Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ea21c2-fe43-4134-88ba-509ffc04d58f.roa
File: e2ea21c2-fe43-4134-88ba-509ffc04d58f.roa (raw, json)
Hash identifier: L2JvHQcomYVMN8g/bqzKlRWG6RoAVIbHxdySudzssew=
Subject key identifier: BF:17:9B:0B:34:15:95:F6:CE:D2:FB:09:6B:29:15:C6:56:35:A9:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FFB3497BBF5BEF0A241D370B8B3B559D02AB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ea21c2-fe43-4134-88ba-509ffc04d58f.roa
Signing time: Mon 20 Oct 2025 04:52:25 +0000
ROA not before: Mon 20 Oct 2025 04:52:25 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:fb:34:97:bb:f5:be:f0:a2:41:d3:70:b8:b3:b5:59:d0:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:52:25 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=acae053f57bbadfdf180f73f8d24f0435acfaca4ec4e6f34734c9307e69b3bf6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:97:fd:51:64:59:fe:0a:ab:2b:74:0e:05:
09:d8:97:9c:9c:2f:2e:4a:1c:7b:f9:b1:99:47:3a:
ba:af:9e:99:46:21:cd:24:b6:6d:5a:61:ce:17:57:
6d:71:32:19:4d:a5:17:49:95:b1:ca:8d:1a:36:9e:
84:4d:c8:55:0e:ee:89:06:d4:f6:6b:34:05:e0:08:
8c:8a:ee:08:71:c1:c7:6c:e6:ad:51:de:2f:f1:54:
1e:00:9a:af:a5:dc:13:cc:66:b2:7e:b3:9f:16:6f:
d7:54:9f:29:37:78:58:21:36:5b:fc:35:92:ad:16:
ff:f2:51:0a:93:f9:4f:ba:d5:95:c4:f8:2f:10:fb:
c6:42:64:d7:50:d5:cf:57:4e:8b:8c:6c:6a:f4:1d:
b6:b5:6f:84:30:55:b1:a7:4c:92:cc:7f:bc:94:d5:
0b:40:9a:4d:66:9d:25:66:3f:08:4d:11:d1:85:d4:
16:a9:8e:bf:01:5b:d4:50:f1:cf:40:5f:05:6f:a1:
16:61:46:23:e4:58:f0:bf:4a:f4:c9:66:cb:dd:40:
e2:78:e1:22:8c:f0:a9:b2:69:0f:3b:be:f0:27:61:
a0:20:2d:f7:96:c2:97:26:81:c8:fb:f4:ff:8e:cf:
c1:35:ef:29:3e:b5:b0:96:51:de:f1:6e:25:75:87:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:17:9B:0B:34:15:95:F6:CE:D2:FB:09:6B:29:15:C6:56:35:A9:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e2ea21c2-fe43-4134-88ba-509ffc04d58f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.48.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:d5:3b:b5:a2:aa:b2:78:fb:01:ce:6b:26:c6:29:bf:40:87:
e8:ac:c6:aa:dc:dc:3b:3e:f0:79:6f:78:0a:75:4b:a1:05:5b:
84:71:15:f5:e7:ae:3b:59:2f:1b:95:73:2f:6f:4b:78:f2:01:
7b:2c:7c:e7:dc:b4:e6:46:43:02:f8:50:7e:c6:d9:70:3a:75:
72:62:22:34:9e:d8:aa:89:15:3b:f2:78:3b:66:5e:09:48:da:
ed:57:00:6a:7f:1f:00:93:2a:9a:1f:1d:ef:bd:b1:e9:c2:49:
f1:02:fa:aa:d1:7b:e0:b6:c1:58:79:3a:0c:c7:ac:6a:ae:f3:
0f:79:08:d5:e7:24:0e:fb:bf:06:88:a2:ef:64:29:0f:ca:1d:
2e:d4:3d:21:db:34:ae:2f:b0:d7:ae:64:19:50:1d:20:97:a5:
