Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a1a2a46-d8a5-4d0a-96d7-5687b48b3bd0.roa
File: 3a1a2a46-d8a5-4d0a-96d7-5687b48b3bd0.roa (raw, json)
Hash identifier: SabNw4nhHwIlpxIRSWM/g8Pl9Oc2yeMFItv17XCW3hA=
Subject key identifier: 65:1A:0B:3B:0C:A1:9E:15:9E:F8:EC:2F:BF:39:D4:C8:7B:B2:9E:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41A2B3E662C7693013A43F762A551D681CF11503
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a1a2a46-d8a5-4d0a-96d7-5687b48b3bd0.roa
Signing time: Mon 20 Oct 2025 02:10:58 +0000
ROA not before: Mon 20 Oct 2025 02:10:58 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a2:b3:e6:62:c7:69:30:13:a4:3f:76:2a:55:1d:68:1c:f1:15:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:10:58 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8b0deb78c5c3788155b69de3f0bf730dd32f23b41082133f464e0884e2e42bc0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:70:dc:06:2b:8c:39:19:c9:89:e0:06:1c:
3f:e1:6e:b9:7f:06:a0:21:2a:78:d3:d3:21:a5:74:
62:14:44:26:fa:4f:1c:d3:97:c9:ea:e1:67:e5:d9:
8d:5f:5d:54:1f:c7:2b:e0:5c:bf:2a:c4:4b:18:cb:
f7:e7:d2:71:a5:94:d5:37:1f:fa:a0:16:6e:56:b3:
1e:9a:e0:56:aa:32:92:d5:8c:79:03:2a:be:66:cd:
e4:aa:03:91:98:20:3a:b3:f5:df:7a:93:78:7c:70:
59:b6:ec:15:b5:17:8a:5c:57:93:85:50:ee:ca:73:
61:ba:0f:c7:14:87:ac:61:a2:dc:a2:52:25:96:81:
7b:d2:f1:9f:c4:01:ee:60:a0:b5:9e:14:99:08:c9:
30:bb:52:a3:f5:02:f2:8b:61:b2:22:03:23:86:b1:
52:2d:92:9b:50:13:6c:a8:58:60:69:a3:46:55:2b:
fb:78:34:cd:ca:b2:dc:ca:b5:92:8f:41:60:73:2c:
26:93:f5:f6:a3:38:18:93:b3:cc:59:8a:24:bb:bf:
f7:29:48:e7:a4:1f:62:7b:35:ae:29:86:89:c6:25:
50:89:3e:a1:87:0d:72:9b:fc:c6:5c:98:c5:bf:b0:
66:26:ae:d1:6a:99:66:d6:e5:60:1f:8c:24:0a:ae:
c1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:0B:3B:0C:A1:9E:15:9E:F8:EC:2F:BF:39:D4:C8:7B:B2:9E:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a1a2a46-d8a5-4d0a-96d7-5687b48b3bd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:f5:56:1e:c5:2e:03:14:b3:f8:45:1b:5a:8a:5d:a3:2a:82:
d9:ec:f8:5c:af:58:5d:ef:07:10:95:9f:8d:b6:e8:15:66:7d:
cb:8e:86:b2:85:c6:66:83:a1:ee:ff:a4:e9:e1:5d:77:6e:bb:
7e:00:47:5b:00:eb:b9:0d:e9:0e:18:46:76:48:2b:f4:91:b0:
9d:48:5f:0e:09:87:94:0e:65:e5:6c:f6:7b:02:47:6a:44:c6:
90:08:e1:10:55:0d:12:1a:4f:65:45:c8:3a:b2:1a:7c:82:ff:
28:c9:0b:42:54:75:87:68:12:63:42:77:72:9e:42:9f:be:b2:
ce:63:a2:15:82:c9:89:c2:10:66:47:98:fd:a0:23:02:8e:cb:
55:57:93:c7:81:10:f7:56:c8:11:ef:bb:ce:a4:ed:25:d4:d6:
7c:6e:f3:04:5d:1c:92:de:f5:c2:1e:bf:7e:61:c8:7d:a1:e6:
68:11:84:69:5d:b2:8f:19:63:c6:3b:58:33:ab:66:4f:78:a7:
4f:3e:f2:c0:a4:86:a2:9e:0f:31:df:b6:ed:09:29:67:66:3f:
80:20:da:e0:87:77:da:20:74:67:4f:84:80:30:69:9f:99:0f:
b8:9f:cc:f2:9b:95:78:3a:87:06:36:df:10:a2:76:64:8a:c9:
64:81:c5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:49:53 2025 by rpki-client