Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09409a04-8c63-47c1-9c3a-fdcf1bf35119.roa
File: 09409a04-8c63-47c1-9c3a-fdcf1bf35119.roa (raw, json)
Hash identifier: 2/ERUlf8kP7MfP3qgT0XxIx5tRdJtin8Kg+41VX2LNY=
Subject key identifier: 44:A3:D0:99:48:71:69:F4:6F:B3:F1:59:98:B8:B4:89:C1:5B:B6:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7AFF2EA0928F7730A2BDDE6181F20D22F01AC69C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09409a04-8c63-47c1-9c3a-fdcf1bf35119.roa
Signing time: Mon 20 Oct 2025 03:40:08 +0000
ROA not before: Mon 20 Oct 2025 03:40:08 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ff:2e:a0:92:8f:77:30:a2:bd:de:61:81:f2:0d:22:f0:1a:c6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:40:08 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=be9f36204bee0a5fdf2eee7d9446aebd99edb2bd20435dad869ad8298a63ffea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f7:76:aa:34:03:1e:e4:d8:dd:8b:84:9e:f9:
95:32:90:c4:32:b2:dd:2b:a3:a2:85:cc:67:46:da:
cd:f6:ec:a1:47:25:53:cb:69:5a:79:79:1e:a7:1a:
6e:f4:93:dc:10:11:dd:60:0d:e2:2c:25:d9:8a:21:
01:31:94:af:36:b1:ad:33:f2:81:ac:51:7c:26:2b:
5e:c3:42:af:9c:9d:b6:4d:53:f3:e2:ef:1a:68:3b:
e6:28:95:3c:0c:ea:02:b2:30:84:7c:75:9f:84:2c:
07:31:56:73:03:32:76:fe:8f:2d:13:e3:fe:b1:dc:
90:9d:da:76:ca:37:66:7c:05:db:ec:78:93:50:de:
e4:f3:59:9e:3d:df:9e:e5:bd:32:d1:c9:bb:d5:79:
b5:13:7f:1a:56:ac:ec:e5:b3:f7:47:c6:af:0f:38:
22:da:3e:ee:a4:00:2b:01:47:de:42:be:c4:b8:7a:
66:b7:35:32:f1:4d:56:2c:d0:e1:42:36:80:98:37:
bf:59:11:69:91:04:d5:9c:82:e6:68:66:cb:2b:8b:
6f:a0:8f:54:de:d8:95:b3:a9:1a:43:b7:e1:16:36:
5c:f4:f6:b0:32:f1:9e:61:72:2a:da:18:d2:63:28:
16:94:15:e5:65:8d:05:5a:eb:5c:47:0b:2b:68:8a:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A3:D0:99:48:71:69:F4:6F:B3:F1:59:98:B8:B4:89:C1:5B:B6:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/09409a04-8c63-47c1-9c3a-fdcf1bf35119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.124.0/24
Signature Algorithm: sha256WithRSAEncryption
66:48:46:71:9f:06:e4:75:60:2c:81:13:97:d0:5a:74:a4:48:
69:4b:25:eb:28:81:7e:88:a9:80:be:8b:89:2a:ae:ef:fd:f0:
5f:6b:f1:d4:a5:02:7e:65:f5:e8:99:b4:9f:11:8a:49:68:1e:
b3:b2:8b:0f:20:d4:01:0c:76:22:0c:f8:cb:cb:3e:cf:6b:8d:
ce:7e:77:ba:ce:73:21:6e:d8:9c:e2:d3:13:3c:bd:38:86:93:
fc:8d:07:91:28:83:be:a1:47:42:ac:61:93:d1:5e:89:ea:8d:
e7:ca:5c:90:da:e1:0c:5f:19:d5:29:49:4c:0b:d4:34:c1:6a:
2e:37:68:6d:39:10:21:4d:a8:34:8d:e8:98:c7:59:7f:ac:12:
c5:e2:83:0e:dd:83:68:e9:b7:52:4a:6a:8b:4a:1a:ea:e8:20:
df:d1:f7:5c:67:63:24:8b:ac:75:9c:a2:40:49:ec:ae:e0:f1:
df:8e:b6:71:6e:c2:fd:bb:6e:89:ba:92:ba:24:40:fa:35:57:
23:08:bb:0e:96:0d:36:58:26:7e:3c:e9:3d:a9:0f:c6:ca:cd:
3e:59:7d:f7:3a:00:a3:57:f4:98:3a:59:54:9d:fb:d2:ad:e8:
9a:f0:03:c3:8f:90:09:49:69:d0:5e:d1:ec:90:b2:89:76:63:
47:9b:86:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:34 2025 by rpki-client