Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9824871-23c7-40f8-951c-7723a75b407d.roa
File: f9824871-23c7-40f8-951c-7723a75b407d.roa (raw, json)
Hash identifier: ONaqCPjazC9wUxgBFKvv3TNPA/3toH1NVH4PApzZfWs=
Subject key identifier: 9F:0E:8D:66:9F:B9:35:4D:E9:E6:29:E2:1A:91:05:24:DC:23:EE:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CF21649FCA03C186CDCCEFCFFABD50D9FCFEDA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9824871-23c7-40f8-951c-7723a75b407d.roa
Signing time: Mon 20 Oct 2025 03:12:12 +0000
ROA not before: Mon 20 Oct 2025 03:12:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f2:16:49:fc:a0:3c:18:6c:dc:ce:fc:ff:ab:d5:0d:9f:cf:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:12:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=92076160cca7fd79147fe9714fbc222db65227291ff8b9fa865bb3d542b941fb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ba:36:4b:2b:24:f9:1b:49:14:3c:b1:87:2f:
15:c2:31:d0:33:19:9c:8f:1f:30:3f:04:67:25:31:
1d:e6:52:19:ad:a2:40:3a:e3:a5:37:11:07:e9:42:
6c:59:28:6c:62:0f:05:43:52:c2:a8:08:9c:24:be:
86:39:be:c1:4e:d3:bc:1f:04:01:db:df:dd:4f:46:
80:34:8b:89:bd:d9:f1:7a:d2:78:97:b3:24:7d:1e:
4a:f0:c3:0b:1a:24:10:22:6c:88:50:ae:21:75:ea:
7d:48:7b:c1:58:30:1b:ba:3b:d5:3d:38:9e:c6:42:
bb:c3:cd:19:68:b9:f9:81:5c:a5:0a:88:22:4b:18:
1c:ee:8d:f9:72:50:86:4b:e1:32:2f:ca:1f:69:16:
f6:c6:f8:0a:14:2c:78:1b:ae:ef:34:d1:d1:12:1b:
cb:53:db:64:3f:44:82:29:13:d9:ce:f0:c2:e6:e1:
1e:aa:cc:e2:36:26:88:b2:0d:5b:8c:89:db:96:3c:
47:75:00:eb:40:89:b4:9c:00:44:74:ee:ba:8f:21:
a6:19:dc:93:63:e8:00:9d:e0:e3:16:80:11:34:9d:
c8:10:bc:f1:e0:0b:d6:a6:02:75:22:e8:03:a8:45:
72:5f:1d:66:40:f7:b1:a4:e3:e6:12:4f:3a:a3:cf:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0E:8D:66:9F:B9:35:4D:E9:E6:29:E2:1A:91:05:24:DC:23:EE:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9824871-23c7-40f8-951c-7723a75b407d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:49:8f:75:19:98:2b:4f:6e:ee:9c:ab:91:5c:74:1a:31:70:
3f:ef:b2:e6:dc:a4:c0:26:cd:03:d1:1e:70:27:09:44:f5:db:
cd:39:8b:bd:a3:22:d4:1b:c9:cd:4f:ed:d0:c0:61:0c:09:ea:
6c:34:f8:87:36:5e:43:be:e6:10:9c:ed:e7:a9:71:bc:72:c3:
75:44:89:6e:d6:72:ae:f3:b9:29:4f:2e:20:0c:fe:3b:f3:e3:
c0:d1:44:aa:de:de:a0:c5:10:3d:e5:d5:76:b4:67:7f:cd:67:
af:6c:24:c8:c2:2a:5c:08:f7:d8:5b:08:9d:75:9a:eb:14:37:
35:3b:68:d7:87:9d:63:f9:65:b2:0a:ca:fd:86:27:ce:3a:c1:
e4:d3:54:e4:2d:af:58:19:6d:ed:e5:87:80:40:13:3c:7a:a0:
33:81:15:73:a9:50:8d:ac:1a:6a:b8:26:1d:e0:3e:6f:cc:d3:
f6:a4:b5:d1:f7:7c:3c:50:63:c3:2b:16:83:0a:38:55:6b:7c:
e2:05:0c:d7:42:e6:25:52:ad:57:d0:af:7a:bf:67:e5:ff:28:
84:fd:f8:3e:98:22:f7:93:df:b5:4b:62:4a:80:f7:c2:3b:ff:
8a:b7:b5:15:47:f4:8d:c1:09:25:5b:a8:40:c3:5c:bd:39:e2:
a3:ce:91:5d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTPIWSfygPBhs3M78/6vVDZ/P7aQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDMxMjEyWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MjA3NjE2MGNjYTdmZDc5MTQ3ZmU5NzE0ZmJjMjIyZGI2
NTIyNzI5MWZmOGI5ZmE4NjViYjNkNTQyYjk0MWZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuujZLKyT5G0kUPLGHLxXCMdAzGZyPHzA/BGclMR3mUhmt
okA646U3EQfpQmxZKGxiDwVDUsKoCJwkvoY5vsFO07wfBAHb391PRoA0i4m92fF6
0niXsyR9HkrwwwsaJBAibIhQriF16n1Ie8FYMBu6O9U9OJ7GQrvDzRloufmBXKUK
iCJLGBzujflyUIZL4TIvyh9pFvbG+AoULHgbru800dESG8tT22Q/RIIpE9nO8MLm
4R6qzOI2JoiyDVuMiduWPEd1AOtAibScAER07rqPIaYZ3JNj6ACd4OMWgBE0ncgQ
vPHgC9amAnUi6AOoRXJfHWZA97Gk4+YSTzqjz5fRAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnw6NZp+5NU3p5iniGpEFJNwj7hEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y5ODI0ODcxLTIzYzctNDBmOC05NTFjLTc3MjNhNzViNDA3ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnkswDQYJKoZIhvcNAQELBQADggEBAKNJj3UZmCtPbu6cq5FcdBoxcD/v
subcpMAmzQPRHnAnCUT12805i72jItQbyc1P7dDAYQwJ6mw0+Ic2XkO+5hCc7eep
cbxyw3VEiW7Wcq7zuSlPLiAM/jvz48DRRKre3qDFED3l1Xa0Z3/NZ69sJMjCKlwI
99hbCJ11musUNzU7aNeHnWP5ZbIKyv2GJ846weTTVOQtr1gZbe3lh4BAEzx6oDOB
FXOpUI2sGmq4Jh3gPm/M0/aktdH3fDxQY8MrFoMKOFVrfOIFDNdC5iVSrVfQr3q/
Z+X/KIT9+D6YIveT37VLYkqA98I7/4q3tRVH9I3BCSVbqEDDXL054qPOkV0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:11 2025 by rpki-client