Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8aafe1-88a9-454f-877b-7953779cdc90.roa
File: 9f8aafe1-88a9-454f-877b-7953779cdc90.roa (raw, json)
Hash identifier: M7LRFlaow7QKPv9JRtOlAtY6GNHGE6XS8CDnZMOqB4w=
Subject key identifier: 52:B8:DC:44:16:43:DA:54:61:C6:D7:4D:46:3D:EB:59:24:BD:4A:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1D4DF4412CF99C775DCFEC5DF173E1299552A37C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8aafe1-88a9-454f-877b-7953779cdc90.roa
Signing time: Mon 20 Oct 2025 06:22:10 +0000
ROA not before: Mon 20 Oct 2025 06:22:10 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:4d:f4:41:2c:f9:9c:77:5d:cf:ec:5d:f1:73:e1:29:95:52:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:22:10 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=505503fda6a2c0de28f553603de08c9b8b716b374e916297e8c7e7d7d4526bd9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:12:6d:0e:12:45:af:88:31:4f:39:d8:a5:
07:ef:f5:01:e6:99:63:81:42:d2:2f:ef:1f:02:ae:
87:45:36:e7:0f:b7:c4:62:8b:69:65:60:c1:69:e6:
47:d3:77:f0:fd:60:ca:82:95:dd:44:45:7e:56:bb:
80:0c:3c:08:5c:ea:aa:9c:bc:f1:42:65:09:ca:75:
08:d7:e9:f4:0d:fd:3b:9a:5b:39:0f:b6:c0:e7:b8:
e9:55:74:64:a3:55:47:bf:69:37:22:0f:1c:a8:6b:
87:e7:a6:4d:2f:23:2e:bf:14:96:e6:1e:f6:d0:64:
72:85:da:a1:c5:b6:c1:75:1b:99:d2:eb:b5:90:86:
71:ec:b2:6a:3f:7b:de:f2:e2:b1:11:7a:4d:c1:db:
ad:59:4d:28:cd:57:ed:7f:61:af:73:da:3e:8c:9b:
d3:8f:4d:1d:4f:e6:64:34:c7:2f:89:f6:bb:98:76:
68:c3:08:68:c1:9f:d8:2f:89:e8:fc:e4:4f:70:0b:
ff:e2:5f:7b:cf:e0:bb:8e:3c:77:b3:ad:4a:ec:61:
12:5f:b6:21:75:39:50:b5:bb:d2:d2:a1:20:65:f9:
45:86:77:df:82:be:f7:6a:24:ef:68:5a:21:cc:f7:
b3:71:66:b5:0f:a0:89:c3:0a:87:0f:cb:fa:e0:81:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B8:DC:44:16:43:DA:54:61:C6:D7:4D:46:3D:EB:59:24:BD:4A:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8aafe1-88a9-454f-877b-7953779cdc90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:86:3a:2f:d3:50:ba:2b:50:7b:24:f9:17:b9:56:94:b4:f2:
b5:53:e0:b9:66:88:7e:b7:4d:d4:85:dd:04:f4:1a:24:b5:0f:
2d:2f:bf:6e:83:5c:61:88:8b:eb:0e:6d:9e:20:c3:94:d0:c3:
40:e2:de:d5:47:bd:18:2a:dc:d3:3d:d8:60:4d:e6:7c:0e:dd:
81:92:02:54:95:b7:6f:5e:5d:51:f6:51:13:5d:91:db:f1:4d:
27:e9:94:7a:76:88:c1:6f:c8:3e:e8:38:1f:f2:c9:e8:c2:c5:
73:ad:38:b7:f6:4c:a9:4a:43:72:0a:f7:23:27:cb:12:55:a4:
fc:33:74:ac:89:d5:86:88:17:ed:ba:3d:34:6f:23:3d:f6:c5:
23:3f:a8:d2:5b:65:e4:79:6b:61:59:b1:0f:60:df:47:b6:3a:
e6:55:04:20:66:4b:f9:f5:be:06:bc:9d:37:eb:b6:76:c1:11:
2f:4a:3a:d6:bc:50:de:2d:58:4e:e1:4e:9f:b2:21:e6:98:c2:
0b:6c:51:dc:39:b7:87:06:55:b9:18:18:cf:5e:33:1b:5d:7f:
5b:8d:9c:10:09:1b:c1:cf:d7:0c:63:54:c6:28:29:95:6b:0b:
41:42:7b:e9:f1:e5:8e:2b:47:1f:03:13:1a:29:8e:ca:7d:08:
ad:df:d8:9f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHU30QSz5nHddz+xd8XPhKZVSo3wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDYyMjEwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MDU1MDNmZGE2YTJjMGRlMjhmNTUzNjAzZGUwOGM5Yjhi
NzE2YjM3NGU5MTYyOTdlOGM3ZTdkN2Q0NTI2YmQ5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDpuxJtDhJFr4gxTznYpQfv9QHmmWOBQtIv7x8CrodFNucP
t8Rii2llYMFp5kfTd/D9YMqCld1ERX5Wu4AMPAhc6qqcvPFCZQnKdQjX6fQN/Tua
WzkPtsDnuOlVdGSjVUe/aTciDxyoa4fnpk0vIy6/FJbmHvbQZHKF2qHFtsF1G5nS
67WQhnHssmo/e97y4rERek3B261ZTSjNV+1/Ya9z2j6Mm9OPTR1P5mQ0xy+J9ruY
dmjDCGjBn9gviej85E9wC//iX3vP4LuOPHezrUrsYRJftiF1OVC1u9LSoSBl+UWG
d9+CvvdqJO9oWiHM97NxZrUPoInDCocPy/rggTyhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUUrjcRBZD2lRhxtdNRj3rWSS9ShcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmOGFhZmUxLTg4YTktNDU0Zi04NzdiLTc5NTM3NzljZGM5MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnfMwDQYJKoZIhvcNAQELBQADggEBAFuGOi/TULorUHsk+Re5VpS08rVT
4LlmiH63TdSF3QT0GiS1Dy0vv26DXGGIi+sObZ4gw5TQw0Di3tVHvRgq3NM92GBN
5nwO3YGSAlSVt29eXVH2URNdkdvxTSfplHp2iMFvyD7oOB/yyejCxXOtOLf2TKlK
Q3IK9yMnyxJVpPwzdKyJ1YaIF+26PTRvIz32xSM/qNJbZeR5a2FZsQ9g30e2OuZV
BCBmS/n1vga8nTfrtnbBES9KOta8UN4tWE7hTp+yIeaYwgtsUdw5t4cGVbkYGM9e
Mxtdf1uNnBAJG8HP1wxjVMYoKZVrC0FCe+nx5Y4rRx8DExopjsp9CK3f2J8=
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:30 2025 by rpki-client