Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47365dc0-2ea2-4d83-b7a1-2218bad5d23d.roa
File: 47365dc0-2ea2-4d83-b7a1-2218bad5d23d.roa (raw, json)
Hash identifier: coTHWzhQsULI9LSTbjlPWY6vwiYSpkIneqnVKQDEJpc=
Subject key identifier: 4B:86:F2:42:D5:45:81:42:FA:09:62:9F:1A:AA:72:3F:85:05:87:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: ABBA275798BA9A0D4C1D5FBE9B47BC40B0B11F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47365dc0-2ea2-4d83-b7a1-2218bad5d23d.roa
Signing time: Mon 20 Oct 2025 02:22:11 +0000
ROA not before: Mon 20 Oct 2025 02:22:11 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ab:ba:27:57:98:ba:9a:0d:4c:1d:5f:be:9b:47:bc:40:b0:b1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:22:11 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b7d71834470d313dc1b990e39cf73c19cd015fcdd61a2ab782d3f141a4195d6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:79:af:55:f5:3e:45:b6:fe:19:63:3d:d7:d0:
77:9f:ae:dd:81:bc:74:72:7b:89:43:1a:2f:96:aa:
60:c8:74:8b:4e:03:43:38:0f:74:c1:1a:5f:35:39:
83:8b:cd:60:5d:88:48:a9:1f:92:fb:b9:c2:97:fc:
10:83:d3:6a:7f:7c:66:af:53:32:f5:e5:2a:9c:58:
6a:ca:26:72:ea:6a:f3:dd:57:fd:2c:71:21:c1:2f:
2f:16:1d:37:4a:26:42:b2:07:40:fc:30:43:ce:1b:
47:77:fc:fb:d8:82:18:48:44:0c:5e:45:76:bc:c0:
70:b7:6a:d4:41:51:c2:df:69:57:b5:20:2c:46:eb:
cc:90:b3:45:b6:fd:3f:37:5a:28:b6:1c:86:c3:6c:
60:b3:c3:d9:a0:60:6d:ba:bc:b6:1c:45:11:b4:0c:
76:dd:21:c8:4f:50:0f:40:06:2a:06:14:4b:49:ec:
74:ef:e2:c8:31:27:6e:02:ed:f8:89:03:76:aa:11:
2d:88:02:e9:29:91:58:b0:03:c0:0d:59:76:88:d9:
9c:db:df:c6:8c:ee:5b:94:ce:cb:f6:55:10:2d:5e:
8e:30:62:79:92:8c:b7:1b:2a:e5:81:b0:0d:49:e4:
cd:fd:f9:8e:49:05:47:74:cc:4a:c5:fa:13:5b:65:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:86:F2:42:D5:45:81:42:FA:09:62:9F:1A:AA:72:3F:85:05:87:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/47365dc0-2ea2-4d83-b7a1-2218bad5d23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
78:58:5e:4b:4b:17:0f:c2:fb:2e:3f:0e:ec:c7:ba:b1:39:04:
e3:28:39:9d:7a:62:64:9d:79:39:07:b4:7a:c5:ed:a0:6b:26:
8c:ca:6d:a0:b3:3b:24:af:94:37:4e:99:31:84:ba:ca:3e:c6:
7c:67:59:39:ea:dc:4d:6d:bd:38:98:29:8c:8e:e5:2c:0f:bc:
17:98:09:27:75:2e:c2:3a:e1:39:01:d2:4a:be:15:b4:94:74:
5d:af:76:ae:1b:77:35:08:83:ec:8d:a6:2f:b8:5f:c5:67:9b:
c2:92:ca:5a:34:b0:91:62:c5:35:ec:53:8a:14:4e:69:9c:87:
0e:b2:d2:cc:dd:5b:73:19:a2:32:f6:46:a8:49:72:94:ed:8d:
90:cb:bd:5a:34:f7:1b:e0:ba:4b:fb:fe:ff:49:dd:0e:bc:44:
b2:3e:b6:c6:6c:f0:42:84:eb:6a:61:ae:04:14:5f:2d:1c:8b:
75:db:09:d2:7d:f0:c1:a8:29:8e:20:39:aa:d2:f9:a0:a4:f3:
3b:1d:d2:f4:49:e2:b7:65:7e:fc:21:ec:4c:39:ca:94:84:42:
b2:83:b8:4d:19:73:71:2e:6a:1f:31:b6:3b:3e:37:6e:34:61:
b3:73:63:34:a4:35:37:1c:d4:75:cd:ce:9d:62:e9:d4:63:7b:
1f:7d:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:21 2025 by rpki-client