Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa
File: c71c7203-a977-40d5-a22f-95e3ab24db4f.roa (raw, json)
Hash identifier: dAgrwZBlXlqsXFyNubKFm1PNptMXESe7ffHe5UGf6SU=
Subject key identifier: F9:9B:58:B8:92:9D:42:DD:42:14:D2:09:90:8D:57:03:EC:CB:B7:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0856E625148DDA2D64395640272CBFAB77EB143A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa
Signing time: Tue 11 Nov 2025 01:31:34 +0000
ROA not before: Tue 11 Nov 2025 01:31:34 +0000
ROA not after: Tue 16 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:56:e6:25:14:8d:da:2d:64:39:56:40:27:2c:bf:ab:77:eb:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 11 01:31:34 2025 GMT
Not After : Dec 16 23:59:59 2025 GMT
Subject: serialNumber=5479fcffe5f37e5ac22a00db13e2741ca4591775e35db93121eb8916b9db26f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:96:6c:82:2d:34:5f:be:ca:0a:51:e3:4c:
4e:97:fa:a2:5e:ca:52:15:06:77:e5:b1:aa:5b:81:
10:20:e8:36:e8:8b:45:c8:98:91:ba:29:98:4c:73:
85:2d:ac:2e:e9:32:82:eb:74:e7:38:a4:af:08:d1:
51:81:4f:03:6d:04:34:6c:22:5f:00:c7:21:95:99:
32:69:e0:a9:df:5d:18:00:f8:01:6a:0b:69:2c:04:
8d:67:16:52:85:ce:87:42:13:ee:87:f2:71:95:a1:
9b:07:fe:17:97:44:a7:fb:f7:6d:17:41:35:39:26:
2b:79:a8:21:19:26:7b:da:5a:97:82:ed:a6:49:26:
74:f9:27:e7:1d:40:5a:04:b7:e7:db:e1:fa:77:87:
66:4f:82:b2:59:8a:8b:0b:85:9d:f3:ef:5b:3d:b0:
45:a9:49:ec:b6:7b:a4:c0:c9:97:77:25:9a:ba:ce:
c5:63:c2:80:22:29:40:19:32:a8:3f:81:62:d2:6b:
31:88:c9:59:41:ee:a4:aa:43:95:90:92:31:66:34:
1c:8a:64:18:5c:7c:c2:38:b9:f7:e4:65:7f:41:06:
19:02:e2:ca:d7:58:4e:46:7c:2e:5a:93:1a:59:65:
f4:68:2b:44:e3:ee:55:6b:61:d1:2a:fd:d2:6d:15:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9B:58:B8:92:9D:42:DD:42:14:D2:09:90:8D:57:03:EC:CB:B7:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c71c7203-a977-40d5-a22f-95e3ab24db4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.166.224.0/19
Signature Algorithm: sha256WithRSAEncryption
49:9d:fc:73:4e:94:3c:dd:b4:d2:ac:c4:73:e0:66:ab:90:3f:
9a:86:fb:70:91:b2:af:cf:3c:4b:d4:dc:82:4f:d2:21:7e:39:
10:ee:e6:f4:59:ec:3c:7a:3e:cf:7a:6b:0e:09:d6:a5:d8:73:
71:c7:8e:e1:e0:48:26:81:3d:e4:f9:51:c0:af:79:6b:65:f4:
46:fa:1c:d9:a1:69:b7:09:b8:e5:38:16:b6:8f:5a:c4:dd:9e:
b2:5b:fe:77:7a:55:59:e6:f2:fc:56:6a:63:4f:67:5b:dd:72:
c0:ec:cc:ce:a7:da:02:9c:5d:68:f7:75:07:ff:da:77:fe:f8:
41:8d:25:42:0b:13:d3:eb:2b:ae:a5:ad:87:52:9b:87:ae:fc:
cf:bd:1e:94:97:c8:6b:f4:38:2e:07:0e:da:4a:98:ec:ce:af:
21:20:72:ec:a9:81:27:8e:5e:d2:f1:56:1a:3d:17:37:f2:12:
db:da:24:b2:d7:b7:da:36:04:4a:a2:e5:ef:73:97:f8:c0:ff:
e3:d3:33:7a:06:29:f4:a1:4d:fe:1e:54:18:bf:ae:48:4f:85:
84:a8:b7:6c:4a:fa:1c:3b:82:ba:dc:39:f2:6a:02:51:53:f8:
03:b7:53:a3:51:8f:e8:ea:7c:a4:fa:6e:09:3c:a5:d6:64:44:
dd:35:d0:84
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCFbmJRSN2i1kOVZAJyy/q3frFDowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMTExMDEzMTM0WhcNMjUxMjE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDc5ZmNmZmU1ZjM3ZTVhYzIyYTAwZGIxM2UyNzQxY2E0
NTkxNzc1ZTM1ZGI5MzEyMWViODkxNmI5ZGIyNmYxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXPZZsgi00X77KClHjTE6X+qJeylIVBnflsapbgRAg6Dbo
i0XImJG6KZhMc4UtrC7pMoLrdOc4pK8I0VGBTwNtBDRsIl8AxyGVmTJp4KnfXRgA
+AFqC2ksBI1nFlKFzodCE+6H8nGVoZsH/heXRKf7920XQTU5Jit5qCEZJnvaWpeC
7aZJJnT5J+cdQFoEt+fb4fp3h2ZPgrJZiosLhZ3z71s9sEWpSey2e6TAyZd3JZq6
zsVjwoAiKUAZMqg/gWLSazGIyVlB7qSqQ5WQkjFmNByKZBhcfMI4uffkZX9BBhkC
4srXWE5GfC5akxpZZfRoK0Tj7lVrYdEq/dJtFWRvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU+ZtYuJKdQt1CFNIJkI1XA+zLtzYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3MWM3MjAzLWE5NzctNDBkNS1hMjJmLTk1ZTNhYjI0ZGI0Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVspuAwDQYJKoZIhvcNAQELBQADggEBAEmd/HNOlDzdtNKsxHPgZquQP5qG
+3CRsq/PPEvU3IJP0iF+ORDu5vRZ7Dx6Ps96aw4J1qXYc3HHjuHgSCaBPeT5UcCv
eWtl9Eb6HNmhabcJuOU4FraPWsTdnrJb/nd6VVnm8vxWamNPZ1vdcsDszM6n2gKc
XWj3dQf/2nf++EGNJUILE9PrK66lrYdSm4eu/M+9HpSXyGv0OC4HDtpKmOzOryEg
cuypgSeOXtLxVho9FzfyEtvaJLLXt9o2BEqi5e9zl/jA/+PTM3oGKfShTf4eVBi/
rkhPhYSot2xK+hw7grrcOfJqAlFT+AO3U6NRj+jqfKT6bgk8pdZkRN010IQ=
-----END CERTIFICATE-----
Generated at Tue Nov 18 09:37:31 2025 by rpki-client