Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa7141a5-070e-4965-a0ca-6077b05ffe7e.roa
File: aa7141a5-070e-4965-a0ca-6077b05ffe7e.roa (raw, json)
Hash identifier: Go33kd6Z3Ew8uxcbKdj0WCxIm2A1za4ARnmGxTGFBvg=
Subject key identifier: 44:EF:2C:37:89:2A:7B:5D:97:C4:63:5F:BD:6D:6C:66:F2:AF:38:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 641D06D9706713838F610B6F7DBF6A8F664DDA8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa7141a5-070e-4965-a0ca-6077b05ffe7e.roa
Signing time: Mon 20 Oct 2025 01:30:19 +0000
ROA not before: Mon 20 Oct 2025 01:30:19 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:1d:06:d9:70:67:13:83:8f:61:0b:6f:7d:bf:6a:8f:66:4d:da:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:30:19 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=46e4359ae556fd4bac3862b23d08e3bc3600cf3ecb1608f5ab375659e3798fe0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:0d:d7:21:21:ab:af:a0:b7:dd:bb:97:5d:
1f:2e:c1:f0:86:e0:60:4b:3d:51:33:61:93:a4:59:
5e:0f:3c:21:9a:4b:81:b7:a6:12:aa:f1:1b:c3:f4:
ac:e1:b1:0a:5e:0a:7c:c7:29:8d:3f:2c:71:bd:80:
c1:e4:83:0b:cf:a8:29:ef:04:9a:93:df:e8:63:2f:
cf:aa:b6:42:7b:be:9c:26:ec:6e:35:b3:76:b8:d0:
66:fd:b2:0c:a5:9e:fb:17:26:17:47:7f:32:c0:6f:
69:83:f2:fb:ab:51:ae:35:d1:07:87:31:a3:04:1c:
fc:aa:d3:ad:e4:43:74:1f:42:47:09:20:0f:19:b2:
5c:82:88:fe:65:8a:79:dd:c2:c5:f7:c0:ea:e3:d6:
37:ce:ef:eb:a6:26:8e:18:95:00:ea:3f:75:cd:aa:
9c:9b:fd:48:7d:9c:bf:d4:85:b0:c1:91:2e:f1:c4:
a5:4a:59:e6:0d:35:86:3f:e7:25:80:55:9c:83:6d:
b9:5e:e9:e5:c0:4b:a6:62:35:64:f5:56:b5:d8:5c:
9f:d4:af:5c:fd:b8:fe:8b:3c:9b:df:af:fc:fd:89:
9d:38:7b:24:47:85:24:cc:9e:85:ae:d0:84:86:01:
10:f8:00:ff:f2:f4:b7:08:30:76:e8:f9:23:35:ea:
a3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EF:2C:37:89:2A:7B:5D:97:C4:63:5F:BD:6D:6C:66:F2:AF:38:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aa7141a5-070e-4965-a0ca-6077b05ffe7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.196.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:2c:87:3c:7d:a5:5f:ff:0f:3a:14:78:0b:eb:aa:7c:15:bb:
79:3c:82:de:55:7d:1e:64:bb:9c:cf:0d:95:fd:1a:7b:e5:81:
7e:2d:c7:41:49:18:fb:0b:0e:a2:e3:35:85:95:34:ab:d8:e9:
61:47:d6:22:69:ea:5e:20:e4:55:3b:b4:89:ed:18:cd:50:a1:
b0:67:7d:cc:79:38:46:19:c2:bb:ee:dc:d5:e5:33:39:18:a1:
f5:ac:d7:96:8f:5d:4f:86:bf:79:33:0b:99:66:ce:05:0b:f8:
d3:96:c9:37:ac:66:e6:e7:05:b8:82:85:03:43:d0:fb:85:f1:
a4:ba:58:85:6a:72:f1:26:51:0c:bc:1f:ba:20:52:ef:50:1f:
23:23:74:9f:d7:c9:d0:d7:fc:9b:c1:2b:dd:56:99:01:23:86:
71:de:25:69:ac:8c:09:7c:2e:5c:e6:a0:5f:84:68:0d:fd:f3:
01:c7:7c:69:c8:26:85:ed:07:7f:36:73:59:ab:d6:62:17:4a:
a6:79:42:d1:f0:bd:50:ef:e8:c6:6a:4d:8d:01:e6:03:c3:b4:
da:e0:10:f8:86:fd:1a:80:96:db:8e:af:62:e6:d3:11:46:37:
4f:04:d4:2d:38:dd:eb:2f:01:a9:a0:a5:61:30:ee:6f:c7:58:
c0:2c:f4:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZB0G2XBnE4OPYQtvfb9qj2ZN2o4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDIwMDEzMDE5WhcNMjUxMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NmU0MzU5YWU1NTZmZDRiYWMzODYyYjIzZDA4ZTNiYzM2
MDBjZjNlY2IxNjA4ZjVhYjM3NTY1OWUzNzk4ZmUwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC40Q3XISGrr6C33buXXR8uwfCG4GBLPVEzYZOkWV4PPCGa
S4G3phKq8RvD9KzhsQpeCnzHKY0/LHG9gMHkgwvPqCnvBJqT3+hjL8+qtkJ7vpwm
7G41s3a40Gb9sgylnvsXJhdHfzLAb2mD8vurUa410QeHMaMEHPyq063kQ3QfQkcJ
IA8ZslyCiP5linndwsX3wOrj1jfO7+umJo4YlQDqP3XNqpyb/Uh9nL/UhbDBkS7x
xKVKWeYNNYY/5yWAVZyDbble6eXAS6ZiNWT1VrXYXJ/Ur1z9uP6LPJvfr/z9iZ04
eyRHhSTMnoWu0ISGARD4AP/y9LcIMHbo+SM16qOrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQURO8sN4kqe12XxGNfvW1sZvKvOE8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FhNzE0MWE1LTA3MGUtNDk2NS1hMGNhLTYwNzdiMDVmZmU3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJsn8QwDQYJKoZIhvcNAQELBQADggEBAA4shzx9pV//DzoUeAvrqnwVu3k8
gt5VfR5ku5zPDZX9GnvlgX4tx0FJGPsLDqLjNYWVNKvY6WFH1iJp6l4g5FU7tInt
GM1QobBnfcx5OEYZwrvu3NXlMzkYofWs15aPXU+Gv3kzC5lmzgUL+NOWyTesZubn
BbiChQND0PuF8aS6WIVqcvEmUQy8H7ogUu9QHyMjdJ/XydDX/JvBK91WmQEjhnHe
JWmsjAl8LlzmoF+EaA398wHHfGnIJoXtB382c1mr1mIXSqZ5QtHwvVDv6MZqTY0B
5gPDtNrgEPiG/RqAltuOr2Lm0xFGN08E1C043esvAamgpWEw7m/HWMAs9Ag=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:53 2025 by rpki-client