Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478d16a0-9e96-413b-acf7-1cd1d5f7c945.roa
File: 478d16a0-9e96-413b-acf7-1cd1d5f7c945.roa (raw, json)
Hash identifier: fK2EEcqpmp/MOog7X0EGbAQ695AHYtS15nlIpIZryzc=
Subject key identifier: 81:65:A1:85:4F:35:A5:9A:31:D7:2D:35:11:A8:13:08:9B:71:7F:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 12F5BAE960FE5104191394B038F331D9A835882D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478d16a0-9e96-413b-acf7-1cd1d5f7c945.roa
Signing time: Mon 20 Oct 2025 01:11:12 +0000
ROA not before: Mon 20 Oct 2025 01:11:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:f5:ba:e9:60:fe:51:04:19:13:94:b0:38:f3:31:d9:a8:35:88:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:11:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d3951d3bcf8b92e6271b6bb60215a366d721afa611904b22b37d1dee52f2f3f0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:14:4a:ef:81:24:04:53:8a:2b:50:7a:a4:
56:d2:31:46:b7:8e:ec:da:2a:71:62:5c:63:cd:ad:
47:95:9c:26:b8:41:d7:12:2d:76:5a:ea:69:fa:26:
36:7a:1b:9b:68:45:e6:bf:c0:d0:00:8f:8e:47:75:
8d:63:cb:cd:8d:a1:d3:d3:21:82:1d:15:cf:65:29:
5c:51:6b:8d:18:e8:65:5f:f0:e6:e0:87:b7:43:b1:
d6:08:d1:df:fd:61:f1:72:af:0b:bd:1c:54:2f:37:
cb:d9:cd:c1:15:e0:78:96:49:d9:49:f7:d0:51:ab:
16:31:e3:65:e0:e1:96:c7:07:9c:47:23:07:d2:4a:
11:52:77:f2:d1:9b:f7:db:aa:db:40:0e:09:cf:78:
77:20:a2:53:5e:8b:62:78:79:00:fe:06:ee:4f:9d:
67:6f:27:6b:93:70:11:76:80:f1:f4:19:be:86:b7:
bd:7d:ce:bf:33:03:f7:e5:07:b6:a0:57:f8:af:9e:
90:24:e5:9b:4e:22:b1:83:73:53:0a:e6:34:04:70:
1f:36:4c:a9:40:1b:9b:36:27:b8:ef:cb:e2:77:70:
ca:39:40:57:9a:bb:3f:84:4d:c9:49:f7:52:87:90:
3f:6d:4d:dc:2e:67:0e:c1:7f:5e:86:2f:82:08:d7:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:A1:85:4F:35:A5:9A:31:D7:2D:35:11:A8:13:08:9B:71:7F:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/478d16a0-9e96-413b-acf7-1cd1d5f7c945.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.210.0/24
Signature Algorithm: sha256WithRSAEncryption
18:91:3a:45:25:33:5e:6d:2f:f1:af:7b:87:b4:f1:b0:99:e8:
f7:f8:fa:22:e8:13:73:b6:3d:5d:79:fd:14:21:d7:5f:9a:aa:
9f:df:2e:e4:0a:85:47:95:57:7b:d2:47:bc:80:6a:b0:ae:88:
f3:39:fb:75:9f:4c:a9:62:49:ef:72:2b:29:8b:74:65:87:7f:
21:c2:05:55:f0:a5:ad:1e:7b:29:cb:2c:6e:24:27:58:eb:87:
f4:46:62:58:fb:88:01:03:9e:eb:a3:df:17:76:b2:1d:33:e5:
be:e8:d0:8d:67:6a:69:48:ab:3b:d3:b5:a8:09:92:cb:3f:6d:
9e:b5:a8:f6:70:b1:9a:f0:25:1c:f0:2b:db:bd:59:f7:7b:70:
25:8b:8b:43:e8:04:ac:9e:d2:7c:eb:dd:7d:33:ff:89:40:70:
30:80:08:1b:1f:6f:bc:31:53:1e:03:32:b4:24:4a:50:9b:fc:
a4:19:8d:85:e8:b7:c8:cb:da:1b:df:12:37:62:c5:fd:c3:49:
61:0d:ff:28:71:2f:77:f9:da:4e:4f:3b:f7:50:f1:a5:0e:09:
cf:aa:9c:c4:35:e8:db:35:45:59:3c:05:db:2a:7c:bb:c5:11:
d6:ae:cc:7a:8c:02:24:ce:fd:44:16:a8:1f:d4:f7:06:d2:ce:
1c:7a:d2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:41 2025 by rpki-client