Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4b5f2cf-e5a5-4712-a210-9337c07780ae.roa
File: d4b5f2cf-e5a5-4712-a210-9337c07780ae.roa (raw, json)
Hash identifier: n/BKZEqlUeWygvusyQskcw34/N7rRI4plFP7YNJjPKg=
Subject key identifier: 6B:2A:B8:AD:57:5C:B5:A3:1A:05:89:C2:18:D6:9C:93:D2:B2:50:AF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5712B827360DE363906C37329A168D1B30FB75F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4b5f2cf-e5a5-4712-a210-9337c07780ae.roa
Signing time: Mon 20 Oct 2025 00:02:21 +0000
ROA not before: Mon 20 Oct 2025 00:02:21 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:12:b8:27:36:0d:e3:63:90:6c:37:32:9a:16:8d:1b:30:fb:75:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:02:21 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f2c29a80f0d9a780a96696ea4cc7e6004fd6677aa96e23c2951a7b854a193891, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c9:18:59:78:d8:33:7e:67:be:e2:52:a7:ae:
b0:81:43:8c:79:5a:2e:01:5e:d2:da:3d:78:b9:4e:
f9:10:3b:15:d8:db:4d:df:1d:dd:f7:c5:80:8e:29:
40:23:17:b9:b4:d2:da:24:58:a2:7c:5a:ca:d1:bd:
27:9e:b5:22:20:6d:74:6f:e7:f5:63:5a:2f:56:dd:
fb:16:97:3d:50:25:d7:39:0a:3a:79:e0:3c:7a:31:
55:bf:a1:fa:bb:a5:26:23:32:78:d2:f7:76:0a:eb:
aa:c0:91:a4:27:e2:3f:a0:b4:d4:b8:c4:e5:17:59:
2a:dc:65:64:16:64:25:dc:c7:46:7c:c7:aa:c6:6c:
0e:47:83:dc:4a:e0:bb:29:e8:f5:3b:3a:ee:6e:15:
f0:69:db:43:d2:06:a5:02:d9:af:16:f7:c8:bb:ff:
e0:b4:0c:01:ab:5b:dc:93:b8:01:84:a7:77:48:8a:
3c:9a:f2:5f:f2:ab:53:80:0d:46:17:0b:70:dc:f6:
03:5a:fc:aa:19:43:32:bf:08:16:9b:e1:c0:b3:9c:
51:60:59:2d:3f:bb:bb:69:5e:ce:ca:34:44:cf:39:
a4:77:b9:a6:53:db:a6:4d:ab:ad:cd:f0:70:35:4c:
21:c6:06:3a:3a:5f:c8:16:41:f2:6e:16:8f:63:e1:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2A:B8:AD:57:5C:B5:A3:1A:05:89:C2:18:D6:9C:93:D2:B2:50:AF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4b5f2cf-e5a5-4712-a210-9337c07780ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:7e:7d:b9:4e:72:2a:5e:f1:51:aa:e8:bd:d6:37:82:46:a2:
72:fd:a4:7e:21:0a:38:5d:db:44:76:e3:e5:c1:f1:84:51:e9:
56:53:ca:5f:75:e9:40:db:cd:c4:26:77:34:bb:2a:64:98:03:
57:ea:be:52:d7:1b:ee:ab:bd:36:3b:0a:b1:3b:7a:50:7f:93:
d1:a9:ee:f9:c1:df:db:45:09:2d:64:c7:41:0c:c7:69:89:c1:
d6:de:db:cf:01:20:a5:3a:f8:f4:60:fc:ba:67:81:db:bc:0f:
ab:f2:a9:cb:50:01:15:02:b5:e2:a8:dd:19:de:01:20:8f:02:
cb:f8:b1:d7:82:7a:14:60:da:3e:54:b4:d2:04:22:17:25:8b:
f8:b5:20:de:0d:b6:b4:db:59:7a:5d:5c:38:85:e7:a6:72:1e:
ee:40:55:1f:6b:3a:c9:1d:de:7b:3e:e7:e2:b4:fc:27:bd:c2:
7c:3a:65:2d:fb:26:af:da:b1:c9:80:79:09:2a:ad:e7:fd:27:
a5:48:bf:22:b4:87:f1:f3:48:66:83:f5:15:7c:38:fb:d9:6f:
18:fa:d7:06:8a:d0:d6:9c:46:26:41:ca:f5:ae:42:05:73:b3:
14:77:87:e1:65:a4:77:8d:9f:5c:85:32:fe:67:4b:d2:47:92:
11:ff:53:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVxK4JzYN42OQbDcymhaNGzD7dfEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAwMjIxWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMmMyOWE4MGYwZDlhNzgwYTk2Njk2ZWE0Y2M3ZTYwMDRm
ZDY2NzdhYTk2ZTIzYzI5NTFhN2I4NTRhMTkzODkxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSyRhZeNgzfme+4lKnrrCBQ4x5Wi4BXtLaPXi5TvkQOxXY
203fHd33xYCOKUAjF7m00tokWKJ8WsrRvSeetSIgbXRv5/VjWi9W3fsWlz1QJdc5
Cjp54Dx6MVW/ofq7pSYjMnjS93YK66rAkaQn4j+gtNS4xOUXWSrcZWQWZCXcx0Z8
x6rGbA5Hg9xK4Lsp6PU7Ou5uFfBp20PSBqUC2a8W98i7/+C0DAGrW9yTuAGEp3dI
ijya8l/yq1OADUYXC3Dc9gNa/KoZQzK/CBab4cCznFFgWS0/u7tpXs7KNETPOaR3
uaZT26ZNq63N8HA1TCHGBjo6X8gWQfJuFo9j4UtzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUayq4rVdctaMaBYnCGNack9KyUK8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0YjVmMmNmLWU1YTUtNDcxMi1hMjEwLTkzMzdjMDc3ODBhZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn9owDQYJKoZIhvcNAQELBQADggEBAMN+fblOcipe8VGq6L3WN4JGonL9
pH4hCjhd20R24+XB8YRR6VZTyl916UDbzcQmdzS7KmSYA1fqvlLXG+6rvTY7CrE7
elB/k9Gp7vnB39tFCS1kx0EMx2mJwdbe288BIKU6+PRg/Lpngdu8D6vyqctQARUC
teKo3RneASCPAsv4sdeCehRg2j5UtNIEIhcli/i1IN4NtrTbWXpdXDiF56ZyHu5A
VR9rOskd3ns+5+K0/Ce9wnw6ZS37Jq/ascmAeQkqref9J6VIvyK0h/HzSGaD9RV8
OPvZbxj61waK0NacRiZByvWuQgVzsxR3h+FlpHeNn1yFMv5nS9JHkhH/U80=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:55 2025 by rpki-client