Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ad2e87d-9572-484e-ba09-b5f6e660fd03.roa
File: 8ad2e87d-9572-484e-ba09-b5f6e660fd03.roa (raw, json)
Hash identifier: Y/+tTq4Irk51x2tXi4maGwGe992m8+uTK1IiQNVoTgk=
Subject key identifier: D9:D7:4D:28:DE:08:3A:14:3E:33:70:BC:84:D6:78:2B:3A:34:87:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EBAEB9F64E959EFF5121A218EA424C5D9770EB4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ad2e87d-9572-484e-ba09-b5f6e660fd03.roa
Signing time: Mon 20 Oct 2025 00:30:14 +0000
ROA not before: Mon 20 Oct 2025 00:30:14 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ba:eb:9f:64:e9:59:ef:f5:12:1a:21:8e:a4:24:c5:d9:77:0e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:30:14 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=dee6bbcad62a5fbc37105352fd569238aed6831435aa9ef521e83f24bdcd0ef0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c2:d9:e5:fb:a0:e5:d2:9a:f8:3c:65:4d:3f:
d1:cf:4e:e5:c5:b6:98:50:b5:c2:a8:a6:77:69:16:
0c:af:9a:c7:f1:ad:30:9f:f2:51:10:47:0c:16:90:
48:26:01:51:37:e2:51:77:18:55:4b:16:f0:99:1f:
84:e1:6e:63:b6:9f:ce:3b:7b:d6:d2:93:18:68:29:
e1:97:06:62:09:65:08:d5:b1:94:29:3e:fd:44:55:
e4:75:b5:0f:68:ec:b9:1c:dc:52:a5:21:9f:49:c2:
6b:27:f7:2e:6d:0f:37:9a:83:68:48:16:93:93:26:
26:80:e3:5e:14:60:08:8a:bc:6c:c2:23:11:db:e6:
39:09:fb:b2:20:6c:78:35:e5:d7:fd:ed:ba:4a:d1:
d9:55:4d:95:ad:f4:36:96:d6:c6:9f:53:e1:b8:cc:
6a:65:fc:aa:83:91:0c:bf:6a:f3:ba:f7:72:c6:d8:
1a:d8:37:31:c2:92:50:39:39:ad:43:cc:e3:c8:5f:
7e:7d:79:ab:84:0e:c7:a5:fa:00:07:39:40:39:95:
32:4b:37:0e:20:2d:7c:9d:8d:cb:45:dd:12:f3:ab:
d4:68:a1:60:29:c9:7e:46:5a:4d:89:5b:41:14:96:
f5:e1:9d:4d:7f:00:53:7e:7c:fe:70:52:06:c1:ef:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D7:4D:28:DE:08:3A:14:3E:33:70:BC:84:D6:78:2B:3A:34:87:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ad2e87d-9572-484e-ba09-b5f6e660fd03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:af:ce:d0:d9:bf:fe:b8:48:c4:c6:a9:7f:79:42:7a:9c:bd:
02:63:cf:93:71:bb:72:23:1d:af:01:08:ac:f7:22:be:e8:69:
44:83:81:65:cb:14:c1:f7:eb:de:8b:bd:9d:38:1a:51:77:59:
a8:3c:a8:ff:d0:52:65:59:64:e3:f4:b2:8a:63:fb:24:f6:d8:
7b:5b:df:0e:4d:0f:e8:4a:81:b1:a7:a4:3f:ba:ce:39:05:56:
c0:cc:cc:ad:b6:fe:ed:48:84:fd:07:cf:5d:69:3e:c7:0a:97:
c1:a3:28:df:66:d6:8b:43:65:49:d7:d7:f7:24:f0:b7:11:69:
a7:66:04:50:cf:fb:c9:67:b2:ea:34:d7:67:18:6e:b7:c3:f3:
d5:0c:f6:c3:ee:24:6a:a3:76:0f:82:65:0c:e6:a2:52:d5:a5:
fb:61:c2:b0:63:7b:57:03:60:2d:6b:f4:da:76:09:e7:87:3a:
e5:2d:dd:a0:b2:2c:76:fb:8c:81:96:fd:2b:0f:a6:3f:50:f2:
4a:bb:29:10:5a:e8:6e:d9:72:73:4c:30:1f:62:21:84:94:ac:
2f:1b:60:e5:bb:19:97:3a:6f:70:02:75:0a:e4:6a:9b:6b:2a:
bf:06:55:b5:4d:ac:29:8a:75:01:52:85:85:f1:3e:51:c7:c4:
72:e2:fc:d8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHrrrn2TpWe/1EhohjqQkxdl3DrQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDAzMDE0WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZWU2YmJjYWQ2MmE1ZmJjMzcxMDUzNTJmZDU2OTIzOGFl
ZDY4MzE0MzVhYTllZjUyMWU4M2YyNGJkY2QwZWYwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDRwtnl+6Dl0pr4PGVNP9HPTuXFtphQtcKopndpFgyvmsfx
rTCf8lEQRwwWkEgmAVE34lF3GFVLFvCZH4ThbmO2n847e9bSkxhoKeGXBmIJZQjV
sZQpPv1EVeR1tQ9o7Lkc3FKlIZ9Jwmsn9y5tDzeag2hIFpOTJiaA414UYAiKvGzC
IxHb5jkJ+7IgbHg15df97bpK0dlVTZWt9DaW1safU+G4zGpl/KqDkQy/avO693LG
2BrYNzHCklA5Oa1DzOPIX359eauEDsel+gAHOUA5lTJLNw4gLXydjctF3RLzq9Ro
oWApyX5GWk2JW0EUlvXhnU1/AFN+fP5wUgbB722VAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2ddNKN4IOhQ+M3C8hNZ4Kzo0h9AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhZDJlODdkLTk1NzItNDg0ZS1iYTA5LWI1ZjZlNjYwZmQwMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnhIwDQYJKoZIhvcNAQELBQADggEBAKivztDZv/64SMTGqX95QnqcvQJj
z5Nxu3IjHa8BCKz3Ir7oaUSDgWXLFMH3696LvZ04GlF3Wag8qP/QUmVZZOP0sopj
+yT22Htb3w5ND+hKgbGnpD+6zjkFVsDMzK22/u1IhP0Hz11pPscKl8GjKN9m1otD
ZUnX1/ck8LcRaadmBFDP+8lnsuo012cYbrfD89UM9sPuJGqjdg+CZQzmolLVpfth
wrBje1cDYC1r9Np2CeeHOuUt3aCyLHb7jIGW/SsPpj9Q8kq7KRBa6G7ZcnNMMB9i
IYSUrC8bYOW7GZc6b3ACdQrkaptrKr8GVbVNrCmKdQFShYXxPlHHxHLi/Ng=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:49:12 2025 by rpki-client