Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7e05df1-c073-4174-82a0-7ac93a86dfcd.roa
File: b7e05df1-c073-4174-82a0-7ac93a86dfcd.roa (raw, json)
Hash identifier: TjCDSHI/ZmhToUd/jtk6qZbIH2knOdkZLW46jeYYKTk=
Subject key identifier: 72:69:68:E6:90:E6:0F:94:BA:24:B9:7E:6A:28:44:56:39:96:8A:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32F3C9313BF64D710C068E9CAC3B1ADD6D0EBBFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7e05df1-c073-4174-82a0-7ac93a86dfcd.roa
Signing time: Sun 19 Oct 2025 00:31:46 +0000
ROA not before: Sun 19 Oct 2025 00:31:46 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f3:c9:31:3b:f6:4d:71:0c:06:8e:9c:ac:3b:1a:dd:6d:0e:bb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:31:46 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=2eb5ab1e737e0d6a4bc793b24f169dbb1c228c2387d7b3de0c8ce085585c5979, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:82:f9:e8:69:b4:82:b7:e3:05:05:19:1b:
e7:8f:ff:71:7e:17:26:97:56:e0:0d:c8:70:70:e0:
34:fb:a9:a6:a2:3a:05:b7:c6:11:31:e9:81:69:e5:
ed:9b:14:7b:78:d9:74:30:62:83:ac:87:19:f5:f1:
51:aa:d6:7b:ca:cb:2c:63:a3:76:93:13:a2:b7:e1:
27:bb:2c:45:42:ef:81:1b:69:f9:09:3b:03:17:a8:
92:b1:e7:f6:82:61:bf:68:1d:fa:ce:7b:0e:df:6f:
ac:57:2f:ef:fd:4a:7d:ff:05:d9:b0:4f:c9:6a:94:
7b:0f:0b:cf:db:d5:34:37:25:52:59:f9:ee:d3:ec:
bd:c3:c9:dc:31:ff:14:c2:e4:5a:42:5d:c6:c0:ba:
6b:74:d3:b7:67:f0:9f:30:6d:bf:0f:26:db:22:04:
44:ca:80:ac:2f:d6:29:32:f4:21:9c:e3:9e:58:29:
d1:a4:ad:48:48:14:86:1d:71:2b:d1:fb:f6:c5:9d:
d1:34:02:9a:7d:04:77:c2:91:6a:fd:cc:cd:92:f7:
f6:1d:54:87:a8:ec:af:a1:d9:04:e6:de:89:21:0b:
c1:92:42:fe:20:03:7a:4f:a5:bf:b4:52:e9:9c:c5:
a6:93:4f:e0:be:3a:fc:cc:fa:9d:2f:58:39:63:de:
bb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:69:68:E6:90:E6:0F:94:BA:24:B9:7E:6A:28:44:56:39:96:8A:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7e05df1-c073-4174-82a0-7ac93a86dfcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.218.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c9:19:19:a0:d8:5e:cc:1b:e0:c2:de:d7:15:e0:09:2e:80:
25:f6:9d:e7:6b:7f:f0:d2:0c:9b:0c:c5:b9:e4:c7:ce:a1:90:
e6:c6:54:85:50:56:af:50:ce:3b:2d:29:82:8b:83:16:0f:09:
3a:50:e1:b1:59:f3:51:73:85:d3:50:cf:37:33:e3:dd:c9:c4:
9d:cf:21:c3:fc:26:da:05:24:53:e3:ec:b2:27:0d:56:f5:ec:
29:20:49:25:df:d2:a9:c1:c9:0d:14:a6:cf:1b:f8:34:2b:db:
79:03:62:b4:c7:45:0d:f5:0e:3f:cc:b2:78:c3:59:0b:55:3e:
89:27:64:b7:3e:db:51:7b:e7:e0:e8:7a:74:05:0e:7b:b4:60:
bb:0a:4f:6d:29:ab:c6:67:07:29:66:f8:a7:42:83:03:87:54:
b4:7f:b4:0a:99:48:e0:18:8d:71:25:5b:6a:ee:ad:c8:f2:0d:
e4:a1:05:1c:ef:61:72:80:f9:ce:78:86:b7:0c:5b:39:26:72:
04:02:0b:d9:d1:0f:48:cb:4b:75:7d:07:7c:c7:f0:40:bf:4f:
9d:d3:5e:70:c8:84:0b:c8:d4:38:c9:26:58:80:40:a4:66:5d:
d5:cd:57:74:03:c8:1b:38:41:64:91:c6:43:7c:55:83:55:1c:
83:1e:22:58
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMvPJMTv2TXEMBo6crDsa3W0Ou/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAzMTQ2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyZWI1YWIxZTczN2UwZDZhNGJjNzkzYjI0ZjE2OWRiYjFj
MjI4YzIzODdkN2IzZGUwYzhjZTA4NTU4NWM1OTc5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWRoL56Gm0grfjBQUZG+eP/3F+FyaXVuANyHBw4DT7qaai
OgW3xhEx6YFp5e2bFHt42XQwYoOshxn18VGq1nvKyyxjo3aTE6K34Se7LEVC74Eb
afkJOwMXqJKx5/aCYb9oHfrOew7fb6xXL+/9Sn3/BdmwT8lqlHsPC8/b1TQ3JVJZ
+e7T7L3Dydwx/xTC5FpCXcbAumt007dn8J8wbb8PJtsiBETKgKwv1iky9CGc455Y
KdGkrUhIFIYdcSvR+/bFndE0App9BHfCkWr9zM2S9/YdVIeo7K+h2QTm3okhC8GS
Qv4gA3pPpb+0UumcxaaTT+C+OvzM+p0vWDlj3rsdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcmlo5pDmD5S6JLl+aihEVjmWikUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3ZTA1ZGYxLWMwNzMtNDE3NC04MmEwLTdhYzkzYTg2ZGZjZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsitowDQYJKoZIhvcNAQELBQADggEBACHJGRmg2F7MG+DC3tcV4AkugCX2
nedrf/DSDJsMxbnkx86hkObGVIVQVq9QzjstKYKLgxYPCTpQ4bFZ81FzhdNQzzcz
493JxJ3PIcP8JtoFJFPj7LInDVb17CkgSSXf0qnByQ0Ups8b+DQr23kDYrTHRQ31
Dj/MsnjDWQtVPoknZLc+21F75+DoenQFDnu0YLsKT20pq8ZnBylm+KdCgwOHVLR/
tAqZSOAYjXElW2rurcjyDeShBRzvYXKA+c54hrcMWzkmcgQCC9nRD0jLS3V9B3zH
8EC/T53TXnDIhAvI1DjJJliAQKRmXdXNV3QDyBs4QWSRxkN8VYNVHIMeIlg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:37 2025 by rpki-client