Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9a714c-66d9-43f5-ad71-0ff688ec3f9b.roa
File: 2f9a714c-66d9-43f5-ad71-0ff688ec3f9b.roa (raw, json)
Hash identifier: 7sMHTc7VV6U1OPsUeXPch5qifU/ocs6D6MaYUIbFTP0=
Subject key identifier: 21:BF:FF:B8:1B:F5:1E:D7:E7:EE:4A:05:2D:3A:11:28:55:06:AD:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A5EE00663D321DB46C62BE45E9A58A32029CC2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9a714c-66d9-43f5-ad71-0ff688ec3f9b.roa
Signing time: Mon 20 Oct 2025 01:32:30 +0000
ROA not before: Mon 20 Oct 2025 01:32:30 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:5e:e0:06:63:d3:21:db:46:c6:2b:e4:5e:9a:58:a3:20:29:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:32:30 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=5c64923d78a3e7a00887032e22d0b47cb011503963939bd9d6789cf2aff78a09, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:83:2f:6d:38:53:ca:87:70:d7:75:24:06:72:
85:e7:f8:36:20:6a:98:17:85:5b:4a:92:c2:c8:51:
e3:b8:50:32:67:39:64:0a:0c:61:ce:c9:d1:5d:11:
ce:04:42:33:5d:f0:df:f5:ce:b6:ec:40:6e:c9:cf:
f3:8d:40:fe:28:62:1c:b0:1b:48:cf:fc:d4:be:72:
6c:a4:36:e2:a7:94:f7:7c:c1:97:63:8c:bd:5c:f8:
de:4d:12:df:11:fe:45:dc:9e:a6:bd:09:1f:62:99:
17:58:04:79:ac:16:a4:92:34:9d:66:30:3d:bc:16:
3d:d4:d1:b3:47:dd:18:ae:57:c0:86:92:a0:fd:2b:
04:2a:2a:ab:b9:5e:09:18:19:80:62:30:0d:bc:9b:
77:69:4e:cc:31:cd:37:9e:b6:ea:7b:57:26:57:de:
c5:16:c0:ae:d7:6e:1b:97:28:d0:6d:4c:ad:91:04:
5e:12:2b:c1:80:0a:c0:be:a7:f6:fb:83:25:ca:d9:
65:d2:21:fb:09:26:b3:12:6d:c4:47:2a:b5:2d:cb:
41:29:50:32:9c:ce:79:12:78:c1:25:4c:02:53:a5:
fb:40:58:f1:1b:b9:33:d2:f6:96:cd:02:30:05:48:
9b:c8:eb:a0:84:4a:d2:67:9f:64:66:19:a8:d9:df:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BF:FF:B8:1B:F5:1E:D7:E7:EE:4A:05:2D:3A:11:28:55:06:AD:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f9a714c-66d9-43f5-ad71-0ff688ec3f9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.148.0/24
Signature Algorithm: sha256WithRSAEncryption
29:9b:99:bc:97:fa:6d:17:78:c2:26:f0:5c:7f:e2:f6:3c:fb:
de:40:21:9b:47:84:4b:cf:52:b4:c5:bd:da:6e:32:ae:88:c6:
0d:51:ed:c2:04:64:8d:6a:6e:0d:de:bb:42:84:cb:1e:88:a8:
36:6c:e9:c8:fe:69:fd:93:6f:e9:4f:44:fc:46:bb:e8:78:8c:
10:15:02:c4:a7:33:77:a5:e9:00:8d:f0:81:1a:4b:97:51:b6:
bd:13:91:23:ab:b9:c2:fa:57:3e:48:51:02:d3:91:da:02:ec:
b9:c8:e6:da:ed:f4:f9:d4:fd:fe:2b:a1:59:53:74:28:c8:a1:
b8:5d:81:44:71:cd:b3:58:41:86:cc:af:a5:97:98:7f:99:51:
2b:3a:58:c0:c7:8d:ca:0f:9e:96:27:05:45:1c:86:26:aa:27:
99:e4:d1:47:d9:cd:01:56:57:8d:d2:64:00:ee:80:ee:23:4e:
5c:a8:ed:2e:5c:1b:d8:c7:44:af:53:54:de:e2:90:63:ce:67:
ff:2c:96:e7:e3:1a:92:f8:36:c8:51:0c:06:3f:df:71:6c:27:
77:b6:98:55:f6:83:ca:1f:c6:71:5e:1c:a6:17:30:be:4c:e2:
b6:f3:0c:b1:f1:ae:17:20:99:ce:68:47:59:5b:67:80:fc:7f:
67:9d:06:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:35 2025 by rpki-client