Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0df74e7f-566a-4a3c-9f45-ebcfaae13586.roa
File: 0df74e7f-566a-4a3c-9f45-ebcfaae13586.roa (raw, json)
Hash identifier: fKzITKTmRkyvLoKIXoEgocMdjFBlGKPL/J32dTlQerM=
Subject key identifier: 39:8C:E5:5A:09:8E:FE:59:82:B5:F0:2E:31:0F:CF:96:19:C5:D5:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46E81BF5D954F9F6D4B9C406B292B49B76A4B55A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0df74e7f-566a-4a3c-9f45-ebcfaae13586.roa
Signing time: Sun 19 Oct 2025 00:00:43 +0000
ROA not before: Sun 19 Oct 2025 00:00:43 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:e8:1b:f5:d9:54:f9:f6:d4:b9:c4:06:b2:92:b4:9b:76:a4:b5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:00:43 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=2bbcf4c6fa8790a45c1df2a465d7c40c1b93d88ef6156fb7f235ae41f68af57a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:e9:7a:70:b3:4a:00:8a:5f:3c:71:e3:ce:
23:a2:11:a0:63:c6:68:22:ae:58:00:3f:2f:62:e0:
9b:97:1e:ca:8d:ed:4e:f8:af:7a:58:2f:19:a8:3f:
75:c9:1f:dd:be:20:be:34:31:df:3c:8f:e9:7a:95:
94:c2:e1:c7:cc:bc:87:1c:aa:42:a1:32:c1:25:c6:
41:88:c9:f2:d6:72:2e:3b:7e:82:1c:6e:93:f9:63:
df:33:4f:24:c1:58:37:bf:1f:91:98:90:1c:c0:8e:
ca:84:70:ce:8f:ba:09:f2:4f:98:ff:b4:60:1c:b2:
4a:09:b4:f9:3e:03:0b:bb:9c:58:94:7c:28:15:e7:
01:ea:7c:f5:1d:8c:12:ec:13:7a:13:84:c9:64:28:
99:9c:cb:4d:46:a3:e0:e4:ef:7c:27:4a:95:78:15:
cf:e7:13:e9:be:b5:ed:aa:91:d8:20:2b:73:93:73:
99:1a:df:d9:35:9d:43:2d:80:6b:65:12:8b:9c:35:
9f:10:a1:de:43:76:ab:2c:bf:fe:94:5a:ab:d0:aa:
2c:f8:21:57:6f:16:86:60:a7:97:51:a0:50:8b:e2:
df:ff:2c:e0:15:bc:e8:23:76:99:dd:ea:33:4a:0f:
87:08:7e:1f:0a:bb:c1:a4:44:7a:30:f3:d3:e8:56:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:E5:5A:09:8E:FE:59:82:B5:F0:2E:31:0F:CF:96:19:C5:D5:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0df74e7f-566a-4a3c-9f45-ebcfaae13586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:2b:50:67:fc:b4:5f:b6:7c:60:dc:a0:94:f6:1c:63:4c:ce:
14:4a:0a:e4:e2:83:4c:43:d1:85:ba:b9:d5:85:04:8b:ee:ea:
d1:f7:1e:55:b0:e0:56:d8:86:34:53:32:de:3d:e3:26:e3:db:
de:3f:e1:4d:ad:88:7f:b3:48:f9:d2:b3:39:5f:e9:4f:b1:7d:
ba:1d:45:22:30:00:b1:67:23:aa:d2:7e:93:4b:32:0d:b2:d6:
7e:94:be:25:ca:85:cb:b4:93:31:43:51:7a:0f:3b:a6:c7:4e:
9e:d6:8e:78:0e:e4:b2:f0:9a:c4:8d:2e:ff:52:ad:56:92:99:
2b:6b:bd:f2:4a:0b:cb:60:97:e6:62:25:ea:e1:06:93:db:89:
90:58:ff:12:b9:71:5a:bd:ed:fd:8d:d6:d5:b8:4f:41:59:8d:
22:71:c0:cf:33:51:44:d1:ff:65:8b:8b:72:16:af:f5:78:18:
07:f0:25:f0:20:af:f1:87:0b:09:14:f4:ca:9f:72:93:4c:64:
60:6c:08:d3:33:e1:c9:4c:62:4d:56:f4:5d:78:53:6c:02:99:
15:24:c4:0c:d8:76:29:6d:bc:d9:2d:12:87:50:4e:fc:3a:08:
03:55:21:5b:4f:ec:5b:4a:24:bb:7e:60:c1:04:1b:4f:50:17:
f7:d6:81:80
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURugb9dlU+fbUucQGspK0m3aktVowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDAwMDQzWhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyYmJjZjRjNmZhODc5MGE0NWMxZGYyYTQ2NWQ3YzQwYzFi
OTNkODhlZjYxNTZmYjdmMjM1YWU0MWY2OGFmNTdhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCyw+l6cLNKAIpfPHHjziOiEaBjxmgirlgAPy9i4JuXHsqN
7U74r3pYLxmoP3XJH92+IL40Md88j+l6lZTC4cfMvIccqkKhMsElxkGIyfLWci47
foIcbpP5Y98zTyTBWDe/H5GYkBzAjsqEcM6PugnyT5j/tGAcskoJtPk+Awu7nFiU
fCgV5wHqfPUdjBLsE3oThMlkKJmcy01Go+Dk73wnSpV4Fc/nE+m+te2qkdggK3OT
c5ka39k1nUMtgGtlEoucNZ8Qod5Ddqssv/6UWqvQqiz4IVdvFoZgp5dRoFCL4t//
LOAVvOgjdpnd6jNKD4cIfh8Ku8GkRHow89PoVuTpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOYzlWgmO/lmCtfAuMQ/PlhnF1awwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBkZjc0ZTdmLTU2NmEtNGEzYy05ZjQ1LWViY2ZhYWUxMzU4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsihYwDQYJKoZIhvcNAQELBQADggEBALUrUGf8tF+2fGDcoJT2HGNMzhRK
CuTig0xD0YW6udWFBIvu6tH3HlWw4FbYhjRTMt494ybj294/4U2tiH+zSPnSszlf
6U+xfbodRSIwALFnI6rSfpNLMg2y1n6UviXKhcu0kzFDUXoPO6bHTp7WjngO5LLw
msSNLv9SrVaSmStrvfJKC8tgl+ZiJerhBpPbiZBY/xK5cVq97f2N1tW4T0FZjSJx
wM8zUUTR/2WLi3IWr/V4GAfwJfAgr/GHCwkU9MqfcpNMZGBsCNMz4clMYk1W9F14
U2wCmRUkxAzYdiltvNktEodQTvw6CANVIVtP7FtKJLt+YMEEG09QF/fWgYA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:27 2025 by rpki-client