Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee637bef-ed4d-4fd3-844b-d17d912bae16.roa
File: ee637bef-ed4d-4fd3-844b-d17d912bae16.roa (raw, json)
Hash identifier: J8jmdO5B462GIBEekI+orUg4dCC8ya+m5S6liCmCfEI=
Subject key identifier: 30:AE:E0:C7:CB:3A:DE:00:F1:07:E2:90:B0:9A:1C:6D:4C:0C:99:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 60586DF9814AE6F2A7090292785E37C1BECE41F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee637bef-ed4d-4fd3-844b-d17d912bae16.roa
Signing time: Sun 19 Oct 2025 02:01:02 +0000
ROA not before: Sun 19 Oct 2025 02:01:02 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:58:6d:f9:81:4a:e6:f2:a7:09:02:92:78:5e:37:c1:be:ce:41:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:01:02 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=204b9cee7995db38727eaee966689564d095dc9767549327f46c16d985fff2f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:37:a4:b4:1e:9d:ee:1b:2b:ed:5c:cb:c0:
c7:5c:0a:22:ae:d3:18:12:be:60:cf:a5:26:20:87:
f4:ff:7a:d2:b1:f3:1f:e1:90:86:6e:0a:31:df:df:
e7:c6:26:b2:19:9f:9c:8d:5f:02:d4:d5:fd:f8:9e:
6d:4e:41:4f:b9:4f:87:11:cc:be:17:87:55:b1:cd:
be:dc:9b:4b:e7:d9:b3:6d:6c:9e:f1:72:9d:b4:cc:
46:a6:19:77:09:43:7f:fe:14:32:bb:c3:0d:30:45:
50:f6:c4:1f:af:c6:b6:6d:1d:d3:8f:8f:3f:d8:35:
12:eb:bb:76:0b:ea:70:7a:77:35:b3:82:18:4d:3b:
ab:63:73:75:5e:a2:fc:e6:c9:64:71:ec:23:a8:a9:
a9:72:93:e3:60:f4:d6:06:de:10:31:97:ee:00:ad:
3e:cb:01:c4:16:58:5e:d3:b4:a5:4e:b4:51:00:64:
54:19:c8:ac:61:dc:b3:b5:cf:71:cc:82:8c:ee:71:
6e:3f:8e:3e:8a:e7:e1:bb:dc:30:d4:b9:cf:bc:d4:
59:cf:eb:4c:75:ce:e4:9a:4c:11:2e:2b:91:42:60:
91:2f:be:56:bc:b1:9f:c6:12:8f:52:a0:f7:74:3c:
12:b0:53:6f:46:a4:f2:1d:5f:3f:92:be:a6:c1:a1:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:E0:C7:CB:3A:DE:00:F1:07:E2:90:B0:9A:1C:6D:4C:0C:99:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee637bef-ed4d-4fd3-844b-d17d912bae16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.70.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:49:11:83:2d:f9:ec:04:e4:38:43:1b:f8:cd:cc:a7:59:a3:
e6:64:5b:04:0b:89:bc:57:c6:a0:3f:cf:33:6f:8d:e4:1d:18:
d4:cb:46:57:b5:b0:84:56:e1:b2:80:e7:3b:cc:1c:43:d6:1c:
a7:27:84:d7:86:49:51:88:e6:01:4f:d8:fc:5c:f5:74:be:f3:
62:3c:60:02:b4:78:25:fa:46:df:18:bd:ad:5c:d6:a3:8e:2e:
7c:ac:1d:af:36:b1:cb:4e:e2:34:e2:65:de:81:51:3e:c8:0b:
ad:e1:44:27:c4:6a:25:39:1d:48:db:34:77:da:41:bb:ec:c0:
64:13:ab:77:60:ae:61:d3:29:58:f9:c1:9d:c8:5a:c4:3e:ab:
e5:d2:6b:30:df:ed:d6:6e:6f:64:c1:4f:f8:3b:76:eb:8c:cc:
ca:c2:a4:a3:fc:10:94:ec:67:3f:57:7a:79:76:ce:4e:47:c9:
fe:c8:f1:e3:0d:f2:f1:8a:99:33:f4:b5:56:a0:d5:96:fb:b2:
b7:7a:ac:93:6d:61:c5:e5:df:cf:c4:2a:e8:69:f3:27:d2:44:
c8:77:1b:ec:83:39:a0:f2:ea:78:7c:77:96:56:ec:5f:bb:9f:
74:7a:b5:9d:13:8d:5d:86:5a:0c:64:d0:ef:f8:2e:f5:bc:7c:
b5:9a:65:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYFht+YFK5vKnCQKSeF43wb7OQfAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIwMTAyWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMDRiOWNlZTc5OTVkYjM4NzI3ZWFlZTk2NjY4OTU2NGQw
OTVkYzk3Njc1NDkzMjdmNDZjMTZkOTg1ZmZmMmYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVejektB6d7hsr7VzLwMdcCiKu0xgSvmDPpSYgh/T/etKx
8x/hkIZuCjHf3+fGJrIZn5yNXwLU1f34nm1OQU+5T4cRzL4Xh1Wxzb7cm0vn2bNt
bJ7xcp20zEamGXcJQ3/+FDK7ww0wRVD2xB+vxrZtHdOPjz/YNRLru3YL6nB6dzWz
ghhNO6tjc3VeovzmyWRx7COoqalyk+Ng9NYG3hAxl+4ArT7LAcQWWF7TtKVOtFEA
ZFQZyKxh3LO1z3HMgozucW4/jj6K5+G73DDUuc+81FnP60x1zuSaTBEuK5FCYJEv
vla8sZ/GEo9SoPd0PBKwU29GpPIdXz+SvqbBoaDBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMK7gx8s63gDxB+KQsJocbUwMmdgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VlNjM3YmVmLWVkNGQtNGZkMy04NDRiLWQxN2Q5MTJiYWUxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsikYwDQYJKoZIhvcNAQELBQADggEBAM1JEYMt+ewE5DhDG/jNzKdZo+Zk
WwQLibxXxqA/zzNvjeQdGNTLRle1sIRW4bKA5zvMHEPWHKcnhNeGSVGI5gFP2Pxc
9XS+82I8YAK0eCX6Rt8Yva1c1qOOLnysHa82sctO4jTiZd6BUT7IC63hRCfEaiU5
HUjbNHfaQbvswGQTq3dgrmHTKVj5wZ3IWsQ+q+XSazDf7dZub2TBT/g7duuMzMrC
pKP8EJTsZz9Xenl2zk5Hyf7I8eMN8vGKmTP0tVag1Zb7srd6rJNtYcXl38/EKuhp
8yfSRMh3G+yDOaDy6nh8d5ZW7F+7n3R6tZ0TjV2GWgxk0O/4LvW8fLWaZRs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:46:47 2025 by rpki-client