Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3312438a-4e5b-4d1f-a33a-d7a79d27ba8c.roa
File: 3312438a-4e5b-4d1f-a33a-d7a79d27ba8c.roa (raw, json)
Hash identifier: ONyfERDoMMY9+tHB0YcgY2qWDj7SJkHnh9TUyNHcRGk=
Subject key identifier: 3D:6F:92:9A:83:74:E2:A1:D4:32:E0:37:3E:BF:C2:9F:EE:9C:C8:9B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 406E4C873338B2B973CE8A44BABD930FC7055D86
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3312438a-4e5b-4d1f-a33a-d7a79d27ba8c.roa
Signing time: Mon 20 Oct 2025 03:00:09 +0000
ROA not before: Mon 20 Oct 2025 03:00:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6e:4c:87:33:38:b2:b9:73:ce:8a:44:ba:bd:93:0f:c7:05:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:00:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d51253b5446859b2611b979bd983b8edcb3f7766ef2b29e3a8fe846286b97fb7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:33:34:55:95:10:a7:43:38:e8:ea:3b:7c:
85:6f:74:c0:90:a7:8c:73:ab:bb:bf:40:af:17:34:
6c:91:2d:a5:1d:98:97:f7:9d:b6:f9:42:41:26:46:
f2:74:f4:50:16:04:0b:a7:67:b1:30:c9:cf:a0:db:
c2:0a:08:3d:45:4c:f1:ab:53:59:a6:4b:00:76:2e:
58:c8:a1:af:46:2c:cc:1a:24:21:4d:c0:c3:59:89:
74:e7:7d:02:1d:c9:a5:23:70:26:08:4d:e8:65:93:
15:80:76:66:01:4e:b7:85:70:a6:05:82:4a:83:be:
9c:35:ef:5c:6e:88:c6:e6:50:c6:bd:43:07:43:b3:
79:24:f5:1b:cd:10:54:8c:bb:36:86:0e:dd:fc:11:
45:d7:c5:2a:17:4f:50:42:69:14:ce:7b:81:15:7d:
2a:6c:44:18:5b:9a:29:bb:39:3b:04:8e:14:50:ee:
f1:19:94:6f:0a:f5:61:1c:38:51:e0:c7:8e:a7:81:
ac:76:a5:de:be:6a:a7:ff:1d:b0:1c:a4:78:53:14:
55:6e:ff:b2:95:2a:4a:8c:2f:f8:2a:9e:55:9c:85:
13:1c:03:3d:ce:05:66:8c:bb:c8:8d:ba:b5:e4:0d:
a4:98:64:17:99:91:01:a5:3a:d6:59:c5:90:91:3e:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:92:9A:83:74:E2:A1:D4:32:E0:37:3E:BF:C2:9F:EE:9C:C8:9B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3312438a-4e5b-4d1f-a33a-d7a79d27ba8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.207.0/24
Signature Algorithm: sha256WithRSAEncryption
89:c9:5d:89:ac:50:84:af:e8:a0:fb:7d:70:9e:67:d6:85:07:
b7:2e:d2:29:b2:d9:f2:63:79:e7:5c:04:b2:a3:df:b8:ee:70:
82:25:75:16:00:92:8b:49:bb:96:22:16:2f:2a:7a:da:a9:d8:
6a:f1:40:9f:24:09:9c:0a:36:57:6e:c6:50:77:3c:cc:b4:42:
91:2b:62:0a:d3:8f:4d:1e:7b:85:85:42:27:be:df:07:dd:ab:
25:ef:d6:40:e6:91:58:42:cd:46:a8:ba:86:f1:e5:c0:af:0d:
b0:fa:e3:23:b2:54:36:ee:d0:5a:1d:ce:53:2c:a3:d4:df:6b:
ff:e2:89:24:52:77:64:24:47:28:4a:0e:38:6f:da:25:bf:49:
6a:47:1b:80:a5:4b:65:3c:9d:0a:a2:77:ec:93:c5:92:9c:f9:
8b:ae:81:69:28:dd:6b:61:9e:95:7f:b4:ce:17:a2:a4:67:d4:
34:df:f9:0d:3d:99:c8:98:0c:59:fe:b2:08:39:ce:20:9f:36:
89:42:29:09:df:fc:ae:ee:85:61:fa:fe:cb:f0:e8:7b:cd:d5:
94:8d:0b:75:0d:b8:54:fe:f5:50:93:96:54:8c:f0:06:e5:eb:
d4:be:bb:8e:a9:22:ed:68:bb:ed:c9:db:c8:85:f8:88:fc:51:
eb:f0:7a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:07 2025 by rpki-client