Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44dc66f7-b8c7-4d3c-b563-ec267c3d2f42.roa
File: 44dc66f7-b8c7-4d3c-b563-ec267c3d2f42.roa (raw, json)
Hash identifier: h1lMlnOtd9hrxTVXamSkKpvFPD3KKUp4SNQVO+xzmlY=
Subject key identifier: 8C:41:F0:26:2F:C6:14:9D:7B:2A:E8:8C:F3:B9:AC:31:8D:22:1D:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7B59D4148289D06EBBC03D8BB02D180B1397C7F4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44dc66f7-b8c7-4d3c-b563-ec267c3d2f42.roa
Signing time: Mon 20 Oct 2025 00:00:11 +0000
ROA not before: Mon 20 Oct 2025 00:00:11 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:59:d4:14:82:89:d0:6e:bb:c0:3d:8b:b0:2d:18:0b:13:97:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:00:11 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4f7b9beb666f02c35b1681a6992d19e0e7e79b9707168832a17edde7a34feab4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:37:a5:85:df:eb:50:5f:f6:4a:4d:df:79:
7f:4c:49:e5:12:5e:3b:66:59:9b:69:88:1f:a1:b3:
be:70:4c:7b:77:c3:18:cd:70:ac:3f:d4:74:71:cc:
02:b2:f2:ec:98:dd:05:3a:9f:28:00:97:38:af:02:
54:e9:2d:02:fd:2f:b5:07:8a:3d:e7:51:49:4c:2b:
76:23:c4:28:32:4e:d7:65:e3:9c:af:b5:84:41:78:
6f:c4:8f:eb:62:0c:ef:ed:83:27:fe:49:0e:c9:5c:
50:0f:cf:51:e0:0c:50:6b:a5:39:35:6b:65:5f:23:
9e:97:25:56:3e:cd:46:1d:06:89:0f:f1:27:82:5a:
45:6f:05:45:9d:18:1b:da:6d:49:8c:3f:84:04:34:
53:6e:94:76:d2:bc:e9:6f:ef:c4:08:06:56:43:61:
28:82:40:38:8e:5e:8e:54:06:80:77:84:49:35:38:
f8:e5:7c:81:47:f0:c3:98:b0:0e:61:65:cc:b0:82:
f0:d4:85:9c:b5:ce:96:57:28:b2:fe:cf:0a:3b:fe:
03:26:43:97:2a:8c:64:38:20:a3:c8:5f:c3:0c:55:
92:04:81:00:5d:db:03:00:87:3a:24:c8:0a:57:de:
b4:de:ed:06:48:7f:7a:79:67:ac:2e:a2:23:0b:7a:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:F0:26:2F:C6:14:9D:7B:2A:E8:8C:F3:B9:AC:31:8D:22:1D:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44dc66f7-b8c7-4d3c-b563-ec267c3d2f42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:71:69:79:ba:7f:ea:90:88:e4:c9:1f:20:be:92:39:53:e2:
83:72:7b:0c:a1:7e:c5:3c:5f:55:9f:0e:4b:4b:0d:de:56:5b:
7c:28:9b:7c:5e:6f:53:15:2f:e5:06:75:89:95:e1:11:95:ac:
a6:30:cb:7f:76:4d:9f:67:6d:19:d9:ba:16:fb:7e:8b:9a:42:
d8:5a:66:f5:39:3e:ed:95:b8:36:02:12:2d:a9:ac:06:23:41:
be:87:6f:3a:53:d7:bd:d5:d9:f2:25:36:fc:7b:7d:28:0f:6b:
cb:1b:76:07:01:fe:1d:e6:9e:ce:7e:38:e2:29:cf:71:f3:74:
8e:12:0c:f5:42:79:f8:e9:7f:04:5a:d3:8f:8b:fe:ef:0b:db:
59:88:82:d8:88:30:40:22:a9:40:ce:c5:fd:4e:ad:1e:36:b8:
e0:62:ae:12:47:98:d4:77:eb:56:41:01:19:d9:a3:f3:8c:a4:
f6:fe:69:28:d4:2d:4a:68:7a:07:cc:3b:61:67:f4:4f:1e:b6:
2a:8a:d8:fa:4c:18:72:e5:ab:5f:36:de:a6:ee:69:a6:a3:12:
bf:81:be:dd:2a:f8:b3:fc:fb:89:fe:ff:2a:a5:38:43:c0:9a:
27:29:d8:da:e7:e7:b6:93:dc:b8:b6:14:54:89:10:14:a2:3e:
70:7b:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:36 2025 by rpki-client