Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a020ed-e1cd-4f96-b47f-bd97a7f41f17.roa
File: a5a020ed-e1cd-4f96-b47f-bd97a7f41f17.roa (raw, json)
Hash identifier: d0X018OSGj2Tx23Pw4UP4zI3IayZdeyOOaXDnRFfgcI=
Subject key identifier: 4B:A4:56:FA:15:80:46:16:2E:0E:79:97:77:5B:8B:A0:8C:98:36:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5EFAF76A31A9C7934DEE31B9C36A9C65A110EEF9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a020ed-e1cd-4f96-b47f-bd97a7f41f17.roa
Signing time: Mon 20 Oct 2025 03:22:19 +0000
ROA not before: Mon 20 Oct 2025 03:22:19 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.156.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fa:f7:6a:31:a9:c7:93:4d:ee:31:b9:c3:6a:9c:65:a1:10:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:22:19 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=71f8f831111eaa154ffbc1db214dba147ad56b8e887fe2d24a2adaa70bfc892c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:c9:61:c2:af:9d:9d:90:50:6a:46:40:49:
21:35:dc:cf:24:05:b2:69:1d:bf:f4:ff:a6:8e:62:
85:bd:75:01:2c:f6:fa:81:f2:50:02:9d:c5:71:43:
16:12:a6:79:a0:54:fa:b2:88:4d:ff:9f:dd:15:46:
f8:3a:52:9a:33:56:87:e7:fb:a1:3e:c6:55:51:f1:
c5:61:ae:69:6b:2e:4f:a7:7c:c8:9f:e6:f4:e0:ce:
53:1d:6a:8d:87:50:5b:5b:70:d0:52:e2:d0:16:2c:
79:8a:1f:61:1e:67:38:9f:d0:8c:ff:82:e6:ca:d9:
b7:e6:ab:49:c5:89:4b:4b:ea:44:05:92:e1:ff:6c:
f4:66:07:10:25:cc:4b:53:6b:f4:85:98:83:87:27:
55:a9:3e:ab:5a:15:a1:99:12:5d:ba:94:db:cf:93:
fe:a0:77:e3:2b:a7:6f:df:1b:5a:3a:c9:0d:25:dc:
1d:bc:41:e1:f1:69:c2:c0:0f:4c:c2:e9:5d:65:8a:
90:70:7c:39:39:7b:f2:81:cb:ca:01:a8:0e:bb:9b:
1e:5d:cd:ba:45:51:dc:11:fc:de:9e:54:3c:d1:8d:
be:56:15:c0:0d:18:bf:8d:f1:96:19:31:c5:1f:31:
0a:77:0d:d6:ac:8a:8b:3c:df:7d:3b:ad:15:98:d7:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:56:FA:15:80:46:16:2E:0E:79:97:77:5B:8B:A0:8C:98:36:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5a020ed-e1cd-4f96-b47f-bd97a7f41f17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.156.52.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4d:4e:97:a3:17:7d:a9:f7:bc:af:eb:62:2b:d3:23:23:4a:
04:59:cb:45:0f:d5:57:df:25:80:43:eb:3f:5e:4c:f0:13:be:
05:4e:16:57:6b:83:2a:8d:38:9f:87:ed:32:a3:b8:b7:88:50:
4b:11:1f:c6:1f:c4:b7:f1:c5:4c:78:9a:fb:f7:7a:40:82:2d:
d1:b0:60:fe:34:b2:9b:68:8f:2b:ce:0d:ab:ac:22:ce:6e:e7:
98:91:93:dd:bf:62:f9:ed:bf:9a:71:7c:90:42:ab:f0:a6:2f:
b6:39:de:17:a8:ae:eb:8c:aa:ed:46:41:46:ea:cb:2c:7a:fc:
47:fc:bf:b4:7b:1c:e6:05:86:15:06:b0:36:a5:bf:70:45:4d:
ea:8f:a0:ef:a2:f0:c2:f9:22:f2:37:3a:de:37:72:7b:ba:a0:
93:80:4a:9e:ab:2f:46:a7:0a:78:23:c1:ff:8d:6a:78:47:0e:
ff:1f:28:9f:52:16:88:db:41:92:73:d8:47:ad:c7:89:3a:f3:
7e:bf:5f:68:4d:e3:9a:c2:e7:35:ad:2e:9e:0e:e7:2c:96:7e:
ab:57:ed:cf:b9:c3:dc:ad:73:d8:51:b2:ae:e3:a8:fa:05:44:
0f:a4:08:a8:b5:26:ce:c7:ca:c0:6c:1e:54:5c:d7:78:a5:f4:
5d:37:27:ce
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXvr3ajGpx5NN7jG5w2qcZaEQ7vkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDMyMjE5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWY4ZjgzMTExMWVhYTE1NGZmYmMxZGIyMTRkYmExNDdh
ZDU2YjhlODg3ZmUyZDI0YTJhZGFhNzBiZmM4OTJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWdMlhwq+dnZBQakZASSE13M8kBbJpHb/0/6aOYoW9dQEs
9vqB8lACncVxQxYSpnmgVPqyiE3/n90VRvg6UpozVofn+6E+xlVR8cVhrmlrLk+n
fMif5vTgzlMdao2HUFtbcNBS4tAWLHmKH2EeZzif0Iz/gubK2bfmq0nFiUtL6kQF
kuH/bPRmBxAlzEtTa/SFmIOHJ1WpPqtaFaGZEl26lNvPk/6gd+Mrp2/fG1o6yQ0l
3B28QeHxacLAD0zC6V1lipBwfDk5e/KBy8oBqA67mx5dzbpFUdwR/N6eVDzRjb5W
FcANGL+N8ZYZMcUfMQp3Ddasios83307rRWY16OtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS6RW+hWARhYuDnmXd1uLoIyYNkIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1YTAyMGVkLWUxY2QtNGY5Ni1iNDdmLWJkOTdhN2Y0MWYxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnDQwDQYJKoZIhvcNAQELBQADggEBAEVNTpejF32p97yv62Ir0yMjSgRZ
y0UP1VffJYBD6z9eTPATvgVOFldrgyqNOJ+H7TKjuLeIUEsRH8YfxLfxxUx4mvv3
ekCCLdGwYP40sptojyvODausIs5u55iRk92/Yvntv5pxfJBCq/CmL7Y53heoruuM
qu1GQUbqyyx6/Ef8v7R7HOYFhhUGsDalv3BFTeqPoO+i8ML5IvI3Ot43cnu6oJOA
Sp6rL0anCngjwf+NanhHDv8fKJ9SFojbQZJz2Eetx4k6836/X2hN45rC5zWtLp4O
5yyWfqtX7c+5w9ytc9hRsq7jqPoFRA+kCKi1Js7HysBsHlRc13il9F03J84=
-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:44 2025 by rpki-client