Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5ecea58-c3d8-46d1-abde-4d9524df81aa.roa
File: a5ecea58-c3d8-46d1-abde-4d9524df81aa.roa (raw, json)
Hash identifier: YZ1rvCTmyocDVQRiw3Aadxgds+4X8XiMzZysPaE1xdM=
Subject key identifier: BE:A2:4C:44:3B:1C:E7:8F:80:2F:A8:D1:D2:63:43:A7:D3:65:98:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2138704F1692D5EF7D78CFC78E83819F4BCA001D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5ecea58-c3d8-46d1-abde-4d9524df81aa.roa
Signing time: Sun 19 Oct 2025 00:41:27 +0000
ROA not before: Sun 19 Oct 2025 00:41:27 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:38:70:4f:16:92:d5:ef:7d:78:cf:c7:8e:83:81:9f:4b:ca:00:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:41:27 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=dd486c45baaf23f710bba6e0c617d063ca23ef8d5d0c5d60fe77f8caa63d4eb3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b7:b3:1e:32:c0:cd:dc:50:4c:7b:61:cd:3b:
56:eb:c8:3e:49:f3:35:f4:ef:cd:83:ed:1c:b2:20:
cf:80:4b:95:55:23:ae:12:36:6c:b6:9a:e7:b6:4a:
af:92:78:5f:81:7e:c6:41:0a:39:87:18:31:45:55:
ce:bb:3a:20:3c:61:ba:5c:3f:7c:64:d0:30:8b:3b:
2b:1f:8c:49:08:25:1b:67:6d:b7:58:6c:88:87:b2:
96:72:28:0d:5c:e7:34:fb:bb:f4:ec:dc:16:3b:a5:
9b:7c:23:ea:3e:56:a7:b8:b3:05:9b:85:20:d3:f8:
37:df:29:9b:70:13:19:8e:62:5e:8a:4f:77:3e:45:
2e:84:fb:38:63:51:68:b4:1a:95:6f:9c:93:ba:5f:
ab:55:79:e6:5e:86:75:9e:69:1c:ae:18:c4:eb:21:
2f:c6:72:c7:72:9d:91:d1:39:36:60:0a:d3:8f:c2:
5a:6b:69:e3:5d:77:49:43:b2:b5:e2:02:45:48:5a:
fc:fa:1b:a4:e7:bf:62:8c:a9:31:bd:39:95:7b:39:
9f:ce:e5:a5:a4:fa:39:c1:cd:89:47:24:50:ff:ac:
e6:b1:1c:0a:07:e0:6d:53:6a:87:fb:dc:69:21:6a:
1b:a7:cb:14:dc:03:87:47:3c:2b:ad:68:88:8d:08:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:4C:44:3B:1C:E7:8F:80:2F:A8:D1:D2:63:43:A7:D3:65:98:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a5ecea58-c3d8-46d1-abde-4d9524df81aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.201.0/24
Signature Algorithm: sha256WithRSAEncryption
16:30:0b:3f:ea:78:a3:ec:4c:69:7c:0c:68:10:f9:34:7d:55:
d1:fd:b7:d6:a8:61:89:ec:c9:dc:8b:27:0a:26:16:21:fd:11:
34:e8:52:62:6f:dc:5d:bd:60:51:6e:ad:8a:45:7b:01:37:04:
9f:c1:6b:c8:59:a2:c1:51:31:37:19:5a:63:f9:d1:28:c6:f0:
de:9f:62:53:b6:ad:6f:9c:f1:16:08:58:9b:dd:9e:95:74:d1:
6f:c5:93:33:62:46:de:48:81:11:b6:44:5c:ae:b2:96:e4:df:
7d:db:0a:8f:7f:46:14:9f:75:b0:c9:58:0e:1d:c9:51:99:28:
be:22:bc:3b:50:f9:a6:25:bc:07:65:8e:a1:7f:3f:04:18:c0:
26:db:98:c4:f9:f3:83:0f:02:78:dc:5e:4d:34:d6:51:8b:83:
d7:a4:ee:f4:b4:30:8b:f9:e7:7a:20:61:af:f1:3a:6d:38:cd:
ff:1c:0b:f4:f1:60:55:d7:6a:dd:9d:b7:68:e5:2c:ca:36:96:
53:77:a6:06:33:fd:47:09:c5:be:7b:65:fe:36:2d:39:fe:d7:
ed:dd:44:89:6e:27:ba:71:f4:8a:e0:57:12:6e:81:fe:c5:8e:
35:37:b9:56:10:56:23:24:59:43:ea:0a:c4:8d:18:aa:c4:17:
1b:fb:fe:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIThwTxaS1e99eM/HjoOBn0vKAB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDA0MTI3WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZDQ4NmM0NWJhYWYyM2Y3MTBiYmE2ZTBjNjE3ZDA2M2Nh
MjNlZjhkNWQwYzVkNjBmZTc3ZjhjYWE2M2Q0ZWIzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTt7MeMsDN3FBMe2HNO1bryD5J8zX0782D7RyyIM+AS5VV
I64SNmy2mue2Sq+SeF+BfsZBCjmHGDFFVc67OiA8YbpcP3xk0DCLOysfjEkIJRtn
bbdYbIiHspZyKA1c5zT7u/Ts3BY7pZt8I+o+Vqe4swWbhSDT+DffKZtwExmOYl6K
T3c+RS6E+zhjUWi0GpVvnJO6X6tVeeZehnWeaRyuGMTrIS/GcsdynZHROTZgCtOP
wlpraeNdd0lDsrXiAkVIWvz6G6Tnv2KMqTG9OZV7OZ/O5aWk+jnBzYlHJFD/rOax
HAoH4G1Taof73GkhahunyxTcA4dHPCutaIiNCE1JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUvqJMRDsc54+AL6jR0mNDp9NlmJUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1ZWNlYTU4LWMzZDgtNDZkMS1hYmRlLTRkOTUyNGRmODFhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi8kwDQYJKoZIhvcNAQELBQADggEBABYwCz/qeKPsTGl8DGgQ+TR9VdH9
t9aoYYnsydyLJwomFiH9ETToUmJv3F29YFFurYpFewE3BJ/Ba8hZosFRMTcZWmP5
0SjG8N6fYlO2rW+c8RYIWJvdnpV00W/FkzNiRt5IgRG2RFyuspbk333bCo9/RhSf
dbDJWA4dyVGZKL4ivDtQ+aYlvAdljqF/PwQYwCbbmMT584MPAnjcXk001lGLg9ek
7vS0MIv553ogYa/xOm04zf8cC/TxYFXXat2dt2jlLMo2llN3pgYz/UcJxb57Zf42
LTn+1+3dRIluJ7px9IrgVxJugf7FjjU3uVYQViMkWUPqCsSNGKrEFxv7/gY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:44 2025 by rpki-client