Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47087a0b-a807-41f8-b090-f16198bbf8dd.roa
File: 47087a0b-a807-41f8-b090-f16198bbf8dd.roa (raw, json)
Hash identifier: fAS7QZcsRwIWoRmyj5tPtykNEv2xblnihU0NuKreUC0=
Subject key identifier: 1D:4A:D7:F8:FE:58:0B:2E:E0:39:27:40:C6:4A:6C:AB:B8:00:7F:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E5A5EF236A827CB94B50038E872FD8B8EA52084
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47087a0b-a807-41f8-b090-f16198bbf8dd.roa
Signing time: Mon 20 Oct 2025 05:32:17 +0000
ROA not before: Mon 20 Oct 2025 05:32:17 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:5a:5e:f2:36:a8:27:cb:94:b5:00:38:e8:72:fd:8b:8e:a5:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:32:17 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d9503b986dbfcec2283810c02825f2710eed25e059b8e7135db4d3334e587983, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:5d:eb:e5:07:ad:ee:1e:ad:8b:ce:d8:e2:
11:84:9e:cb:b5:2c:ee:65:93:33:fa:bf:e9:a5:f8:
b5:e4:48:fb:ab:1b:fb:42:dc:c0:10:1a:a2:ff:37:
f7:1c:9d:f9:1f:25:0f:9a:94:2f:d2:44:34:02:f9:
a0:41:64:4b:4b:24:66:05:2b:56:29:70:20:59:91:
85:c9:5b:48:48:0c:e8:cc:d6:c8:4c:86:2c:57:3e:
e0:11:11:56:50:31:4b:c4:f8:ff:06:b8:4f:fb:43:
a1:dc:b0:7a:ce:da:f5:9a:11:c4:01:81:ef:4d:62:
d1:0f:94:15:9f:f8:b6:c3:4c:a4:f1:e9:13:6b:6b:
e6:0b:f7:e9:35:a5:bc:33:8e:03:df:77:69:c7:10:
72:f1:b8:b2:0c:a7:20:e5:4c:39:83:88:0c:9a:77:
1b:9e:ac:72:0e:3d:63:49:50:4e:bf:5d:df:c7:91:
72:66:1c:67:5d:d1:8c:ea:07:cc:ba:2b:2a:f3:a3:
06:5e:7c:ce:97:77:9c:d4:df:d9:69:a7:0f:52:90:
a3:ab:47:fe:85:36:4c:ca:3a:f9:b8:a5:79:7a:ba:
48:1f:27:eb:fb:0f:38:83:b8:9e:08:51:ee:0a:45:
14:15:3d:71:70:f9:14:9d:49:9e:f2:53:ef:99:f8:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4A:D7:F8:FE:58:0B:2E:E0:39:27:40:C6:4A:6C:AB:B8:00:7F:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47087a0b-a807-41f8-b090-f16198bbf8dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.162.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:cd:b7:c1:85:30:17:3c:9a:42:ca:90:7d:a2:13:48:43:37:
94:5f:90:b9:63:0c:ba:f9:8a:73:ec:fa:5b:49:0f:0f:fe:54:
01:3e:b5:df:29:df:72:db:0b:d3:80:db:c7:db:a0:b4:d7:32:
99:8d:db:65:09:b2:4e:1c:16:13:b6:28:3d:61:4e:ff:2e:2f:
2b:e5:b1:e9:6a:8e:35:88:58:42:66:23:d8:65:71:b7:be:3b:
92:48:7e:ed:d3:2e:c2:51:6a:e5:94:a3:6b:77:c5:52:da:a5:
e0:3c:35:11:75:c7:08:15:17:74:3d:bd:8b:81:24:1f:82:a8:
b5:fe:52:96:ad:c2:49:7d:16:8a:1e:04:65:ad:90:73:8a:42:
8b:05:cb:54:d6:9d:d9:67:25:5f:47:b5:3e:94:dd:5b:3b:e9:
d3:fb:7c:5d:9e:aa:3d:7f:8c:6a:b2:5a:7f:e5:fc:65:05:49:
7c:e3:c1:b2:96:c4:ff:4e:a3:25:60:c9:79:fd:cf:73:37:4d:
57:cb:1f:30:d8:6d:60:04:54:90:f1:76:c4:8e:31:ee:ee:49:
2e:a0:3d:ef:19:52:bc:b3:90:14:41:31:ce:d8:66:15:b1:ee:
b1:5c:d1:af:11:23:55:19:f7:3e:7c:61:59:5c:2a:31:77:6c:
b1:46:51:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:00 2025 by rpki-client