Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dd67b63-7576-4bc4-a14f-5a247d8bfd72.roa
File: 1dd67b63-7576-4bc4-a14f-5a247d8bfd72.roa (raw, json)
Hash identifier: 4G1rEHAo0XXbUuITytqlGyw8NPqf4r7h3T6bdWHi2oo=
Subject key identifier: E8:6D:54:DD:94:A9:7B:56:64:E3:68:A8:4E:C0:42:9B:4A:1A:11:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CDA8A4A1B8A1DDC0A2AFC5EE5741A445E5F5CB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dd67b63-7576-4bc4-a14f-5a247d8bfd72.roa
Signing time: Mon 20 Oct 2025 00:01:41 +0000
ROA not before: Mon 20 Oct 2025 00:01:41 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:da:8a:4a:1b:8a:1d:dc:0a:2a:fc:5e:e5:74:1a:44:5e:5f:5c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:01:41 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=674bc460776c8b7bf1d33d0a9bec7844dde36613ee66777874218a206f6925ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:cc:4c:bd:18:72:f4:c2:ca:d8:e9:a2:7b:
16:65:66:16:17:6a:10:32:d0:48:cd:09:2b:85:61:
6a:de:a1:8e:e8:fd:61:3a:3c:cf:96:fb:1f:9d:9c:
07:eb:51:80:32:4d:21:7d:b5:61:39:e4:dd:6c:02:
72:51:7b:f7:45:6f:a2:6f:80:48:c2:77:cb:1f:7a:
fc:a3:e7:af:31:77:5c:f6:bb:01:af:58:c5:c4:fd:
1a:c8:62:9a:15:e2:ca:c4:53:f7:e3:29:60:c4:da:
11:65:ae:a7:f0:6a:a7:e6:fa:59:8b:1a:1e:5c:03:
f8:c0:27:c2:2d:8d:28:e2:fa:eb:89:6b:7b:7d:c4:
a4:e2:b7:55:e9:d6:ca:54:4c:ef:11:bd:cc:81:4c:
16:bc:64:b9:3c:e1:90:1a:8f:97:1b:77:aa:f2:37:
7d:cf:da:a6:24:8c:82:f0:cf:94:1f:f3:56:35:c5:
d1:73:a9:0c:1c:d3:31:ae:74:e4:ed:32:14:33:2c:
de:72:15:ab:7f:64:d4:f8:11:34:34:f8:21:6d:c0:
43:09:73:4f:7b:b0:aa:f8:24:4b:19:77:45:b2:c3:
47:86:34:c8:b9:59:16:56:2b:f1:19:bb:05:09:45:
b6:3f:e3:04:a5:27:c9:52:18:cc:61:c9:9e:73:d9:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:54:DD:94:A9:7B:56:64:E3:68:A8:4E:C0:42:9B:4A:1A:11:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1dd67b63-7576-4bc4-a14f-5a247d8bfd72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.28.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7e:f2:d4:56:93:71:e6:6a:ef:62:7d:51:8f:c8:dc:08:72:
23:07:6b:11:06:d9:b3:fa:1e:d2:8c:39:27:70:df:55:77:b4:
45:8d:1e:4b:31:c0:10:63:7f:2d:d4:35:35:d0:1e:08:0d:a9:
bb:1e:fb:01:d7:a2:5f:14:df:46:2f:d7:80:8a:40:94:0a:9c:
6c:88:46:c1:a1:1f:3c:06:38:c3:9f:a0:8a:66:19:e0:18:66:
0e:01:7c:fb:01:14:ca:38:6c:aa:ec:6a:c0:88:49:ba:d1:4a:
56:88:4f:44:0b:0e:2f:9f:d4:da:10:a5:c9:86:ba:2f:1a:c9:
31:69:dd:31:56:1a:46:1b:6e:8d:1c:42:79:fb:75:09:ee:01:
72:dc:24:9d:27:ca:02:2e:73:20:82:8a:b9:ce:5e:98:4a:51:
9f:fa:31:a4:62:b0:81:24:bd:b6:f9:8f:47:87:4e:1f:c4:eb:
a7:63:e8:b3:11:f5:32:6e:e4:80:83:17:e1:3a:46:47:0d:62:
27:ac:fe:45:90:a9:a9:11:e0:c8:d7:12:cc:7a:4f:1b:f0:27:
1c:87:da:f2:e3:ad:a0:75:d9:68:4c:0b:be:93:2e:9f:f2:78:
b8:5b:c7:bc:29:f3:ed:14:78:73:35:77:0d:7c:0f:e2:5f:9e:
a1:9b:46:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:10:51 2025 by rpki-client