Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c11614d-910d-4af3-8998-3898a99f99b9.roa
File: 4c11614d-910d-4af3-8998-3898a99f99b9.roa (raw, json)
Hash identifier: I/VD+CGa1w8TDAWzrD3P40dDYgtBTxiFTMyQpJY8vlA=
Subject key identifier: 6B:B3:30:B9:F3:78:F2:53:E3:28:15:72:54:4A:53:DD:5C:2F:3C:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 413149F8B6E510FEA0C57B805AA4CAF0F803BD53
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c11614d-910d-4af3-8998-3898a99f99b9.roa
Signing time: Mon 20 Oct 2025 00:51:33 +0000
ROA not before: Mon 20 Oct 2025 00:51:33 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:31:49:f8:b6:e5:10:fe:a0:c5:7b:80:5a:a4:ca:f0:f8:03:bd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:51:33 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a2c0d4b34aa744a3530e837e2dbb826ba5d9e0497fba471ef1e59e8bbb703875, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:5b:4d:c2:c8:c0:07:94:98:a2:e5:41:7d:
fa:b8:6f:2c:ef:5f:3d:f0:9f:9c:6c:1a:a0:12:78:
c8:94:de:bb:c5:96:79:67:53:81:82:d9:05:e4:6b:
f1:25:bf:93:de:d9:7c:ca:28:53:cf:67:d8:b3:ed:
84:7d:5f:1c:96:7b:f9:3b:0f:91:7f:1b:4e:72:0c:
3c:de:5d:bd:ea:ad:01:73:0f:b0:e8:2b:89:c4:9c:
dd:d2:fc:f9:a4:92:eb:94:01:6c:b9:43:10:b1:64:
0e:5e:76:15:55:a8:22:2b:67:3c:73:1a:6e:4a:e5:
1a:39:8b:d9:39:63:e7:76:27:52:8a:57:04:26:9f:
07:65:74:c6:3e:1e:58:f3:c1:a0:c3:9b:ce:a3:2b:
67:52:42:89:14:74:70:bd:36:06:ca:9d:01:ae:6c:
20:5d:e5:32:e1:2a:f0:db:d9:d3:a1:9b:cc:c5:89:
a6:f5:84:8c:b9:69:c0:ce:3a:cc:95:fd:f4:58:14:
72:04:6e:b6:fb:9c:a4:1b:a6:09:8d:3d:6e:06:d1:
90:ca:da:38:13:69:d5:ca:f0:ae:11:1b:21:04:45:
46:55:62:b4:71:f1:87:76:35:54:08:fa:cc:7e:ec:
e9:62:6e:6a:b7:3c:a7:1e:42:05:fe:12:9c:b7:c2:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B3:30:B9:F3:78:F2:53:E3:28:15:72:54:4A:53:DD:5C:2F:3C:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c11614d-910d-4af3-8998-3898a99f99b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.100.0/22
Signature Algorithm: sha256WithRSAEncryption
90:12:ec:38:fb:4a:27:b4:a5:7f:5a:b9:c5:1e:da:eb:9b:b5:
0a:0e:7a:31:9a:9f:73:77:37:88:a0:5a:3e:79:5c:e1:28:01:
a4:29:56:2a:db:3c:6b:0a:ef:c9:9a:b2:73:9e:65:40:3e:d5:
dc:75:69:db:dd:58:50:c6:72:32:6b:8d:c9:85:35:e1:70:ce:
da:d3:20:09:60:d4:cd:79:82:a0:ce:ef:14:1a:84:43:f3:d3:
e8:73:76:d9:d5:04:17:c3:a9:41:eb:3b:16:f4:23:93:18:1a:
f2:f8:60:6a:ca:57:32:27:38:04:0f:c4:56:31:cf:87:ff:cd:
fc:84:12:6f:d8:84:72:6a:71:15:7f:2a:2d:9a:86:f6:b7:f3:
b6:5d:08:ad:5f:a9:59:fd:25:5a:4f:9c:2e:aa:c6:74:25:03:
b0:9c:ef:ab:97:c3:e4:43:85:2d:2c:ee:42:0a:80:50:03:5f:
8c:3d:05:7f:9c:81:e8:b6:6f:49:36:7c:0e:ab:45:72:64:8d:
19:88:85:80:16:25:aa:c6:20:81:4c:2d:1f:5e:e9:be:92:60:
03:e8:c0:e2:c1:25:ac:dc:df:56:22:83:c3:11:2b:44:6a:db:
d9:7a:65:d8:e2:89:7b:e1:35:34:c0:32:70:7a:cf:67:e6:81:
0c:e3:0a:62
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQTFJ+LblEP6gxXuAWqTK8PgDvVMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDA1MTMzWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmMwZDRiMzRhYTc0NGEzNTMwZTgzN2UyZGJiODI2YmE1
ZDllMDQ5N2ZiYTQ3MWVmMWU1OWU4YmJiNzAzODc1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFBltNwsjAB5SYouVBffq4byzvXz3wn5xsGqASeMiU3rvF
lnlnU4GC2QXka/Elv5Pe2XzKKFPPZ9iz7YR9XxyWe/k7D5F/G05yDDzeXb3qrQFz
D7DoK4nEnN3S/PmkkuuUAWy5QxCxZA5edhVVqCIrZzxzGm5K5Ro5i9k5Y+d2J1KK
VwQmnwdldMY+HljzwaDDm86jK2dSQokUdHC9NgbKnQGubCBd5TLhKvDb2dOhm8zF
iab1hIy5acDOOsyV/fRYFHIEbrb7nKQbpgmNPW4G0ZDK2jgTadXK8K4RGyEERUZV
YrRx8Yd2NVQI+sx+7Olibmq3PKceQgX+Epy3wionAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUa7MwufN48lPjKBVyVEpT3VwvPPkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRjMTE2MTRkLTkxMGQtNGFmMy04OTk4LTM4OThhOTlmOTliOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsnmQwDQYJKoZIhvcNAQELBQADggEBAJAS7Dj7Sie0pX9aucUe2uubtQoO
ejGan3N3N4igWj55XOEoAaQpVirbPGsK78masnOeZUA+1dx1advdWFDGcjJrjcmF
NeFwztrTIAlg1M15gqDO7xQahEPz0+hzdtnVBBfDqUHrOxb0I5MYGvL4YGrKVzIn
OAQPxFYxz4f/zfyEEm/YhHJqcRV/Ki2ahva387ZdCK1fqVn9JVpPnC6qxnQlA7Cc
76uXw+RDhS0s7kIKgFADX4w9BX+cgei2b0k2fA6rRXJkjRmIhYAWJarGIIFMLR9e
6b6SYAPowOLBJazc31Yig8MRK0Rq29l6ZdjiiXvhNTTAMnB6z2fmgQzjCmI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:39 2025 by rpki-client