 Oct 2025 01:40:06 +0000
ROA not before: Sun 19 Oct 2025 01:40:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:9a:2e:67:b0:0b:2d:39:c1:5f:50:09:de:d8:61:d4:c2:60:51:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=3c8a4d554c6d3d3bd557fdd16a7f372884ea031ffed9b04b0b61c5f9170987c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:2e:91:91:63:78:62:2e:ac:35:a5:75:b0:
de:8d:71:cf:51:0f:9c:88:3a:5b:cf:72:7e:54:cf:
46:71:1e:f6:db:49:01:12:92:fe:c7:5e:bb:aa:fa:
b2:1f:e6:0e:5d:de:d5:7b:26:53:35:98:30:85:a8:
da:21:92:f3:c9:25:55:68:b7:70:00:79:d5:74:4a:
d6:fd:1c:81:7c:b3:2e:6d:3f:a6:17:97:fd:d0:96:
b5:05:f8:1b:9c:e3:99:b9:ec:04:74:a4:cc:35:f7:
32:01:7d:c9:30:43:8e:ba:a0:86:3f:69:ff:d9:40:
86:f8:6f:2e:76:e2:83:a5:0a:16:12:bc:e2:b9:92:
52:a0:18:c7:c7:c4:c3:b3:c0:ab:23:39:87:51:8e:
99:7c:2e:58:2d:b2:82:fe:70:ac:06:18:fa:e0:08:
57:44:d4:c6:46:aa:f0:1f:bb:45:c2:d6:56:80:78:
0d:5a:15:7e:22:b3:b3:31:8a:a0:ac:65:02:b1:df:
bc:ea:d3:54:1f:a7:41:02:f5:a7:ac:0c:50:da:e1:
08:1a:10:1d:c3:62:c7:d0:16:4d:8c:cf:0a:18:2d:
cc:40:aa:bc:3d:c6:ce:b8:f5:79:f0:91:96:8f:3c:
79:96:9d:8d:45:50:6f:04:21:9e:ff:5d:4e:1e:7b:
10:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3F:EA:61:BA:30:9D:0D:BF:06:0A:BA:D5:90:5B:6E:29:E0:E1:BA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bcba626-9c7d-4be9-aa2d-5f569d477f9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.44.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b3:94:7f:71:8a:1b:fa:bb:ab:2e:b0:17:ad:f0:eb:50:5e:
84:04:e0:4d:bf:12:e3:9e:63:63:e6:91:90:c8:5f:21:9d:23:
4c:88:8b:d9:2c:75:6a:30:26:a7:2b:49:b9:66:53:f1:6f:08:
0c:51:59:ca:87:85:03:a9:ad:fc:3a:de:7d:fa:30:ec:df:ab:
04:30:1f:47:0f:cb:c2:e4:6d:92:fc:1a:ee:c1:7a:8c:8c:6a:
59:37:7e:b4:7a:9f:1d:1f:ee:ac:fb:ea:b7:0a:d2:63:92:50:
05:4e:e3:52:82:38:74:c0:e5:13:fe:5c:97:62:b7:61:42:89:
6c:99:84:c1:8d:8e:a9:de:73:94:8e:f7:68:7c:b4:18:11:6a:
11:03:ac:73:a0:55:71:e7:2b:a5:8c:ef:0b:f4:e3:63:58:f2:
3e:b3:e6:92:62:ca:b9:e9:d5:d7:c8:e0:bd:91:b9:92:44:9a:
f4:24:57:8a:a3:a0:c0:e1:43:cf:c1:d5:d0:81:fe:a8:26:8a:
15:dc:e3:91:a5:9e:e7:93:a2:da:08:96:fb:d0:ad:da:f8:7a:
b9:f2:0f:fc:5e:df:29:cd:7b:b4:86:5f:09:cb:b9:1c:fe:9e:
98:69:a8:10:a6:d0:db:aa:eb:9f:f5:fa:2b:e0:5e:a1:be:3c:
c1:2d:f8:fb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDJouZ7ALLTnBX1AJ3thh1MJgUbMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDE0MDA2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzhhNGQ1NTRjNmQzZDNiZDU1N2ZkZDE2YTdmMzcyODg0
ZWEwMzFmZmVkOWIwNGIwYjYxYzVmOTE3MDk4N2M5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC6mi6RkWN4Yi6sNaV1sN6Ncc9RD5yIOlvPcn5Uz0ZxHvbb
SQESkv7HXruq+rIf5g5d3tV7JlM1mDCFqNohkvPJJVVot3AAedV0Stb9HIF8sy5t
P6YXl/3QlrUF+Buc45m57AR0pMw19zIBfckwQ466oIY/af/ZQIb4by524oOlChYS
vOK5klKgGMfHxMOzwKsjOYdRjpl8LlgtsoL+cKwGGPrgCFdE1MZGqvAfu0XC1laA
eA1aFX4is7MxiqCsZQKx37zq01Qfp0EC9aesDFDa4QgaEB3DYsfQFk2MzwoYLcxA
qrw9xs649XnwkZaPPHmWnY1FUG8EIZ7/XU4eexCDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUaj/qYbownQ2/Bgq61ZBbbing4bowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzliY2JhNjI2LTljN2QtNGJlOS1hYTJkLTVmNTY5ZDQ3N2Y5ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsiywwDQYJKoZIhvcNAQELBQADggEBACezlH9xihv6u6susBet8OtQXoQE
4E2/EuOeY2PmkZDIXyGdI0yIi9ksdWowJqcrSblmU/FvCAxRWcqHhQOprfw63n36
MOzfqwQwH0cPy8LkbZL8Gu7BeoyMalk3frR6nx0f7qz76rcK0mOSUAVO41KCOHTA
5RP+XJdit2FCiWyZhMGNjqnec5SO92h8tBgRahEDrHOgVXHnK6WM7wv042NY8j6z
5pJiyrnp1dfI4L2RuZJEmvQkV4qjoMDhQ8/B1dCB/qgmihXc45GlnueTotoIlvvQ
rdr4ernyD/xe3ynNe7SGXwnLuRz+nphpqBCm0Nuq65/1+ivgXqG+PMEt+Ps=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:17 2025 by rpki-client