Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1ead79-3277-45f3-9da2-2359dd994e21.roa
File: 8b1ead79-3277-45f3-9da2-2359dd994e21.roa (raw, json)
Hash identifier: cnmrLWhPioZwTB29Jk+ls86PB0Z29G7g3fcFvek3LsA=
Subject key identifier: C2:73:1F:B1:6B:05:77:F6:C9:F3:71:CB:E2:C1:18:1A:65:0A:F6:84
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 418348BABD12790056578B3A33A707054A549FE2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1ead79-3277-45f3-9da2-2359dd994e21.roa
Signing time: Mon 20 Oct 2025 04:31:51 +0000
ROA not before: Mon 20 Oct 2025 04:31:51 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:83:48:ba:bd:12:79:00:56:57:8b:3a:33:a7:07:05:4a:54:9f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:31:51 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f74c19fd88ad298bd68eb371e8f9d9b748b618254946f93271080189ae42de31, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:75:ce:e5:e9:7b:aa:e2:5a:7b:b1:9f:c7:
e1:9d:03:fa:30:96:07:b4:82:69:54:5f:fa:08:26:
42:7d:66:3d:ea:e3:fb:68:c6:97:0b:34:d9:2e:b8:
fd:32:c3:de:15:06:2e:bf:70:03:2b:b4:cd:08:a7:
62:ab:70:fa:67:92:be:b3:fe:fa:a2:06:e1:60:ab:
5d:61:3d:f5:bf:cd:76:3b:f3:59:ed:27:75:c9:ae:
a4:91:6c:e7:12:86:f8:b4:ab:14:b1:b1:14:4e:47:
3d:5b:2e:1b:a3:fd:6a:26:53:44:30:4e:f8:35:e8:
62:5c:f3:62:97:6b:65:0e:3d:8a:00:ff:17:81:64:
31:34:25:52:20:0f:13:25:12:fd:07:db:5c:ba:39:
db:e0:5e:e9:f6:36:21:c4:25:45:78:7c:bc:7a:40:
13:ac:16:4e:fc:55:cd:31:bc:fe:d3:69:68:c4:de:
c2:b3:5b:f8:ef:50:90:b9:cf:93:64:ae:75:dc:7d:
28:9f:98:9e:8d:33:3b:16:5f:88:05:ce:53:49:3f:
ba:84:6b:2e:94:02:3c:7a:cf:1f:95:27:74:ff:d9:
49:76:83:7d:5b:76:ca:c8:3f:bd:e9:86:f8:71:b1:
0e:89:d9:bf:4c:e2:ab:0e:e2:6b:ac:62:6b:dd:a9:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:1F:B1:6B:05:77:F6:C9:F3:71:CB:E2:C1:18:1A:65:0A:F6:84
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b1ead79-3277-45f3-9da2-2359dd994e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.70.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:44:bc:73:17:29:08:00:08:2e:cf:bf:33:8b:91:b8:fa:15:
be:9a:5d:c5:1c:08:a1:05:7d:4e:28:01:8f:33:1f:48:6a:dd:
f4:79:4d:b3:a8:80:95:62:80:27:99:27:ac:dc:94:b6:62:26:
90:b0:b7:a2:d6:10:01:a8:64:69:b9:68:29:49:19:a5:b4:72:
b1:87:e9:55:a6:cb:38:53:09:83:a1:aa:b9:da:ff:1c:3d:d6:
f2:f7:23:9f:a3:dc:11:4d:ca:9c:09:fb:32:0f:37:e0:3c:e3:
4c:13:16:76:0f:48:34:33:e4:15:fe:91:ac:56:1f:b4:f0:1f:
61:c1:65:61:50:61:86:a0:39:29:79:5c:03:30:05:7b:8a:c1:
81:8b:cb:fb:c5:33:49:02:ae:e6:b5:55:f0:1f:1a:23:c7:c1:
47:43:5d:23:cb:97:03:43:21:17:71:ec:42:b0:59:b2:5b:c6:
b4:ab:6d:ad:c8:16:8e:90:b2:94:33:87:58:91:64:de:ff:72:
83:fe:32:2c:27:81:f8:f5:5b:55:e8:e3:54:57:7c:70:6d:f6:
32:f9:55:9c:5d:c4:61:2b:10:5d:1f:f1:e8:02:fe:60:f7:93:
71:9f:63:20:1b:99:d2:c4:7c:6b:69:db:6b:f0:2e:bf:4e:f7:
09:99:90:d2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQYNIur0SeQBWV4s6M6cHBUpUn+IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDQzMTUxWhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNzRjMTlmZDg4YWQyOThiZDY4ZWIzNzFlOGY5ZDliNzQ4
YjYxODI1NDk0NmY5MzI3MTA4MDE4OWFlNDJkZTMxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwVnXO5el7quJae7Gfx+GdA/owlge0gmlUX/oIJkJ9Zj3q
4/toxpcLNNkuuP0yw94VBi6/cAMrtM0Ip2KrcPpnkr6z/vqiBuFgq11hPfW/zXY7
81ntJ3XJrqSRbOcShvi0qxSxsRRORz1bLhuj/WomU0QwTvg16GJc82KXa2UOPYoA
/xeBZDE0JVIgDxMlEv0H21y6OdvgXun2NiHEJUV4fLx6QBOsFk78Vc0xvP7TaWjE
3sKzW/jvUJC5z5NkrnXcfSifmJ6NMzsWX4gFzlNJP7qEay6UAjx6zx+VJ3T/2Ul2
g31bdsrIP73phvhxsQ6J2b9M4qsO4musYmvdqYIfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUwnMfsWsFd/bJ83HL4sEYGmUK9oQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhiMWVhZDc5LTMyNzctNDVmMy05ZGEyLTIzNTlkZDk5NGUyMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABsnkYwDQYJKoZIhvcNAQELBQADggEBAJtEvHMXKQgACC7PvzOLkbj6Fb6a
XcUcCKEFfU4oAY8zH0hq3fR5TbOogJVigCeZJ6zclLZiJpCwt6LWEAGoZGm5aClJ
GaW0crGH6VWmyzhTCYOhqrna/xw91vL3I5+j3BFNypwJ+zIPN+A840wTFnYPSDQz
5BX+kaxWH7TwH2HBZWFQYYagOSl5XAMwBXuKwYGLy/vFM0kCrua1VfAfGiPHwUdD
XSPLlwNDIRdx7EKwWbJbxrSrba3IFo6QspQzh1iRZN7/coP+Miwngfj1W1Xo41RX
fHBt9jL5VZxdxGErEF0f8egC/mD3k3GfYyAbmdLEfGtp22vwLr9O9wmZkNI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:15 2025 by rpki-client