Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b231bf43-5a4f-4246-b40b-06242915c793.roa
File: b231bf43-5a4f-4246-b40b-06242915c793.roa (raw, json)
Hash identifier: zAX459uRL/WOOpGAsw5CCQhr4lwzgWdizxYNxUlKA6A=
Subject key identifier: 7D:A6:FA:05:96:59:74:D0:C0:EF:EE:37:E6:4F:3A:89:18:7B:97:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 076E18300F77CD3716DB0F6AB9AA66CB15104BA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b231bf43-5a4f-4246-b40b-06242915c793.roa
Signing time: Mon 20 Oct 2025 04:40:47 +0000
ROA not before: Mon 20 Oct 2025 04:40:47 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6e:18:30:0f:77:cd:37:16:db:0f:6a:b9:aa:66:cb:15:10:4b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:40:47 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4086a4c8e0f7b7498e18632a780a776c68e69e22abd1970b48857dfd62e5d6f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:ba:0b:ac:28:08:66:29:1b:64:4e:1c:b7:
3f:60:69:43:6e:19:2f:11:7c:af:f7:51:4e:83:32:
97:63:76:48:98:b4:c6:3e:ad:0f:b0:f6:11:4b:33:
d0:c7:66:fe:f1:41:0b:1e:d7:a2:81:1f:00:ac:75:
f3:34:5b:c0:54:e9:14:fa:ed:30:29:95:33:2b:68:
ac:f8:a9:52:8f:f0:ea:54:88:76:b9:64:86:be:2f:
07:13:f2:b1:c5:89:64:40:8c:67:30:f4:b2:65:5c:
90:9b:60:51:c5:3a:9e:76:6b:90:fd:f4:8f:73:0e:
d4:ab:9a:0a:fe:24:31:e2:d5:ac:bd:4b:15:34:5c:
a0:67:9f:ce:dc:b7:56:f8:97:2c:87:ce:09:48:31:
b0:d0:82:2e:28:38:13:4b:56:78:4b:23:f0:42:1d:
8d:77:52:ff:55:29:8b:a2:7f:df:5b:38:94:7b:40:
14:b0:4c:c6:c2:98:18:dd:fb:0d:5f:de:50:a0:5d:
aa:8e:77:56:4f:76:57:ab:f9:a2:1f:23:cd:13:9e:
1a:e7:2a:6c:8b:5c:d2:38:f2:68:6b:47:28:9c:7b:
c4:9d:b9:d8:3a:ff:0c:ce:cd:3f:03:c9:78:ac:51:
29:97:4a:e4:86:db:b9:db:5a:fb:fc:0b:a7:45:d0:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:FA:05:96:59:74:D0:C0:EF:EE:37:E6:4F:3A:89:18:7B:97:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b231bf43-5a4f-4246-b40b-06242915c793.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.68.0/24
Signature Algorithm: sha256WithRSAEncryption
35:a0:ce:be:78:0e:a2:a2:02:76:f7:1b:d8:0e:e5:33:24:b6:
3f:6d:eb:0d:92:ec:be:5c:c7:2c:b9:80:f2:46:c3:49:9b:d7:
56:8a:63:c9:c6:8a:bf:b3:ad:34:b2:17:db:af:db:cb:14:a4:
22:2a:7c:be:5d:03:cf:0d:9c:e0:23:4b:c7:01:70:dc:e6:1b:
72:a2:c2:d3:04:4a:32:ef:9f:9e:19:be:69:ee:df:f9:90:1e:
8e:22:f1:5f:39:21:4c:5e:fe:00:bb:18:73:7d:07:5d:45:7b:
ce:cf:33:fc:43:d1:44:db:c7:9c:bb:0b:14:fd:d7:7a:2f:62:
44:ce:83:68:1c:15:31:e1:59:f1:7e:50:e3:de:cc:f3:3d:4a:
23:20:4e:f1:c7:ab:d7:19:a6:02:70:aa:74:b5:40:39:a3:e7:
67:e1:b5:36:f0:83:e3:6e:dc:da:a3:5d:75:b1:30:7f:72:0c:
2a:08:7b:85:68:1c:71:ba:bf:70:8c:e6:05:8c:20:8b:ef:87:
b7:1e:8f:80:ef:7e:83:ee:11:76:00:48:64:7e:3a:5f:7e:95:
d2:ee:d2:73:4a:9d:27:70:e8:e8:4f:ea:48:8a:66:69:7e:e0:
98:a5:11:e7:b0:48:94:cb:b2:5b:7a:4f:b4:97:a5:8b:c1:1b:
3f:f5:a4:d2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUB24YMA93zTcW2w9quapmyxUQS6UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQ0MDQ3WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0MDg2YTRjOGUwZjdiNzQ5OGUxODYzMmE3ODBhNzc2YzY4
ZTY5ZTIyYWJkMTk3MGI0ODg1N2RmZDYyZTVkNmY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDmH7oLrCgIZikbZE4ctz9gaUNuGS8RfK/3UU6DMpdjdkiY
tMY+rQ+w9hFLM9DHZv7xQQse16KBHwCsdfM0W8BU6RT67TAplTMraKz4qVKP8OpU
iHa5ZIa+LwcT8rHFiWRAjGcw9LJlXJCbYFHFOp52a5D99I9zDtSrmgr+JDHi1ay9
SxU0XKBnn87ct1b4lyyHzglIMbDQgi4oOBNLVnhLI/BCHY13Uv9VKYuif99bOJR7
QBSwTMbCmBjd+w1f3lCgXaqOd1ZPdler+aIfI80TnhrnKmyLXNI48mhrRyice8Sd
udg6/wzOzT8DyXisUSmXSuSG27nbWvv8C6dF0HrhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfab6BZZZdNDA7+435k86iRh7l6IwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IyMzFiZjQzLTVhNGYtNDI0Ni1iNDBiLTA2MjQyOTE1Yzc5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnkQwDQYJKoZIhvcNAQELBQADggEBADWgzr54DqKiAnb3G9gO5TMktj9t
6w2S7L5cxyy5gPJGw0mb11aKY8nGir+zrTSyF9uv28sUpCIqfL5dA88NnOAjS8cB
cNzmG3KiwtMESjLvn54Zvmnu3/mQHo4i8V85IUxe/gC7GHN9B11Fe87PM/xD0UTb
x5y7CxT913ovYkTOg2gcFTHhWfF+UOPezPM9SiMgTvHHq9cZpgJwqnS1QDmj52fh
tTbwg+Nu3NqjXXWxMH9yDCoIe4VoHHG6v3CM5gWMIIvvh7cej4DvfoPuEXYASGR+
Ol9+ldLu0nNKnSdw6OhP6kiKZml+4JilEeewSJTLslt6T7SXpYvBGz/1pNI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:34 2025 by rpki-client