Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a0ad8a2-8f61-45d6-8d13-75a2d18853b1.roa
File: 1a0ad8a2-8f61-45d6-8d13-75a2d18853b1.roa (raw, json)
Hash identifier: 3cM8nmD1mPEqnn1MAAiQWN3B1jwtesEn4yKyqRtj2R8=
Subject key identifier: BA:0D:CF:7E:27:88:FA:C9:E0:74:7F:6C:A1:68:21:19:2F:C8:8B:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 24A4D257D4889F05F7A47DAA067EC1CCA0A56761
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a0ad8a2-8f61-45d6-8d13-75a2d18853b1.roa
Signing time: Mon 20 Oct 2025 05:42:20 +0000
ROA not before: Mon 20 Oct 2025 05:42:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a4:d2:57:d4:88:9f:05:f7:a4:7d:aa:06:7e:c1:cc:a0:a5:67:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:42:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a67b01172e57306fe893ce32f14c547e424a954c0630e5fa9d08584a99fe9f5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:8b:19:f2:01:f0:be:67:49:9c:2f:fe:8a:
9b:3b:e3:36:55:66:8a:e6:ca:0d:e4:1b:8e:cb:f0:
b3:67:db:45:40:2c:aa:72:4c:8f:c2:16:9c:b3:a7:
e9:38:f7:2b:be:66:30:33:a4:4f:22:c1:ad:da:c4:
8a:73:2d:5d:f8:43:96:54:07:9b:ad:71:a0:34:33:
51:a5:15:76:1d:0f:88:4b:64:4b:2d:26:e2:f9:86:
4b:54:79:a8:34:d9:85:e3:cf:f9:5b:4a:57:69:0b:
6f:55:ad:a5:4c:45:c4:02:7c:24:94:3b:37:87:16:
7a:1c:0b:09:4d:7b:5f:bb:b2:95:b6:bb:54:ab:e3:
19:29:9d:fe:fb:b4:c3:04:8c:64:a2:e5:24:05:3a:
6c:c2:43:cd:bc:e9:9f:e7:a8:9a:bb:d5:65:79:66:
4d:ea:56:47:5d:fa:8c:a8:d0:b1:67:cc:31:2b:07:
d6:95:22:69:e8:6b:27:7a:0f:aa:71:5d:e2:bd:ca:
29:ca:29:1b:90:77:cd:ab:e1:8a:f1:58:dd:15:bf:
0f:ec:42:28:bc:01:28:1f:32:ca:97:c2:64:50:05:
f6:f5:3b:ba:40:9e:db:15:29:c4:34:15:13:7f:aa:
0e:3e:e2:7e:d5:c2:cf:25:48:5e:e1:a4:7b:40:a7:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0D:CF:7E:27:88:FA:C9:E0:74:7F:6C:A1:68:21:19:2F:C8:8B:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1a0ad8a2-8f61-45d6-8d13-75a2d18853b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.225.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:3d:e8:ff:df:8b:30:d0:22:8e:ff:33:c6:9a:0f:cf:63:
38:78:a1:dd:ad:26:2d:bf:00:45:0a:d2:e4:3b:13:95:e1:53:
14:26:39:10:fe:d3:9e:5b:c8:8b:ff:13:0b:40:6f:76:41:0b:
31:cb:1d:81:8e:24:f2:df:d1:39:b8:d6:3f:63:02:2b:1d:2c:
4b:82:cb:13:4f:83:f6:d4:a7:a1:c6:34:4a:85:e2:b2:3d:d0:
3d:c4:fa:32:6a:b5:6e:ec:ce:a3:4e:7d:69:39:47:4b:d9:ce:
47:6a:ee:d5:e7:13:80:9c:d5:b6:6c:48:ba:d7:4b:86:97:aa:
3e:8c:df:c7:07:f8:f0:3b:86:4d:fd:1f:6d:28:02:8f:ca:12:
4b:e0:a8:24:12:65:43:e0:d1:20:11:03:0e:3f:bb:e8:c9:ca:
b9:ab:0e:90:9c:f6:1a:8f:0a:eb:56:da:64:68:f1:cd:e8:d5:
79:89:8f:e2:b5:8b:2a:a8:5b:61:9e:61:8d:f4:bc:77:d2:19:
b6:1f:93:76:64:4c:c0:e3:c4:e4:d0:b5:39:d5:6c:30:21:a8:
f4:79:af:7a:4b:48:79:ad:75:87:cc:d5:a2:b8:4a:04:60:a8:
bf:41:57:10:ee:46:e7:8a:24:25:7b:50:57:ce:15:4c:35:0b:
15:32:b4:10
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJKTSV9SInwX3pH2qBn7BzKClZ2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDU0MjIwWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNjdiMDExNzJlNTczMDZmZTg5M2NlMzJmMTRjNTQ3ZTQy
NGE5NTRjMDYzMGU1ZmE5ZDA4NTg0YTk5ZmU5ZjVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJLIsZ8gHwvmdJnC/+ips74zZVZormyg3kG47L8LNn20VA
LKpyTI/CFpyzp+k49yu+ZjAzpE8iwa3axIpzLV34Q5ZUB5utcaA0M1GlFXYdD4hL
ZEstJuL5hktUeag02YXjz/lbSldpC29VraVMRcQCfCSUOzeHFnocCwlNe1+7spW2
u1Sr4xkpnf77tMMEjGSi5SQFOmzCQ8286Z/nqJq71WV5Zk3qVkdd+oyo0LFnzDEr
B9aVImnoayd6D6pxXeK9yinKKRuQd82r4YrxWN0Vvw/sQii8ASgfMsqXwmRQBfb1
O7pAntsVKcQ0FRN/qg4+4n7Vws8lSF7hpHtAp07JAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUug3PfieI+sngdH9soWghGS/Ii30wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFhMGFkOGEyLThmNjEtNDVkNi04ZDEzLTc1YTJkMTg4NTNiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnuEwDQYJKoZIhvcNAQELBQADggEBAID7Pej/34sw0CKO/zPGmg/PYzh4
od2tJi2/AEUK0uQ7E5XhUxQmORD+055byIv/EwtAb3ZBCzHLHYGOJPLf0Tm41j9j
AisdLEuCyxNPg/bUp6HGNEqF4rI90D3E+jJqtW7szqNOfWk5R0vZzkdq7tXnE4Cc
1bZsSLrXS4aXqj6M38cH+PA7hk39H20oAo/KEkvgqCQSZUPg0SARAw4/u+jJyrmr
DpCc9hqPCutW2mRo8c3o1XmJj+K1iyqoW2GeYY30vHfSGbYfk3ZkTMDjxOTQtTnV
bDAhqPR5r3pLSHmtdYfM1aK4SgRgqL9BVxDuRueKJCV7UFfOFUw1CxUytBA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:07 2025 by rpki-client