Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6e98dd-1dd3-4f21-b959-aef46eae681a.roa
File: 5c6e98dd-1dd3-4f21-b959-aef46eae681a.roa (raw, json)
Hash identifier: 17c5QqBqw+UMW4PqnMP470u3gEK8k8m6f46+lfzhgiE=
Subject key identifier: 47:8C:E9:10:5F:3A:98:CA:FF:15:03:3F:EF:30:85:0A:E5:B8:B4:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BC0AA0E91ADD0529373370DCF317405CB6B4388
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6e98dd-1dd3-4f21-b959-aef46eae681a.roa
Signing time: Mon 20 Oct 2025 05:12:12 +0000
ROA not before: Mon 20 Oct 2025 05:12:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c0:aa:0e:91:ad:d0:52:93:73:37:0d:cf:31:74:05:cb:6b:43:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:12:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=fb9c0bf5597d6bf6603ffd8ae4b665f52a6a246acd96c8d05b75149aec0305bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:d8:64:6a:30:a1:37:e2:f5:b0:1a:e0:e9:
4e:49:a0:56:24:df:32:f4:71:e6:1a:46:0b:fa:2d:
79:2f:1a:8a:de:74:ad:eb:a2:9d:b2:3b:dd:66:de:
a7:df:07:69:26:f2:aa:af:2a:f1:ec:40:d5:a0:9c:
9e:e3:e1:b2:ac:c5:9a:5d:bf:cc:8c:0d:81:0d:ca:
75:8e:87:3d:53:cf:98:07:22:70:ef:56:82:ba:28:
d8:d5:0e:c7:62:43:41:78:74:e8:64:57:36:29:55:
d9:e5:08:19:b5:ac:45:06:a8:0d:36:48:06:4d:30:
ac:54:35:e0:65:ca:9c:a5:ef:b8:b2:d3:a5:fd:d6:
d8:26:19:4d:00:ec:64:b3:31:2a:f0:81:82:6b:d3:
18:b0:ce:ed:64:ed:99:81:03:7d:09:59:9f:81:dd:
89:09:f4:65:fd:b4:1f:5d:db:5b:e1:16:ac:8d:b9:
c7:0f:27:c4:de:4e:4f:a7:55:35:9a:17:cb:7c:6f:
c7:b0:ed:3b:89:7b:39:44:56:19:b1:04:6d:2e:71:
a8:99:05:9f:39:a4:ae:c2:7d:68:74:c8:d5:8f:e5:
a9:e8:36:ea:31:b2:0f:5e:ac:8d:4a:e8:31:9b:d4:
df:b2:53:a3:00:f1:ad:6c:1a:21:d8:a9:80:27:4e:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8C:E9:10:5F:3A:98:CA:FF:15:03:3F:EF:30:85:0A:E5:B8:B4:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c6e98dd-1dd3-4f21-b959-aef46eae681a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.102.0/24
Signature Algorithm: sha256WithRSAEncryption
05:fa:56:f2:ff:a6:b8:4d:bf:0c:e5:0c:dd:27:3c:2b:07:20:
d9:2d:03:5d:48:0b:66:d8:bf:a4:e1:fc:69:a9:ab:ee:6d:fd:
be:d5:36:3e:b7:5e:ea:0b:b5:58:69:54:21:74:f8:66:cb:d8:
f9:b0:ca:2d:d8:1f:68:96:fb:a9:d7:b2:39:b8:f4:b5:02:80:
58:b5:16:7e:f2:f8:30:9f:a5:b3:19:20:1f:8b:b9:cc:a8:1a:
10:c1:72:a0:f5:74:2e:9f:94:97:c9:68:b0:ea:1b:82:83:b8:
cb:00:b2:44:69:8c:c1:d7:14:d3:16:b6:a3:72:5d:66:a4:42:
71:bb:c7:13:9b:fd:ff:9d:28:42:39:a1:37:30:a1:d0:1f:79:
e7:cf:b0:f6:72:9f:14:72:d9:f3:b2:6a:8d:cc:6a:df:96:6a:
bd:77:ed:ec:8c:22:07:32:51:58:d1:11:8f:ce:c4:c6:3a:ed:
0e:d7:67:20:a0:69:b0:f9:72:d1:8a:9b:0c:f3:07:7b:1f:09:
83:69:be:0a:a3:47:97:c4:d4:ff:25:00:f0:32:e4:ad:c7:df:
f1:56:a5:90:b6:d9:2a:0d:33:29:62:77:ee:e7:19:48:2e:26:
d9:6b:f7:fd:57:ba:e7:80:d5:4e:f4:35:54:4f:a8:78:83:36:
11:41:c2:97
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe8CqDpGt0FKTczcNzzF0BctrQ4gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDUxMjEyWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmYjljMGJmNTU5N2Q2YmY2NjAzZmZkOGFlNGI2NjVmNTJh
NmEyNDZhY2Q5NmM4ZDA1Yjc1MTQ5YWVjMDMwNWJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCaaNhkajChN+L1sBrg6U5JoFYk3zL0ceYaRgv6LXkvGore
dK3rop2yO91m3qffB2km8qqvKvHsQNWgnJ7j4bKsxZpdv8yMDYENynWOhz1Tz5gH
InDvVoK6KNjVDsdiQ0F4dOhkVzYpVdnlCBm1rEUGqA02SAZNMKxUNeBlypyl77iy
06X91tgmGU0A7GSzMSrwgYJr0xiwzu1k7ZmBA30JWZ+B3YkJ9GX9tB9d21vhFqyN
uccPJ8TeTk+nVTWaF8t8b8ew7TuJezlEVhmxBG0ucaiZBZ85pK7CfWh0yNWP5ano
Nuoxsg9erI1K6DGb1N+yU6MA8a1sGiHYqYAnTuBfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUR4zpEF86mMr/FQM/7zCFCuW4tLAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVjNmU5OGRkLTFkZDMtNGYyMS1iOTU5LWFlZjQ2ZWFlNjgxYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsn2YwDQYJKoZIhvcNAQELBQADggEBAAX6VvL/prhNvwzlDN0nPCsHINkt
A11IC2bYv6Th/Gmpq+5t/b7VNj63XuoLtVhpVCF0+GbL2Pmwyi3YH2iW+6nXsjm4
9LUCgFi1Fn7y+DCfpbMZIB+LucyoGhDBcqD1dC6flJfJaLDqG4KDuMsAskRpjMHX
FNMWtqNyXWakQnG7xxOb/f+dKEI5oTcwodAfeefPsPZynxRy2fOyao3Mat+War13
7eyMIgcyUVjREY/OxMY67Q7XZyCgabD5ctGKmwzzB3sfCYNpvgqjR5fE1P8lAPAy
5K3H3/FWpZC22SoNMylid+7nGUguJtlr9/1XuueA1U70NVRPqHiDNhFBwpc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:42:04 2025 by rpki-client