Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18801cd9-fb13-468d-9f09-5e29e606eb25.roa
File: 18801cd9-fb13-468d-9f09-5e29e606eb25.roa (raw, json)
Hash identifier: 7LbABnaHnSU2GN1ZT0T2DK3N20py9uUkQsNgXVIauWU=
Subject key identifier: 3A:5C:F4:D3:BA:B8:3E:09:B6:A8:F0:4F:03:35:DA:8F:6F:79:D9:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 754C0157A02E1ADC2F35F3F3AB605CE2945F05F0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18801cd9-fb13-468d-9f09-5e29e606eb25.roa
Signing time: Mon 20 Oct 2025 06:01:37 +0000
ROA not before: Mon 20 Oct 2025 06:01:37 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4c:01:57:a0:2e:1a:dc:2f:35:f3:f3:ab:60:5c:e2:94:5f:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:01:37 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b275681e72f439ef07d40a30282bbd28f85f775d93377718bff113697806be7c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:a1:de:50:ac:ff:72:90:42:3d:84:da:c3:
fe:48:d2:8d:91:a9:af:05:58:43:90:44:1f:a8:ed:
76:7a:d3:2c:58:5f:f2:bb:b5:6f:27:25:46:49:34:
af:dc:46:64:e3:ea:29:c3:39:cc:9a:80:97:e6:b6:
f4:07:d0:12:33:ef:f0:76:28:34:e3:0f:dd:58:63:
a2:91:f4:fc:54:41:b7:2f:0a:b5:68:e9:c2:5f:f3:
fb:8e:cd:15:2c:72:7c:54:27:21:51:84:62:43:5e:
1f:02:ee:c0:52:23:b6:2d:94:22:60:7c:d7:e8:8b:
5c:74:4c:b0:27:8d:d7:2d:d9:08:26:6b:30:71:09:
e8:10:fc:8a:9d:2d:81:7e:e8:20:71:0c:1c:03:1b:
34:94:be:8d:72:ea:59:3c:fb:4a:60:2c:a3:a2:e1:
ea:80:25:62:4a:e8:7a:7b:50:72:65:81:77:05:89:
ef:5e:9c:8a:22:39:fd:f2:27:94:1b:51:7e:6a:b2:
94:46:d8:53:02:0c:44:ae:9e:c8:5d:e2:cb:d8:d9:
bb:16:d8:a3:fc:cc:8d:8c:a5:b1:7d:e6:b1:26:90:
cf:28:c3:a8:7a:82:d4:16:22:b9:3c:5f:7f:7a:77:
99:70:57:1d:88:5d:f4:45:66:7d:d5:21:52:90:77:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:F4:D3:BA:B8:3E:09:B6:A8:F0:4F:03:35:DA:8F:6F:79:D9:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/18801cd9-fb13-468d-9f09-5e29e606eb25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:4a:ac:f4:ce:47:6e:1c:55:2f:5a:a9:6c:b5:e7:fc:58:94:
18:59:f0:c5:ca:01:6b:f1:dd:e2:46:a1:e7:c4:e5:ab:cb:2f:
db:88:79:3a:4e:6e:35:5c:e5:8a:25:90:03:91:9b:ea:ee:fc:
0d:1e:a0:8b:08:0e:41:f3:8f:61:86:de:93:43:2e:f7:1a:be:
3b:cf:5c:89:1a:51:3e:30:49:56:c0:ac:16:7e:af:3f:46:6e:
13:d4:f8:f7:96:04:33:f9:1d:5a:28:5a:8f:ea:1a:c2:64:ad:
e0:b8:cc:cb:58:1f:d4:d8:43:c3:b3:5f:07:50:b7:8c:3f:10:
30:0d:1e:9a:95:98:3a:fa:61:a2:1f:59:75:10:65:0e:c3:16:
70:cf:29:37:3a:20:b5:da:e5:f5:b4:53:ad:30:16:44:28:33:
19:5c:1e:6f:94:20:c6:71:98:b6:e2:f3:dd:e3:c1:bb:48:26:
c8:42:e2:17:32:e2:51:f0:f0:46:95:bd:eb:7e:96:cc:79:c8:
47:53:3e:d4:7c:c0:d6:49:10:26:b6:08:1d:c7:0e:e9:ed:89:
32:8d:d4:66:2f:14:3f:a9:94:30:3b:6f:a9:74:b0:10:1a:d9:
1b:ae:12:d3:34:4e:d2:3a:49:92:36:1b:33:15:e6:5b:ec:0f:
02:26:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:47 2025 by rpki-client