Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641ec844-497c-4315-ba7b-c3404663299c.roa
File: 641ec844-497c-4315-ba7b-c3404663299c.roa (raw, json)
Hash identifier: ehdJd+LBYzJEQFzGPI+kj7Fm/50tZu4hAzC5L6yK2tI=
Subject key identifier: 28:99:2D:82:1B:BD:92:78:EB:C6:61:04:C8:4F:79:FE:4B:43:0D:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06D1A9CCF50F16ED9A9EAB7D7005EEDA6DA400C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641ec844-497c-4315-ba7b-c3404663299c.roa
Signing time: Sun 19 Oct 2025 02:50:09 +0000
ROA not before: Sun 19 Oct 2025 02:50:09 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.139.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d1:a9:cc:f5:0f:16:ed:9a:9e:ab:7d:70:05:ee:da:6d:a4:00:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:50:09 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b7cd792faa5ad601126ff99802c69f4be1ba220947cba4fd288b63dc64590c8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:ac:f2:20:9e:eb:71:7d:d7:10:2b:2d:41:
66:09:3c:1f:8d:6b:3a:28:07:fc:4c:9e:ca:46:cc:
43:3e:0c:24:77:a8:f1:80:2e:d9:fa:18:32:00:0e:
b6:b4:54:05:71:a2:f0:2b:72:47:34:9c:13:4c:f8:
d7:f0:fb:b3:f3:12:04:f0:98:cd:71:6d:98:ed:75:
c4:ed:8c:3b:ef:00:cc:c3:1c:31:2b:3f:be:09:f1:
fd:2d:03:a0:ed:61:66:58:0a:a4:0b:d0:8b:ed:81:
b3:81:47:94:4a:6c:fc:3d:d7:b0:f1:73:97:3a:c7:
97:ed:92:e4:45:55:87:47:87:54:14:86:3c:6f:c9:
4e:94:bc:fe:80:dd:b1:3f:bd:a5:41:08:95:c7:78:
97:1e:e1:54:a0:01:2c:7e:c7:72:92:5b:4e:43:98:
1b:dd:03:d1:43:d6:a8:f1:63:b4:98:a8:61:1a:a6:
9a:34:a0:1e:e8:6f:df:c8:68:26:d0:e3:0e:da:50:
20:ee:22:0e:64:28:b3:32:74:37:57:99:1c:f7:7e:
85:2e:45:6b:72:77:ee:2d:42:23:f6:a7:86:3f:e0:
f5:7f:41:9b:75:73:ed:79:f1:d1:f1:39:a2:a7:de:
9a:89:7b:a6:e1:5a:85:3d:2d:42:c0:cb:98:8d:af:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:2D:82:1B:BD:92:78:EB:C6:61:04:C8:4F:79:FE:4B:43:0D:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/641ec844-497c-4315-ba7b-c3404663299c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.139.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a6:27:8a:d2:e0:81:45:19:01:b3:14:81:74:9b:06:8a:a2:
13:c9:59:2e:cf:65:f8:d2:3f:5d:f0:61:6b:23:48:a1:4c:1e:
10:e5:db:5c:fa:f1:5c:3c:b5:0a:c5:af:8a:11:fe:51:68:7c:
2b:fa:c1:9a:49:fa:f2:44:06:a3:b2:1f:6e:45:94:18:db:b0:
5c:91:6f:52:b7:d2:54:9e:f5:5a:ea:0b:dc:ef:19:e8:8e:06:
bf:cd:04:ad:71:85:60:b7:d5:ca:73:b1:01:29:95:e6:f3:94:
01:cc:b9:e9:34:cb:58:93:0e:f9:e8:ca:4e:86:41:bb:0a:db:
7d:46:c8:5c:50:f2:d4:96:57:b0:d5:13:67:36:39:f1:07:30:
70:58:17:9e:a3:01:d4:0d:9b:a4:ad:0c:f7:41:33:f8:38:b6:
0e:35:5e:66:07:4e:f7:6b:6d:ee:00:28:3c:5e:f6:fc:75:5f:
77:4a:6b:8f:12:80:8d:c8:7c:50:04:08:7c:ad:9f:9b:da:63:
86:08:c1:6e:db:0b:08:89:be:60:ca:9d:7e:23:b2:ba:61:a5:
23:bc:8b:5e:00:83:83:4b:68:4a:6b:5e:84:b8:34:af:8f:1f:
98:f6:f7:37:2f:cc:80:27:7c:fe:67:43:87:25:4f:73:2a:8e:
b4:4e:f8:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBtGpzPUPFu2anqt9cAXu2m2kAMcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE5MDI1MDA5WhcNMjUxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiN2NkNzkyZmFhNWFkNjAxMTI2ZmY5OTgwMmM2OWY0YmUx
YmEyMjA5NDdjYmE0ZmQyODhiNjNkYzY0NTkwYzhlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCdX6zyIJ7rcX3XECstQWYJPB+NazooB/xMnspGzEM+DCR3
qPGALtn6GDIADra0VAVxovArckc0nBNM+Nfw+7PzEgTwmM1xbZjtdcTtjDvvAMzD
HDErP74J8f0tA6DtYWZYCqQL0IvtgbOBR5RKbPw917Dxc5c6x5ftkuRFVYdHh1QU
hjxvyU6UvP6A3bE/vaVBCJXHeJce4VSgASx+x3KSW05DmBvdA9FD1qjxY7SYqGEa
ppo0oB7ob9/IaCbQ4w7aUCDuIg5kKLMydDdXmRz3foUuRWtyd+4tQiP2p4Y/4PV/
QZt1c+158dHxOaKn3pqJe6bhWoU9LULAy5iNr/EdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKJktghu9knjrxmEEyE95/ktDDQ4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY0MWVjODQ0LTQ5N2MtNDMxNS1iYTdiLWMzNDA0NjYzMjk5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsi/0wDQYJKoZIhvcNAQELBQADggEBADGmJ4rS4IFFGQGzFIF0mwaKohPJ
WS7PZfjSP13wYWsjSKFMHhDl21z68Vw8tQrFr4oR/lFofCv6wZpJ+vJEBqOyH25F
lBjbsFyRb1K30lSe9VrqC9zvGeiOBr/NBK1xhWC31cpzsQEplebzlAHMuek0y1iT
Dvnoyk6GQbsK231GyFxQ8tSWV7DVE2c2OfEHMHBYF56jAdQNm6StDPdBM/g4tg41
XmYHTvdrbe4AKDxe9vx1X3dKa48SgI3IfFAECHytn5vaY4YIwW7bCwiJvmDKnX4j
srphpSO8i14Ag4NLaEprXoS4NK+PH5j29zcvzIAnfP5nQ4clT3MqjrRO+Jk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:14 2025 by rpki-client