Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150ba67d-c854-466e-bad1-ab8d35907074.roa
File: 150ba67d-c854-466e-bad1-ab8d35907074.roa (raw, json)
Hash identifier: eksZhSr6mYIlEgd6PL4ZS8wmQd62aYDH3A0/g5P0av4=
Subject key identifier: 69:33:A6:24:1D:96:1A:51:1B:F2:DC:34:99:2B:46:50:4E:42:B6:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F2C2A9B3CC99BBE2BC7696383B74148B2A65DD2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150ba67d-c854-466e-bad1-ab8d35907074.roa
Signing time: Mon 20 Oct 2025 00:20:14 +0000
ROA not before: Mon 20 Oct 2025 00:20:14 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.178.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2c:2a:9b:3c:c9:9b:be:2b:c7:69:63:83:b7:41:48:b2:a6:5d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:20:14 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=ee0508cf9d023224effb700973661ef18e35baed00f8d9c8ff2f004f81642157, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:ef:db:d7:91:fc:39:bd:8c:a7:f9:fe:49:
a7:ae:50:53:e6:ca:7b:ca:d9:60:5a:8b:1a:62:ec:
13:d6:47:16:08:f5:a5:0a:08:50:6f:aa:ec:2b:6f:
5d:ad:7b:05:13:b3:d5:6a:57:46:57:b5:61:71:a2:
dc:33:39:8b:b9:c9:64:46:87:22:06:26:29:25:07:
e3:fc:c7:38:8d:f7:b6:66:c1:b2:12:34:f5:dd:b9:
2b:01:8f:63:48:94:e9:23:a8:10:68:2f:7a:66:18:
ea:6a:86:3b:b2:d2:9b:96:dd:13:1c:94:43:86:7b:
f0:58:c0:37:08:5a:34:23:78:e8:6b:44:be:f6:45:
57:f0:34:57:db:77:3f:61:f1:dc:67:ba:a4:6c:b8:
85:62:b9:d0:1c:c9:10:0c:38:a7:24:47:69:88:ca:
8b:38:3a:84:cc:15:72:f6:3b:19:90:bb:a9:5a:69:
9e:d6:35:f4:f2:d4:ac:f0:5c:65:52:19:20:c6:98:
92:e6:ac:8e:5a:65:a4:fc:eb:e8:de:de:26:6b:8d:
6d:c2:89:fd:03:6b:e6:bc:71:bd:0f:a7:c6:af:1a:
b4:6f:47:97:ad:34:f5:c3:61:bb:86:7f:a2:08:55:
cb:35:93:f5:0c:a5:4f:11:78:08:a9:2f:67:76:4b:
ca:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:A6:24:1D:96:1A:51:1B:F2:DC:34:99:2B:46:50:4E:42:B6:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/150ba67d-c854-466e-bad1-ab8d35907074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:e5:fd:8b:2e:f5:c9:bf:98:40:24:70:d5:9b:0c:3a:ed:e8:
02:18:d7:a4:b6:58:d6:c7:25:6c:fc:24:97:b9:ba:2d:04:c4:
dc:fd:f8:7e:16:cd:20:d2:6c:5c:b8:48:5e:b8:f6:bf:83:27:
15:63:54:08:3d:23:14:83:c1:3e:de:b9:fe:38:68:fb:3e:de:
4b:0a:ce:26:b7:ce:e4:5f:df:ea:89:4a:7a:6b:81:ca:e6:e2:
ba:a0:0d:a2:f5:93:3a:5f:5f:62:2f:52:f8:e6:26:c6:05:a8:
91:21:66:6b:3e:4e:72:75:4f:d0:4d:56:7e:16:67:08:54:be:
fd:ee:15:19:1f:de:a6:ff:3d:81:c0:a9:93:f2:ff:ea:16:89:
5a:3f:88:6d:bc:47:cf:c6:b0:5b:b8:4f:43:ef:d1:bc:3e:21:
54:b2:5b:98:ee:41:98:6d:ee:ac:f7:d3:13:05:e5:9a:f6:81:
f1:76:33:18:21:2c:34:bb:77:c9:78:cf:9a:96:06:e3:87:1a:
14:78:98:11:07:45:21:a5:00:ac:95:a8:fe:04:23:88:d2:1d:
37:5f:9a:a8:9d:5b:eb:ea:9b:7c:0c:4f:5a:77:35:07:65:96:
ac:4f:ea:d9:16:1d:05:af:33:e0:e7:c6:a2:33:9e:60:5c:f9:
a0:de:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:12 2025 by rpki-client