Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0920250d-c2c4-4cf0-945c-1aadf393308c.roa
File: 0920250d-c2c4-4cf0-945c-1aadf393308c.roa (raw, json)
Hash identifier: qxJ9xhKADugBMCe4k1eiEHhc7RX6wxGTIM4g8k6ZJ2A=
Subject key identifier: 65:BE:7B:6F:98:B0:39:F1:15:66:22:33:D2:E9:1A:4E:16:9B:80:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F0C3800B91265694E9E1ED8B02280ADA7EBD386
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0920250d-c2c4-4cf0-945c-1aadf393308c.roa
Signing time: Mon 20 Oct 2025 06:20:59 +0000
ROA not before: Mon 20 Oct 2025 06:20:59 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:0c:38:00:b9:12:65:69:4e:9e:1e:d8:b0:22:80:ad:a7:eb:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:20:59 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=aef06a2ee3c34194975c891c10567332b3f969e8f2bea6cb79f45ed9fc03da4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:19:5d:a7:d6:ca:a2:60:24:b8:7c:ce:c1:
67:0d:63:3d:f5:a3:80:08:7d:5b:c4:12:7a:f0:d2:
8f:dd:f2:af:a3:fd:41:84:0a:db:80:61:68:3e:15:
5d:04:d4:48:c5:f4:ed:ac:c1:95:45:e0:3d:2e:e4:
5b:34:45:ba:7a:1f:7b:e9:89:cb:c3:5f:ef:99:cc:
6d:5d:08:8d:05:57:01:d9:b9:b6:94:c7:b0:b7:d3:
f6:53:7d:bc:d5:21:15:ee:d2:c3:02:d9:12:f4:4b:
eb:24:9f:82:c1:de:a0:a6:93:3e:4b:0a:f9:ec:e8:
90:15:c1:b3:c0:55:3d:81:1d:a2:1e:0f:aa:b5:6e:
ec:9d:76:ed:55:df:31:b8:c4:72:a5:96:5c:ff:53:
83:5f:be:a7:ad:90:6e:ef:1d:98:c1:d2:db:48:23:
f0:12:6d:e0:22:ce:99:d5:1c:77:09:dd:44:ab:80:
8f:88:4c:54:12:b0:dd:79:15:ce:c9:63:76:43:9a:
42:bb:fb:1c:01:04:c2:76:02:40:94:3a:1f:99:39:
1c:03:19:fc:3d:9f:a2:24:45:1d:58:22:2a:a4:fc:
e9:53:c0:fd:08:d1:da:c9:24:19:a6:93:e8:9b:53:
c5:84:49:21:b1:24:9c:22:6a:61:fc:84:b3:dc:79:
2d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:7B:6F:98:B0:39:F1:15:66:22:33:D2:E9:1A:4E:16:9B:80:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0920250d-c2c4-4cf0-945c-1aadf393308c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.242.0/23
Signature Algorithm: sha256WithRSAEncryption
00:56:96:85:da:ee:a5:83:c5:98:f8:06:23:44:c8:8a:20:66:
34:5e:fc:1a:6a:00:0e:f2:21:f6:9d:5c:31:36:4d:8e:2c:de:
29:d6:3d:1c:93:e4:59:cb:3d:56:65:60:ca:a3:b0:14:8b:eb:
f0:89:15:d1:3d:26:8f:ff:80:a1:03:e0:13:c2:ee:01:aa:84:
a1:45:25:9f:58:57:9d:03:32:2f:e9:97:46:80:bf:a3:21:ce:
c5:e3:bf:5c:2e:35:c6:17:1d:54:f6:1b:63:f2:84:4a:57:48:
44:42:34:a0:5e:33:4f:4b:c7:02:5b:78:7c:b7:cd:7b:33:43:
0b:f1:63:48:26:2a:96:ac:8b:1f:36:5e:e4:08:5c:03:cb:e7:
49:23:f4:dc:07:11:55:5e:19:08:67:45:ea:66:15:e3:6b:9c:
0e:b6:2b:fd:64:98:a5:fe:19:18:8c:4b:ee:ac:b2:31:46:e8:
9f:36:fa:7d:43:88:6b:7d:62:6e:47:a1:c1:51:c6:ed:35:88:
b4:6c:d3:26:8b:11:93:21:d1:c6:4e:98:fd:06:f8:cd:eb:d4:
53:44:6b:51:f0:9b:d0:74:65:aa:16:34:f0:d4:4e:f9:e7:87:
60:53:17:08:9c:92:07:ab:29:e2:b6:cb:e6:b8:40:b2:97:80:
e5:60:60:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:42 2025 by rpki-client