Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f6d1d34-cc7e-43ef-8407-91d4ac11970c.roa
File: 0f6d1d34-cc7e-43ef-8407-91d4ac11970c.roa (raw, json)
Hash identifier: V5Q4mGZzx9NvsnXvy8BZpZ9jhIg8YNT+d+u/qmfAqTo=
Subject key identifier: F2:A2:34:73:BE:1C:AF:3F:81:E1:C2:4E:10:0D:AA:C2:7A:A8:77:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61D9792978FE463DAB7F9222314A812165EFE3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f6d1d34-cc7e-43ef-8407-91d4ac11970c.roa
Signing time: Mon 20 Oct 2025 03:20:55 +0000
ROA not before: Mon 20 Oct 2025 03:20:55 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:d9:79:29:78:fe:46:3d:ab:7f:92:22:31:4a:81:21:65:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:20:55 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4c6b917b103a572771dc6d7ea9a6984d2339fc847cb972c6f8777834ff30b2ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:82:56:0e:84:10:b9:84:3b:2f:db:58:9e:
97:a9:32:f4:35:67:56:d4:f0:2e:ac:39:f2:be:ce:
e1:49:4e:5e:67:a7:73:07:5a:7c:83:cd:67:07:37:
5b:88:e8:02:e6:78:bd:75:3e:bf:61:cd:fe:a6:9d:
b1:64:c0:04:40:26:64:6b:af:7b:65:2f:a0:da:1d:
9a:c8:5f:72:14:31:df:bb:8e:bd:d9:72:55:b5:f6:
36:2e:2a:af:b5:e5:14:98:7e:1c:71:05:74:83:c1:
db:a0:d7:e1:19:a6:7e:a0:96:52:eb:c1:52:dd:2c:
4d:7e:1e:10:ca:93:80:4b:2a:22:ef:0b:3d:16:d9:
d9:61:e7:5a:cb:ae:2d:bc:f1:bb:77:35:65:48:43:
4c:ca:63:df:a2:66:09:4d:e0:aa:2d:34:0d:f7:fb:
63:1d:ec:63:ca:4d:54:83:ed:0f:11:cb:6d:b9:a1:
1f:35:04:0b:ac:0d:3d:34:bc:6b:99:f3:02:1a:69:
19:f8:81:e5:fa:57:9d:17:79:6a:51:46:35:05:15:
90:c8:8e:2e:11:96:b6:3d:3b:6e:97:6e:39:71:f1:
dd:fb:83:e8:98:b6:d8:f2:4a:a9:18:d7:eb:b7:06:
ed:72:b7:40:55:9a:6b:12:6a:1c:d1:40:46:87:e7:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A2:34:73:BE:1C:AF:3F:81:E1:C2:4E:10:0D:AA:C2:7A:A8:77:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f6d1d34-cc7e-43ef-8407-91d4ac11970c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.152.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d3:23:16:71:20:fa:96:1c:1f:a2:5d:25:04:25:f3:be:70:
6f:4e:27:2e:e4:9f:e3:e3:e5:cd:72:a7:61:6e:80:b8:e8:d4:
71:da:5e:ad:04:a8:8d:d9:75:3b:8e:ea:99:bd:19:42:8e:e5:
40:d6:48:90:7a:52:04:56:bf:e1:2d:f4:61:43:76:f3:8c:0c:
1c:f8:54:f3:38:99:bd:ca:2f:a2:74:a9:bb:8c:4e:2b:4e:0e:
65:d1:bc:0b:05:30:c2:e9:9a:9c:f5:cb:1b:80:a2:3c:4a:f1:
c7:59:50:59:d8:af:00:ac:dc:d0:e7:f3:dd:83:e7:ff:72:e8:
eb:78:bc:ab:ac:ad:07:57:fb:36:8e:af:5d:ec:c4:14:7f:c7:
61:35:ec:0a:3e:63:d6:67:31:72:8d:ab:2d:8c:a5:96:67:36:
70:ea:4b:74:91:fc:a8:32:d7:60:59:99:a9:c5:86:d0:2a:43:
5c:51:c7:d9:26:93:19:b7:5c:d0:69:01:12:1e:28:44:33:16:
af:59:79:a8:27:60:73:32:fe:ab:6f:31:00:69:0e:8b:7e:d9:
db:50:da:14:6b:6b:41:67:f7:9e:0a:05:b2:f8:bd:63:a8:9b:
3a:03:80:36:b3:c0:26:35:c7:25:45:fe:8d:64:83:45:66:88:
24:e4:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:26 2025 by rpki-client