Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb73778-d997-4228-ae78-75583f627513.roa
File: ffb73778-d997-4228-ae78-75583f627513.roa (raw, json)
Hash identifier: /3NeQ+690pFL7JTNadwVJoY/E/9cl9n5G+vlyMHD2Zk=
Subject key identifier: 62:D1:E3:13:A4:4B:64:78:9C:06:5B:08:E7:49:BA:C0:DE:12:C0:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76D26F98A58A7EFB7E61465519983C60F6B81B4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb73778-d997-4228-ae78-75583f627513.roa
Signing time: Sun 19 Oct 2025 03:01:26 +0000
ROA not before: Sun 19 Oct 2025 03:01:26 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d2:6f:98:a5:8a:7e:fb:7e:61:46:55:19:98:3c:60:f6:b8:1b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:01:26 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=a89868193763683cacff84cd2d37c46b5e1bb095b70fe7b465b6f70d805e4aec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:bb:20:44:b1:97:02:9e:56:54:58:71:c4:
fe:d6:1d:f9:d5:58:af:ee:71:2f:85:90:07:91:a5:
8b:7c:50:94:d7:f3:ef:95:4b:9f:19:68:d2:e5:9f:
5d:89:05:eb:13:c7:1f:0d:88:21:3e:99:66:41:be:
c3:7b:35:9d:81:19:92:ec:10:9a:7e:fb:6b:de:0c:
9b:84:aa:cc:b9:73:5f:71:4e:4a:cc:76:99:a6:5a:
02:5b:b6:bf:c2:78:b6:cd:fa:44:26:6a:88:8d:e8:
c0:99:9e:32:90:a2:a8:03:52:06:c7:3e:c3:b6:c7:
f8:c4:86:43:0f:86:6b:1b:8f:ae:1f:f6:3a:44:35:
34:05:e0:9d:c0:05:2c:49:b1:99:81:2e:11:bb:1f:
a2:03:ac:e6:d7:d1:f9:f6:12:4a:6d:7a:d2:3b:0d:
55:4f:76:c7:30:b5:88:1e:6f:b4:ba:9c:c8:f1:d1:
54:14:d4:fc:e1:16:1c:d5:6c:b2:66:3c:c7:3c:62:
b7:00:bd:69:e6:ac:06:4d:2a:9b:a2:1a:f2:e4:ee:
28:35:4d:fa:b8:13:2d:ff:06:5a:2e:16:0b:ad:38:
ea:80:e2:c2:2e:7c:d8:b3:09:5f:1e:0b:30:27:16:
86:36:72:76:32:9a:20:8e:1e:70:a2:f3:52:2a:4b:
25:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D1:E3:13:A4:4B:64:78:9C:06:5B:08:E7:49:BA:C0:DE:12:C0:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffb73778-d997-4228-ae78-75583f627513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:aa:15:b3:a6:56:10:60:62:a1:d5:e3:02:3c:dd:ee:fe:d0:
a9:6d:2b:8e:ca:48:47:42:03:51:3a:cd:00:d4:a9:e5:64:ea:
0a:d3:d7:e6:95:f2:d8:d8:0c:85:30:09:20:29:c0:05:00:ff:
92:50:33:80:58:c0:b1:7b:d7:76:e4:2c:c5:be:26:8d:89:a3:
36:02:c2:cf:7a:5b:02:28:b1:ab:ae:fc:a4:f7:88:0c:74:0d:
82:9e:86:c1:c0:aa:4b:2a:78:6a:c0:84:6a:98:c7:1e:35:8e:
0a:8d:7b:60:32:f2:47:4c:77:93:5f:24:28:9b:63:32:9d:6d:
00:b8:71:e4:40:a1:de:b8:ee:97:bd:3f:68:14:65:f4:29:e9:
de:9f:15:e4:e9:13:f1:06:4e:7c:5b:6c:83:c5:24:a0:00:44:
0c:6a:71:95:59:c6:be:3e:86:25:dc:50:f7:7f:a7:76:c6:06:
95:13:e9:6b:97:21:77:af:61:67:76:85:b5:ff:9c:b1:17:dd:
1c:e2:a2:ab:a5:5d:c7:d8:b8:c5:cb:4d:e2:e6:4e:7a:6e:fc:
1b:b4:f9:53:7b:03:14:31:9e:cd:46:c8:3c:0e:34:8f:4f:1d:
df:92:4c:99:2e:5c:2a:8c:06:10:f4:08:d0:8c:f7:2f:b4:c8:
71:4d:ae:24
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdtJvmKWKfvt+YUZVGZg8YPa4G00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDMwMTI2WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BhODk4NjgxOTM3NjM2ODNjYWNmZjg0Y2QyZDM3YzQ2YjVl
MWJiMDk1YjcwZmU3YjQ2NWI2ZjcwZDgwNWU0YWVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh57sgRLGXAp5WVFhxxP7WHfnVWK/ucS+FkAeRpYt8UJTX
8++VS58ZaNLln12JBesTxx8NiCE+mWZBvsN7NZ2BGZLsEJp++2veDJuEqsy5c19x
TkrMdpmmWgJbtr/CeLbN+kQmaoiN6MCZnjKQoqgDUgbHPsO2x/jEhkMPhmsbj64f
9jpENTQF4J3ABSxJsZmBLhG7H6IDrObX0fn2EkptetI7DVVPdscwtYgeb7S6nMjx
0VQU1PzhFhzVbLJmPMc8YrcAvWnmrAZNKpuiGvLk7ig1Tfq4Ey3/BlouFgutOOqA
4sIufNizCV8eCzAnFoY2cnYymiCOHnCi81IqSyV/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYtHjE6RLZHicBlsI50m6wN4SwOgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZmYjczNzc4LWQ5OTctNDIyOC1hZTc4LTc1NTgzZjYyNzUxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi9owDQYJKoZIhvcNAQELBQADggEBAJ+qFbOmVhBgYqHV4wI83e7+0Klt
K47KSEdCA1E6zQDUqeVk6grT1+aV8tjYDIUwCSApwAUA/5JQM4BYwLF713bkLMW+
Jo2JozYCws96WwIosauu/KT3iAx0DYKehsHAqksqeGrAhGqYxx41jgqNe2Ay8kdM
d5NfJCibYzKdbQC4ceRAod647pe9P2gUZfQp6d6fFeTpE/EGTnxbbIPFJKAARAxq
cZVZxr4+hiXcUPd/p3bGBpUT6WuXIXevYWd2hbX/nLEX3RzioqulXcfYuMXLTeLm
Tnpu/Bu0+VN7AxQxns1GyDwONI9PHd+STJkuXCqMBhD0CNCM9y+0yHFNriQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:40 2025 by rpki-client