Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d860352-9d55-43f3-b183-4a602ccaa131.roa
File: 4d860352-9d55-43f3-b183-4a602ccaa131.roa (raw, json)
Hash identifier: ieFjsDbwaINjss1GCo01sWgwYb/KCxaBBoPeFQCdyXE=
Subject key identifier: E8:81:2C:4A:4B:38:BE:67:9E:28:A1:94:4A:37:A8:45:87:0F:6F:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F8A6385D77077A30BD5F4AA9CE457A6FA83DD85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d860352-9d55-43f3-b183-4a602ccaa131.roa
Signing time: Sun 19 Oct 2025 02:00:08 +0000
ROA not before: Sun 19 Oct 2025 02:00:08 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8a:63:85:d7:70:77:a3:0b:d5:f4:aa:9c:e4:57:a6:fa:83:dd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:00:08 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=17ecfb6fc6590bbf54017380fec07f2326ce5cc4526f1cf53190b18de97be6d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:bd:75:5f:03:48:9b:b9:ec:f2:1b:d0:5d:
93:29:cc:fb:ce:0a:f8:4a:bc:61:cf:6a:f3:02:4e:
3e:7d:56:8b:5e:78:b1:c8:4e:6d:16:d8:10:33:3a:
dd:2c:9a:4f:69:e9:39:6d:be:01:4a:51:36:6f:21:
84:1c:33:5d:5a:22:f1:25:a8:b9:58:b8:6a:79:e2:
3a:ca:c8:9e:3e:11:18:50:1a:9f:ba:41:89:19:ae:
46:8e:17:31:17:95:31:21:d1:23:27:d9:88:1f:1c:
1b:ab:96:7d:0c:42:9b:09:0d:9f:a2:d1:08:59:c5:
0a:43:80:b4:da:da:15:13:33:49:fc:2d:bf:d9:8f:
4b:3b:15:77:ab:c3:56:88:1c:04:3a:75:e8:a7:22:
67:10:53:9d:71:7c:10:98:c6:f1:1e:90:24:52:19:
b3:67:82:c1:f0:f7:8c:17:77:33:44:58:e5:b1:4d:
58:a3:89:50:99:b4:fd:d2:b2:27:8c:0e:bb:87:3d:
46:9c:7a:43:12:11:f8:47:82:8a:3b:45:2f:79:40:
08:3f:94:1a:54:41:14:0e:b6:ba:f7:1c:ae:e2:44:
5d:52:98:d2:1e:ec:0a:1a:f4:5f:ae:dc:cd:8a:75:
68:16:09:c8:3f:72:8a:00:61:db:4d:6b:c3:41:17:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:2C:4A:4B:38:BE:67:9E:28:A1:94:4A:37:A8:45:87:0F:6F:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d860352-9d55-43f3-b183-4a602ccaa131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:34:79:62:76:ad:ba:e7:02:e9:a0:81:54:a2:d2:2d:25:0c:
c4:9c:60:36:79:c1:56:79:97:7a:7d:f1:87:7a:db:67:6d:f6:
53:30:47:8d:65:ac:db:6e:db:00:8d:9f:34:1a:a3:4d:d9:fe:
89:82:46:e1:15:34:f7:ca:2e:75:b2:c9:57:ed:ec:29:33:8c:
be:05:81:dd:30:ba:8f:03:5d:f4:82:22:9f:c8:88:ac:8b:ed:
15:f4:0f:59:f5:30:53:4e:78:ed:c1:c9:2b:26:ae:84:88:db:
f4:fc:72:0f:8e:3b:ef:f7:72:0c:fc:1a:37:20:dd:2e:a5:20:
64:d8:b0:cd:dc:fa:16:27:e0:89:d2:92:1f:d7:cc:cb:c3:24:
15:ca:a3:84:a8:ed:02:51:10:22:6a:b3:b7:4e:5f:61:b3:5f:
f5:11:fd:f4:9c:4b:44:5b:62:c2:c2:6a:f5:81:91:90:71:e5:
9e:d9:6d:f6:f6:a1:61:5d:89:ed:88:e6:24:0f:02:37:34:54:
c7:cf:1b:a1:25:47:40:4e:74:c7:8e:c2:0d:a1:51:59:f2:48:
f9:26:5b:65:9e:35:79:53:d6:1f:7f:cf:ba:f1:76:8c:ff:ec:
c0:1f:80:f5:15:be:9e:98:1d:ef:f3:26:db:0b:02:4c:7c:2f:
62:29:1c:74
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUX4pjhddwd6ML1fSqnORXpvqD3YUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDIwMDA4WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AxN2VjZmI2ZmM2NTkwYmJmNTQwMTczODBmZWMwN2YyMzI2
Y2U1Y2M0NTI2ZjFjZjUzMTkwYjE4ZGU5N2JlNmQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5db11XwNIm7ns8hvQXZMpzPvOCvhKvGHPavMCTj59Vote
eLHITm0W2BAzOt0smk9p6TltvgFKUTZvIYQcM11aIvElqLlYuGp54jrKyJ4+ERhQ
Gp+6QYkZrkaOFzEXlTEh0SMn2YgfHBurln0MQpsJDZ+i0QhZxQpDgLTa2hUTM0n8
Lb/Zj0s7FXerw1aIHAQ6deinImcQU51xfBCYxvEekCRSGbNngsHw94wXdzNEWOWx
TVijiVCZtP3SsieMDruHPUacekMSEfhHgoo7RS95QAg/lBpUQRQOtrr3HK7iRF1S
mNIe7Aoa9F+u3M2KdWgWCcg/cooAYdtNa8NBF7CHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6IEsSks4vmeeKKGUSjeoRYcPb4MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRkODYwMzUyLTlkNTUtNDNmMy1iMTgzLTRhNjAyY2NhYTEzMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi+QwDQYJKoZIhvcNAQELBQADggEBAD40eWJ2rbrnAumggVSi0i0lDMSc
YDZ5wVZ5l3p98Yd622dt9lMwR41lrNtu2wCNnzQao03Z/omCRuEVNPfKLnWyyVft
7CkzjL4Fgd0wuo8DXfSCIp/IiKyL7RX0D1n1MFNOeO3BySsmroSI2/T8cg+OO+/3
cgz8Gjcg3S6lIGTYsM3c+hYn4InSkh/XzMvDJBXKo4So7QJRECJqs7dOX2GzX/UR
/fScS0RbYsLCavWBkZBx5Z7Zbfb2oWFdie2I5iQPAjc0VMfPG6ElR0BOdMeOwg2h
UVnySPkmW2WeNXlT1h9/z7rxdoz/7MAfgPUVvp6YHe/zJtsLAkx8L2IpHHQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:04 2025 by rpki-client