09:4d:8a:e6:9c:1e:12:24:90:5e:80:e5:97:3c:67:fe:99:08:
8a:48:36:f0:9e:20:bd:2b:67:ab:9a:7e:d5:f9:7e:8e:60:5b:
63:c3:c7:4d:0d:b4:a5:19:c0:12:91:ab:2e:86:55:b3:48:ca:
65:8f:a7:14:b1:0a:3c:0c:1f:9f:f7:7b:12:9f:66:92:01:01:
85:85:c0:01:61:5d:7a:c8:37:46:be:e3:a2:a0:dc:3b:0d:2e:
39:9f:a9:0a
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgITX/s0l7v1vvCiQdNwuLO1WdAqtDANBgkqhkiG9w0BAQsF
ADA9MTswOQYDVQQDEzI2ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAxOGQ0MmJlMzU4ZWIz
NzEwN2RiZThjYjcxZDBhNzAeFw0yNTEwMjAwNDUyMjVaFw0yNTExMjQyMzU5NTla
MHoxSTBHBgNVBAUTQGFjYWUwNTNmNTdiYmFkZmRmMTgwZjczZjhkMjRmMDQzNWFj
ZmFjYTRlYzRlNmYzNDczNGM5MzA3ZTY5YjNiZjYxLTArBgNVBAMTJGIyNWM5NzBm
LWQ4MTMtNDQ1Yy1iZmUyLTYyNjY4NTE4Yzg3ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvXl/1RZFn+CqsrdA4FCdiXnJwvLkoce/mxmUc6uq+emUYh
zSS2bVphzhdXbXEyGU2lF0mVscqNGjaehE3IVQ7uiQbU9ms0BeAIjIruCHHBx2zm
rVHeL/FUHgCar6XcE8xmsn6znxZv11SfKTd4WCE2W/w1kq0W//JRCpP5T7rVlcT4
LxD7xkJk11DVz1dOi4xsavQdtrVvhDBVsadMksx/vJTVC0CaTWadJWY/CE0R0YXU
FqmOvwFb1FDxz0BfBW+hFmFGI+RY8L9K9Mlmy91A4njhIozwqbJpDzu+8CdhoCAt
95bClyaByPv0/47PwTXvKT61sJZR3vFuJXWHGv8CAwEAAaOCArEwggKtMB0GA1Ud
DgQWBBS/F5sLNBWV9s7S+wlrKRXGVjWpwTAfBgNVHSMEGDAWgBQQXdeNVXhAq0Nd
vRUhII8p+kk/rjAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg
BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy
aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv
MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzFiYTMwMmI4LThk
YWItNDkxZC1iOWVkLWQ3YzkyZDAzMGQ4Mi82ZWQ4OGNhZDExZmVhYzc3NDQ5ZjAx
OGQ0MmJlMzU4ZWIzNzEwN2RiZThjYjcxZDBhNy5jZXIwgZ4GCCsGAQUFBwELBIGR
MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h
bWF6b25hd3MuY29tL3ZvbHVtZS8yMGFhMzI5Yi1mYzUyLTRjNjEtYmY1My0wOTcy
NWMwNDI5NDIvZTJlYTIxYzItZmU0My00MTM0LTg4YmEtNTA5ZmZjMDRkNThmLnJv
YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0
LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMt
MDk3MjVjMDQyOTQyL19xeDNSSjhCalVLLU5ZNnpjUWZiNk10eDBLYy5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmyLMDANBgkqhkiG9w0BAQsFAAOCAQEA0dU7taKqsnj7Ac5rJsYpv0CH6KzG
qtzcOz7weW94CnVLoQVbhHEV9eeuO1kvG5VzL29LePIBeyx859y05kZDAvhQfsbZ
cDp1cmIiNJ7YqokVO/J4O2ZeCUja7VcAan8fAJMqmh8d772x6cJJ8QL6qtF74LbB
WHk6DMesaq7zD3kI1eckDvu/Boii72QpD8odLtQ9Ids0ri+w165kGVAdIJelCU2K
5pweEiSQXoDllzxn/pkIikg28J4gvStnq5p+1fl+jmBbY8PHTQ20pRnAEpGrLoZV
s0jKZY+nFLEKPAwfn/d7Ep9mkgEBhYXAAWFdesg3Rr7joqDcOw0uOZ+pCg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:19 2025 by rpki-client