Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170b2d92-066b-4c55-bf7d-5100cf19d1e8.roa
File: 170b2d92-066b-4c55-bf7d-5100cf19d1e8.roa (raw, json)
Hash identifier: HDcRF1BZ1M3fGUsS1sAKOz0jHiYAksd0pXaCd77dGiE=
Subject key identifier: 72:5F:20:E2:21:7E:5E:A3:93:B8:A7:7F:E2:B2:1E:63:2F:F4:A9:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14D8AF9EB473B74FD1BC046ECA18CEC31AD4D847
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170b2d92-066b-4c55-bf7d-5100cf19d1e8.roa
Signing time: Sun 19 Oct 2025 02:10:55 +0000
ROA not before: Sun 19 Oct 2025 02:10:55 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d8:af:9e:b4:73:b7:4f:d1:bc:04:6e:ca:18:ce:c3:1a:d4:d8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:10:55 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=ec728ec138258d6618fd36dd0963c545a2d039ee0434d0b77aae10d24428d9d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:0c:d6:52:f8:4c:01:52:fa:36:c2:78:5e:
52:65:da:f3:78:aa:e9:b1:95:e9:c5:23:a4:b5:ec:
5d:17:0f:05:90:c3:22:94:d1:69:b9:78:c8:2c:0d:
67:3d:a7:5a:51:32:b8:37:ff:e0:ac:69:24:47:6e:
dd:61:bb:ff:97:fe:2c:45:e5:7c:04:d9:f0:e3:eb:
62:69:41:7a:67:f9:24:40:65:b5:67:9a:b8:42:3d:
b0:9b:a4:0a:be:9f:f0:15:64:c8:e7:19:a3:d2:33:
d6:20:2c:01:a6:e4:76:c9:c3:d4:03:d6:00:d9:d2:
60:37:dc:59:1a:17:d3:54:04:68:26:c5:f5:95:48:
0e:4f:1c:7d:e0:d0:60:3f:1e:62:29:c6:db:7d:32:
63:47:bb:ae:03:61:33:36:d5:8f:fc:5f:f7:c2:1d:
f9:b4:bd:3a:70:7f:97:d7:19:b1:49:99:1a:aa:56:
10:49:06:48:88:d1:de:d8:a3:8c:af:23:b7:84:8e:
11:66:35:97:56:bc:7d:21:de:aa:ab:22:25:d4:79:
a6:78:e9:24:61:5f:8f:6e:a6:a9:87:b8:37:9e:78:
1f:f7:9e:9a:a9:d4:a6:36:58:81:f5:4d:fe:23:ee:
2d:4e:88:b7:ef:06:cb:68:c8:21:dd:bd:67:34:0e:
21:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5F:20:E2:21:7E:5E:A3:93:B8:A7:7F:E2:B2:1E:63:2F:F4:A9:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/170b2d92-066b-4c55-bf7d-5100cf19d1e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:03:10:16:1d:05:95:f3:3a:a1:16:d7:8a:af:61:57:7e:1b:
1e:72:06:c5:a6:8d:8f:4a:31:dc:2a:75:24:41:90:69:cb:a8:
29:10:9a:c1:4d:44:9d:6f:f7:1e:03:c7:d9:ac:e3:72:7f:f4:
9f:61:9a:a9:8b:d9:08:b6:d8:5e:23:d8:7a:3d:91:15:d4:00:
15:b6:31:62:85:37:ad:bc:dd:d9:e5:97:4c:bb:1a:5e:05:ec:
8f:7a:23:42:5f:ef:ba:bf:b3:15:89:f5:a4:8e:c6:24:d8:7e:
02:ac:96:73:06:f1:35:1b:91:c7:cb:3c:a2:e1:a5:c3:7c:d5:
41:a9:42:59:5d:7c:14:de:1f:ed:89:f5:61:e1:1b:83:f4:18:
24:e9:62:96:1a:fa:59:c0:26:cf:d6:23:a8:84:b5:18:2f:35:
23:d4:01:35:f1:fa:db:56:62:41:1f:87:05:a9:ee:b6:98:aa:
67:2b:a7:ad:f6:99:a6:69:91:48:58:2d:cc:ce:d9:b8:28:0a:
8e:91:86:21:f3:ed:f9:48:5e:48:78:92:1b:0f:1c:ff:3d:fd:
34:02:56:80:49:f1:f4:f4:64:53:18:26:07:4a:30:05:81:c3:
ad:a8:a9:80:19:ba:73:38:8c:ff:6d:9b:3d:8c:b9:c0:49:d5:
09:9b:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:05 2025 by rpki-client