Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abc850d7-212f-4e22-bc9b-120d55542982.roa
File: abc850d7-212f-4e22-bc9b-120d55542982.roa (raw, json)
Hash identifier: 2bN0Jtb+s2V4XVUBrG4h+FEikTpuzm/qQf7sSlNc0cc=
Subject key identifier: 78:4E:48:75:2A:BA:5D:11:E6:A7:03:BA:47:6A:67:2E:D2:70:62:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C7071BF796F9FB2CD64A700E020B1E89D45DE1E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abc850d7-212f-4e22-bc9b-120d55542982.roa
Signing time: Sun 19 Oct 2025 01:50:06 +0000
ROA not before: Sun 19 Oct 2025 01:50:06 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:70:71:bf:79:6f:9f:b2:cd:64:a7:00:e0:20:b1:e8:9d:45:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:50:06 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=a24f61c0410d796438cb0d29d3e2ce7b2d0be4943b5e8fdd63dec80470c64be2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bb:36:8f:d4:ea:8a:df:22:b2:82:79:7b:ee:
54:2f:f2:14:29:2e:d7:85:27:75:63:07:91:95:fa:
b0:40:71:72:f8:27:f1:ec:ea:23:26:b0:52:2d:1e:
16:9d:bb:82:86:67:ee:de:20:13:42:86:55:f0:91:
6b:22:6f:5a:cd:cf:66:14:ea:95:49:a5:a1:b8:70:
07:54:cf:95:87:52:f4:2b:cb:36:2e:6a:85:55:24:
e9:be:b1:0d:d4:da:84:a7:53:6b:0b:0a:31:a8:2b:
01:83:9a:26:ee:e7:63:c1:bd:24:90:3b:52:3f:00:
42:45:10:a2:7c:13:41:5b:2c:ad:30:9c:c7:23:e6:
b2:03:5b:9a:fb:91:d0:1e:d1:92:ad:63:a5:e5:3b:
29:c2:6b:5e:84:2b:cc:7b:27:83:d8:ff:61:df:89:
19:6e:06:93:58:43:a2:fe:9d:d5:34:97:e0:01:dc:
5e:df:dd:25:25:dd:d4:36:dd:0a:d1:9e:69:9f:3a:
b5:24:03:2b:18:7c:39:75:5f:0b:3f:77:17:32:94:
7e:d0:52:ce:86:6e:61:81:85:0b:1a:8c:ca:50:70:
0e:3a:06:b9:10:8b:55:68:ab:05:be:56:da:eb:7e:
28:5b:55:87:c9:81:76:13:a5:52:f5:4d:07:cd:6f:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:48:75:2A:BA:5D:11:E6:A7:03:BA:47:6A:67:2E:D2:70:62:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/abc850d7-212f-4e22-bc9b-120d55542982.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:cb:ba:44:74:cb:fc:1c:1d:72:10:d5:49:c9:46:93:fd:fd:
f5:0a:74:02:06:84:a0:9a:37:de:0d:75:69:92:7a:23:a4:9b:
5d:69:4c:f4:3c:57:b2:ab:52:cc:d5:68:33:a8:2f:24:45:2b:
5e:e4:15:b3:25:fd:1e:ac:58:55:74:78:a4:d4:93:ed:11:32:
e2:23:96:63:d3:47:80:ef:63:ed:19:b8:bb:9a:b6:b0:bb:0f:
df:7e:b2:6b:e7:6b:55:e2:8d:9b:81:92:9c:a3:21:e4:e4:74:
28:1c:07:99:a0:ee:44:c5:3a:95:0a:a9:1d:29:15:48:ff:20:
4e:59:37:36:af:48:cd:63:31:b4:4c:e2:b2:4a:d7:02:74:b8:
ce:c6:9a:b3:63:ab:95:a0:1d:7f:4c:04:1f:92:80:c3:55:95:
60:a6:03:43:20:c3:c1:16:66:ab:e9:e6:96:b4:7b:63:8d:b5:
a2:13:bb:69:bf:74:fa:13:d9:94:98:bf:db:01:7f:b2:34:b1:
72:34:f4:87:dd:77:4b:cd:2a:2d:9c:e7:93:e2:44:4b:e7:de:
6e:d8:1d:62:fc:d3:aa:d2:95:8f:48:9a:54:fe:a0:c2:82:3a:
13:71:c1:c1:51:a4:67:39:42:49:56:14:09:87:e0:00:f7:90:
00:ea:af:70
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPHBxv3lvn7LNZKcA4CCx6J1F3h4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDE1MDA2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMjRmNjFjMDQxMGQ3OTY0MzhjYjBkMjlkM2UyY2U3YjJk
MGJlNDk0M2I1ZThmZGQ2M2RlYzgwNDcwYzY0YmUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcuzaP1OqK3yKygnl77lQv8hQpLteFJ3VjB5GV+rBAcXL4
J/Hs6iMmsFItHhadu4KGZ+7eIBNChlXwkWsib1rNz2YU6pVJpaG4cAdUz5WHUvQr
yzYuaoVVJOm+sQ3U2oSnU2sLCjGoKwGDmibu52PBvSSQO1I/AEJFEKJ8E0FbLK0w
nMcj5rIDW5r7kdAe0ZKtY6XlOynCa16EK8x7J4PY/2HfiRluBpNYQ6L+ndU0l+AB
3F7f3SUl3dQ23QrRnmmfOrUkAysYfDl1Xws/dxcylH7QUs6GbmGBhQsajMpQcA46
BrkQi1VoqwW+VtrrfihbVYfJgXYTpVL1TQfNbwsBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUeE5IdSq6XRHmpwO6R2pnLtJwYnUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiYzg1MGQ3LTIxMmYtNGUyMi1iYzliLTEyMGQ1NTU0Mjk4Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi60wDQYJKoZIhvcNAQELBQADggEBAMDLukR0y/wcHXIQ1UnJRpP9/fUK
dAIGhKCaN94NdWmSeiOkm11pTPQ8V7KrUszVaDOoLyRFK17kFbMl/R6sWFV0eKTU
k+0RMuIjlmPTR4DvY+0ZuLuatrC7D99+smvna1XijZuBkpyjIeTkdCgcB5mg7kTF
OpUKqR0pFUj/IE5ZNzavSM1jMbRM4rJK1wJ0uM7GmrNjq5WgHX9MBB+SgMNVlWCm
A0Mgw8EWZqvp5pa0e2ONtaITu2m/dPoT2ZSYv9sBf7I0sXI09Ifdd0vNKi2c55Pi
REvn3m7YHWL806rSlY9ImlT+oMKCOhNxwcFRpGc5QklWFAmH4AD3kADqr3A=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:27 2025 by rpki-client