Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6bc023-d9d3-4195-a7c2-c3c2ba740db0.roa
File: 4a6bc023-d9d3-4195-a7c2-c3c2ba740db0.roa (raw, json)
Hash identifier: kPGgnUO8Hugqoy4QWGcOHKa5A5Mcz82l0qYtNEgZXqs=
Subject key identifier: 79:77:BF:7E:7B:C9:F6:AC:F4:87:1B:CE:72:C7:F0:AF:CA:52:F0:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5AA00FA1D6757B8E9DFE623A0FFFABBEDA4BCF2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6bc023-d9d3-4195-a7c2-c3c2ba740db0.roa
Signing time: Mon 20 Oct 2025 03:00:03 +0000
ROA not before: Mon 20 Oct 2025 03:00:03 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a0:0f:a1:d6:75:7b:8e:9d:fe:62:3a:0f:ff:ab:be:da:4b:cf:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:00:03 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=65358f23a4735ec2809f482bd6626067412e6c7180fbe8333e019dc0576fa9ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:92:fe:27:1b:d0:cd:7e:58:25:11:89:de:4b:
ff:f8:63:f9:f7:00:f6:ed:bf:9e:19:49:1c:62:a9:
ae:4d:9b:92:c4:a6:b0:79:93:f2:bc:46:60:7b:0e:
55:3c:89:a0:fa:5f:03:99:f9:5e:13:9d:f5:97:be:
3a:18:a6:95:67:1d:00:82:d1:e6:62:73:b0:f7:ce:
74:24:0b:9b:30:74:14:0a:9d:93:65:4e:2a:b3:b3:
bf:32:ae:e4:e0:9a:1c:7b:21:6a:76:aa:73:28:83:
20:f1:aa:ab:b1:0c:70:3d:12:fe:4e:45:8c:48:c7:
4c:20:4f:7f:47:6d:1e:58:4e:f7:a5:62:8f:64:8b:
9a:ee:22:46:6f:7d:6f:2d:bb:5b:8a:9e:c2:5f:8b:
70:67:d9:96:ec:fd:0e:67:09:74:68:63:80:72:2a:
cf:10:48:83:f9:84:4e:d5:47:2b:33:f0:1d:d2:b8:
86:b4:d7:74:b1:c3:6e:2b:40:85:0e:8a:c8:7f:1f:
fd:c2:ba:7a:0f:ec:dc:a8:5e:02:dc:3c:a3:0e:96:
61:60:78:45:b8:43:e9:25:85:59:45:45:81:31:31:
65:99:f2:00:f6:b4:7a:ef:ca:39:b6:c2:75:1d:67:
dc:02:d0:5d:51:3e:d8:74:19:0f:38:06:19:f7:dd:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:77:BF:7E:7B:C9:F6:AC:F4:87:1B:CE:72:C7:F0:AF:CA:52:F0:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a6bc023-d9d3-4195-a7c2-c3c2ba740db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.0.0/21
Signature Algorithm: sha256WithRSAEncryption
52:1e:a4:5e:d8:24:6a:46:53:df:bd:14:21:a6:8f:9c:61:29:
3a:0d:55:03:6a:88:b8:4e:c3:bb:17:b0:3a:fc:0c:fa:e8:7a:
c5:1d:57:00:06:ec:6a:da:2f:87:55:3c:91:30:f6:19:62:30:
ea:22:cb:91:3a:09:85:59:c5:bf:4a:6c:a9:95:c0:03:a0:33:
00:5b:d2:4f:51:5a:9d:7f:57:71:e2:00:4f:d3:bd:18:29:b1:
ae:ad:47:c3:10:6d:43:4d:13:7a:65:de:22:75:3c:cb:0b:95:
79:ad:1b:8b:7d:45:c4:b7:be:5e:f4:7d:10:02:ca:ff:71:47:
91:00:1b:6e:70:aa:6f:3c:5c:f8:7c:5b:13:db:ac:b2:33:c8:
a3:32:45:59:9f:9e:0f:f9:9d:e7:1d:a6:d5:b1:1f:41:ff:64:
f5:9e:f7:45:51:86:82:06:d8:0f:66:40:24:dc:1a:62:da:7e:
9f:f1:b9:7a:b7:96:f7:df:f3:f0:b4:f0:49:fc:d4:f2:90:3d:
b9:4a:6c:c3:a3:1d:05:ac:0d:e2:35:e0:3c:ba:03:a1:02:a1:
a4:45:05:d3:66:49:bc:90:f2:41:ba:6b:d3:0c:a2:6b:c2:66:
3b:8f:1e:cd:ee:55:85:79:d3:64:0e:c5:16:63:06:1c:d0:89:
f7:d4:ae:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:10 2025 by rpki-client