Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb1fef0-b7d0-4f1e-beac-462efe9a8e17.roa
File: cbb1fef0-b7d0-4f1e-beac-462efe9a8e17.roa (raw, json)
Hash identifier: mOVfhdsI0jN4Ad3UWv8VD0PkZyCJ0/kPnjXDFyV5VCc=
Subject key identifier: FA:57:21:CA:5E:06:4A:0E:33:37:0F:C4:32:A0:8F:8D:56:2F:3A:94
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52F4273C7CA45B28C065EC5D5DB21D236F128827
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb1fef0-b7d0-4f1e-beac-462efe9a8e17.roa
Signing time: Sun 19 Oct 2025 03:10:57 +0000
ROA not before: Sun 19 Oct 2025 03:10:57 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f4:27:3c:7c:a4:5b:28:c0:65:ec:5d:5d:b2:1d:23:6f:12:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:10:57 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=e810ac889a563dd4c132ee2e81539635f4bf28c63338f5051f7bf16aec7957b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:2c:73:2a:7f:ff:62:f0:5e:f4:ec:c8:e1:
96:de:95:35:1d:b3:2c:20:5a:b8:2d:51:17:8d:0c:
1d:ea:ab:7e:86:2c:d0:5b:0c:61:34:cd:0f:d3:ba:
61:df:27:4e:99:cc:a4:d6:64:da:a1:4c:62:1d:af:
41:4b:42:63:72:5e:6f:ef:90:e9:51:59:ce:fc:f3:
34:8e:25:ed:94:ca:70:18:cb:84:dc:30:67:8b:8b:
1a:0d:39:ec:09:3c:28:28:93:69:34:ad:a0:01:f0:
b3:0a:6b:4e:55:f2:0a:56:f4:73:72:4a:2b:df:05:
38:2b:03:49:ef:3c:34:a5:14:5b:d3:bd:ce:35:7d:
3c:35:4c:e4:67:fc:f5:04:81:da:f4:d7:e1:ec:9d:
41:b3:b4:09:c3:41:e5:48:c3:ff:01:11:8e:89:1f:
72:58:4a:01:67:15:0e:ab:ab:0b:25:72:44:c2:41:
ba:ca:1b:a7:d1:e4:54:c8:fa:b9:28:5b:6c:68:58:
fa:13:a4:79:79:3e:1f:c4:41:99:02:0c:dd:d6:01:
e0:70:4a:41:bb:40:e2:db:51:14:b6:1e:c3:ff:d3:
01:d5:b4:69:dd:c9:d7:32:b5:6f:9d:df:5d:13:ea:
58:fc:03:c0:8d:2a:d6:76:9a:f4:ad:96:3a:ab:2e:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:57:21:CA:5E:06:4A:0E:33:37:0F:C4:32:A0:8F:8D:56:2F:3A:94
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cbb1fef0-b7d0-4f1e-beac-462efe9a8e17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:16:d0:7d:57:e5:04:f9:cc:66:eb:e6:58:22:63:3b:78:0b:
b2:d7:45:c2:50:2b:4d:8f:b4:72:c7:8e:08:18:48:06:b8:ad:
71:c6:e7:84:39:67:6f:b0:58:87:6a:77:cf:5a:7f:f0:19:ed:
c3:75:2c:0f:ae:82:94:61:09:f0:9a:5f:20:f3:e9:57:9c:80:
f5:21:6c:df:ab:5d:ff:91:8d:28:f0:31:36:ed:83:7b:68:66:
27:0b:b7:c1:0e:2a:e3:7d:f5:e4:14:2d:d3:2c:40:77:1e:de:
44:e9:5d:13:1c:c8:b3:1b:39:88:f4:8a:ff:70:03:9b:97:79:
0f:35:1e:21:13:20:5d:3b:f9:aa:2f:4b:9c:41:45:11:ab:4b:
9b:e3:37:75:cb:7b:cc:86:d9:00:97:b0:73:52:62:7f:1f:6b:
cd:54:1a:51:a2:e2:1f:a5:45:06:0f:33:09:a2:cd:4e:f0:6a:
1d:d1:1b:49:26:b1:08:78:da:65:f7:ee:b1:ef:54:83:17:c9:
11:21:2b:85:8c:8d:24:bb:29:eb:cd:31:22:62:b1:a3:10:a4:
5b:17:d5:4d:70:5d:cb:88:ea:0a:d0:dc:b3:e1:37:94:7e:4e:
7f:5f:81:ad:f1:01:77:6a:7b:88:53:c0:26:f8:e4:41:47:3d:
ab:49:f4:4c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUvQnPHykWyjAZexdXbIdI28SiCcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMxMDU3WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BlODEwYWM4ODlhNTYzZGQ0YzEzMmVlMmU4MTUzOTYzNWY0
YmYyOGM2MzMzOGY1MDUxZjdiZjE2YWVjNzk1N2I3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1lyxzKn//YvBe9OzI4ZbelTUdsywgWrgtUReNDB3qq36G
LNBbDGE0zQ/TumHfJ06ZzKTWZNqhTGIdr0FLQmNyXm/vkOlRWc788zSOJe2UynAY
y4TcMGeLixoNOewJPCgok2k0raAB8LMKa05V8gpW9HNySivfBTgrA0nvPDSlFFvT
vc41fTw1TORn/PUEgdr01+HsnUGztAnDQeVIw/8BEY6JH3JYSgFnFQ6rqwslckTC
QbrKG6fR5FTI+rkoW2xoWPoTpHl5Ph/EQZkCDN3WAeBwSkG7QOLbURS2HsP/0wHV
tGndydcytW+d310T6lj8A8CNKtZ2mvStljqrLmVtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+lchyl4GSg4zNw/EMqCPjVYvOpQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NiYjFmZWYwLWI3ZDAtNGYxZS1iZWFjLTQ2MmVmZTlhOGUxNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsihkwDQYJKoZIhvcNAQELBQADggEBALoW0H1X5QT5zGbr5lgiYzt4C7LX
RcJQK02PtHLHjggYSAa4rXHG54Q5Z2+wWIdqd89af/AZ7cN1LA+ugpRhCfCaXyDz
6VecgPUhbN+rXf+RjSjwMTbtg3toZicLt8EOKuN99eQULdMsQHce3kTpXRMcyLMb
OYj0iv9wA5uXeQ81HiETIF07+aovS5xBRRGrS5vjN3XLe8yG2QCXsHNSYn8fa81U
GlGi4h+lRQYPMwmizU7wah3RG0kmsQh42mX37rHvVIMXyREhK4WMjSS7KevNMSJi
saMQpFsX1U1wXcuI6grQ3LPhN5R+Tn9fga3xAXdqe4hTwCb45EFHPatJ9Ew=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:48:44 2025 by rpki-client