Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/265bb95d-081a-483e-a4fe-e37b69125cba.roa
File: 265bb95d-081a-483e-a4fe-e37b69125cba.roa (raw, json)
Hash identifier: n5Da3srYImKcftkG8jybgBFavperVXSY6dN8UT2FgDM=
Subject key identifier: B0:6D:ED:47:B0:25:24:0F:6A:E2:69:C2:7D:6A:C4:D7:32:FB:7A:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 33A7601BAC6095CBE86534A26C6CD77E2CE61F68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/265bb95d-081a-483e-a4fe-e37b69125cba.roa
Signing time: Mon 20 Oct 2025 02:41:54 +0000
ROA not before: Mon 20 Oct 2025 02:41:54 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:a7:60:1b:ac:60:95:cb:e8:65:34:a2:6c:6c:d7:7e:2c:e6:1f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:41:54 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f996767881e18471269cb311b2344fc8d6b8a3713b96eaa7cb248552533ae7f8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:1e:08:98:89:69:06:ab:16:54:21:1c:52:
67:13:80:5b:ca:e1:31:06:c5:32:88:21:37:f5:63:
32:af:3b:da:be:d7:d9:af:4d:9c:dc:43:6a:ac:a2:
a1:67:bf:ff:a7:9d:1f:8d:71:d3:85:b8:6d:e2:49:
ca:27:04:30:f8:58:8f:d2:fa:05:9f:b6:90:15:de:
12:19:ab:b6:ef:0f:ea:44:98:9d:27:a7:36:2b:16:
b2:f2:6a:4d:c8:25:40:86:3c:4a:59:cc:90:87:72:
e3:c2:36:d4:97:cc:62:93:14:37:9b:39:0d:13:87:
ef:ff:2c:af:9a:7c:5c:83:79:f2:94:bd:1b:43:26:
0b:40:f9:7b:c9:68:6f:b6:e4:ab:32:38:eb:b2:7b:
9f:b5:81:48:5c:0b:f5:3a:90:82:19:6e:ae:2e:eb:
36:4b:46:91:a6:63:3b:b3:c2:42:b2:1a:07:88:0c:
dc:04:c3:9f:79:d2:4f:dd:24:22:83:de:90:07:13:
7e:d3:22:9f:f9:a7:b6:29:c7:35:31:df:a7:54:86:
16:12:2e:0b:0c:e2:46:ce:a6:d9:ec:e3:64:3e:58:
2b:a8:66:c0:8d:65:43:cd:ff:94:e1:95:3b:85:0f:
95:ec:fa:04:92:3f:46:a9:7b:87:78:d1:46:27:5d:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6D:ED:47:B0:25:24:0F:6A:E2:69:C2:7D:6A:C4:D7:32:FB:7A:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/265bb95d-081a-483e-a4fe-e37b69125cba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.136.0/21
Signature Algorithm: sha256WithRSAEncryption
01:dd:98:aa:35:22:41:24:1e:e6:1f:87:91:81:08:aa:e9:0a:
78:d2:de:f9:76:8e:b9:ac:14:e1:28:6a:24:4e:42:fd:f9:60:
8e:58:c7:80:65:d8:4d:84:2d:e3:e9:5d:be:76:5b:6f:a4:2a:
b5:47:bc:8b:64:d8:f4:ef:7f:1d:07:7f:e1:5a:56:ba:7b:3a:
1d:17:59:b1:dc:e6:c3:92:0b:9b:13:85:e4:9e:1d:1e:d6:93:
f6:58:50:ce:4b:3c:b4:03:c4:44:36:b6:7b:47:9f:70:3d:1a:
d6:9e:b7:17:77:8c:a5:4d:4b:3d:46:10:4e:4b:1a:7c:cc:4e:
25:59:76:48:f0:67:12:72:11:58:e8:c4:b8:f0:50:01:08:61:
b5:65:56:d7:17:59:61:54:0c:89:4f:01:d5:f6:8e:61:14:12:
18:6b:76:e1:85:f9:3f:9f:6c:1e:dc:5b:11:a3:08:c4:5b:36:
fb:2d:9a:9f:e4:12:bf:51:c9:c6:33:71:87:7c:7b:63:53:0f:
99:26:ad:85:70:d5:fa:ed:6e:7d:e7:ab:f4:76:29:24:8f:e7:
5b:c5:8c:2e:2f:74:44:9d:0a:fd:07:3a:18:cc:93:51:eb:a3:
52:9e:ee:f6:77:97:20:be:bc:16:ad:65:e7:bf:41:74:8b:d3:
0d:9f:56:8c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUM6dgG6xglcvoZTSibGzXfizmH2gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDI0MTU0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmOTk2NzY3ODgxZTE4NDcxMjY5Y2IzMTFiMjM0NGZjOGQ2
YjhhMzcxM2I5NmVhYTdjYjI0ODU1MjUzM2FlN2Y4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCe/R4ImIlpBqsWVCEcUmcTgFvK4TEGxTKIITf1YzKvO9q+
19mvTZzcQ2qsoqFnv/+nnR+NcdOFuG3iSconBDD4WI/S+gWftpAV3hIZq7bvD+pE
mJ0npzYrFrLyak3IJUCGPEpZzJCHcuPCNtSXzGKTFDebOQ0Th+//LK+afFyDefKU
vRtDJgtA+XvJaG+25KsyOOuye5+1gUhcC/U6kIIZbq4u6zZLRpGmYzuzwkKyGgeI
DNwEw5950k/dJCKD3pAHE37TIp/5p7YpxzUx36dUhhYSLgsM4kbOptns42Q+WCuo
ZsCNZUPN/5ThlTuFD5Xs+gSSP0ape4d40UYnXWGBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsG3tR7AlJA9q4mnCfWrE1zL7evowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzI2NWJiOTVkLTA4MWEtNDgzZS1hNGZlLWUzN2I2OTEyNWNiYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANsnYgwDQYJKoZIhvcNAQELBQADggEBAAHdmKo1IkEkHuYfh5GBCKrpCnjS
3vl2jrmsFOEoaiROQv35YI5Yx4Bl2E2ELePpXb52W2+kKrVHvItk2PTvfx0Hf+Fa
Vrp7Oh0XWbHc5sOSC5sTheSeHR7Wk/ZYUM5LPLQDxEQ2tntHn3A9Gtaetxd3jKVN
Sz1GEE5LGnzMTiVZdkjwZxJyEVjoxLjwUAEIYbVlVtcXWWFUDIlPAdX2jmEUEhhr
duGF+T+fbB7cWxGjCMRbNvstmp/kEr9RycYzcYd8e2NTD5kmrYVw1frtbn3nq/R2
KSSP51vFjC4vdESdCv0HOhjMk1Hro1Ke7vZ3lyC+vBatZee/QXSL0w2fVow=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:58 2025 by rpki-client