Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2de60a58-e041-4180-9ec3-846dcbb262c6.roa
File: 2de60a58-e041-4180-9ec3-846dcbb262c6.roa (raw, json)
Hash identifier: f/u4/yZQNG6KE2XxA0JCiBFr4FlEuyPkRmz+D6//BVg=
Subject key identifier: 96:56:9E:01:3B:97:3E:47:6D:F3:39:2D:88:41:41:16:BA:33:B1:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DE575C0044714D8A45FD086D91D5507D1A40605
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2de60a58-e041-4180-9ec3-846dcbb262c6.roa
Signing time: Mon 20 Oct 2025 03:50:09 +0000
ROA not before: Mon 20 Oct 2025 03:50:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e5:75:c0:04:47:14:d8:a4:5f:d0:86:d9:1d:55:07:d1:a4:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:50:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=1d5499e90ca80a9c1a9a7a4e113a983274edc45bbe83795d09ccfa046b9b13b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:42:ed:28:45:13:16:82:7f:07:46:60:c7:
d7:49:88:b3:76:59:19:84:77:b3:e2:5b:a6:28:9f:
69:db:47:d0:bb:16:d8:ff:67:59:48:8c:55:80:3f:
0f:ed:77:7a:7f:ed:7c:82:21:d4:c1:42:f5:2c:1d:
4d:83:91:9a:5a:24:7f:87:53:90:41:f1:77:ca:05:
11:2d:aa:84:7a:2d:26:c3:b1:9c:04:44:d9:57:f9:
13:e1:4c:bd:e2:1e:99:f2:48:86:be:d2:1c:62:e0:
d6:7a:07:b6:de:af:7a:3e:47:70:d9:dc:1c:5d:01:
c8:8b:9f:39:00:7c:2b:2a:73:23:ba:f7:99:4a:09:
af:16:93:30:29:31:98:c1:b0:43:8c:ca:22:b6:85:
97:a1:13:1a:f6:91:00:a1:34:58:2a:52:a7:1e:e3:
69:e3:e4:06:ee:d8:a7:b9:83:5f:b5:06:72:63:f4:
69:51:a5:9f:c4:4b:3a:ee:85:9e:a5:6e:cf:08:2e:
c2:3a:e2:01:10:3b:08:ec:bd:07:ed:da:15:a2:03:
fe:28:18:1b:a4:f4:f7:d9:bc:00:60:e6:ba:a9:39:
8f:f7:f1:2b:89:90:2e:52:be:ba:5e:70:f0:11:01:
fc:ce:c1:2e:0b:86:69:6f:4f:26:c1:b0:e7:1f:9a:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:9E:01:3B:97:3E:47:6D:F3:39:2D:88:41:41:16:BA:33:B1:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2de60a58-e041-4180-9ec3-846dcbb262c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:07:ee:41:3c:9e:ef:ac:b3:a7:5f:fd:9a:4a:ec:f6:1b:75:
f7:d0:14:16:38:5a:37:b4:54:c0:59:dc:90:f1:d8:31:3d:3f:
2e:d7:33:1d:88:5f:1b:3a:db:95:b8:18:9e:9c:a2:4a:f5:f3:
4f:fa:7a:4d:9f:4f:79:1e:1e:78:a8:b2:88:e2:08:51:bd:45:
1e:aa:df:23:68:3f:ec:65:7c:91:98:9a:4b:f5:73:eb:a9:b7:
78:b1:8f:a7:90:8e:4d:7c:7b:d7:78:14:dd:68:77:2c:44:df:
27:a9:ee:32:ac:d3:d9:2e:55:7a:89:74:fe:25:0e:1b:9d:a5:
3b:fb:54:e9:9a:8d:a1:d7:8c:91:ed:8b:fb:e8:0b:8b:d0:17:
2f:ee:32:f7:9c:3f:30:94:1c:72:31:7f:42:cd:0c:30:90:43:
82:6a:2b:56:d2:b9:f7:20:3a:79:f5:07:10:78:e0:1d:9c:74:
9d:bf:03:26:3c:1d:1f:3b:9a:b2:ec:6e:58:92:51:fa:eb:fb:
65:c1:42:b0:58:9f:c5:d9:a0:f4:31:ac:dc:5b:bd:6f:2e:91:
25:83:c1:73:52:8d:08:0c:0c:27:1f:ee:61:03:1d:55:17:e5:
e9:84:18:4f:33:89:cb:4e:d4:8c:b7:82:19:c5:65:8c:f3:7a:
7f:1b:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:06 2025 by rpki-client