Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4da2ffa3-9467-4cd2-9521-27c65b24ff18.roa
File: 4da2ffa3-9467-4cd2-9521-27c65b24ff18.roa (raw, json)
Hash identifier: qyU2Pl0HQB5tnfw4WKLLnpN130K/gUiwq3a8zBJHz6U=
Subject key identifier: E7:78:FE:51:D2:F0:C9:C4:79:5F:AC:88:88:FD:CA:D0:B1:10:EB:52
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C90DDC3A4FE89A6606F0E47B2E9CC97F858178A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4da2ffa3-9467-4cd2-9521-27c65b24ff18.roa
Signing time: Mon 20 Oct 2025 02:40:48 +0000
ROA not before: Mon 20 Oct 2025 02:40:48 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:90:dd:c3:a4:fe:89:a6:60:6f:0e:47:b2:e9:cc:97:f8:58:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:40:48 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3d55bf63c4124613af7fd3283991cbc86f15a0db96d85b90c660c9c62318e6d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:46:f9:de:d9:f6:5d:19:02:08:52:e8:f7:
b7:e0:e2:d5:5a:d0:31:f1:e9:49:23:5f:3e:24:fd:
3e:01:d7:1b:89:c4:d0:04:75:27:05:4d:f9:73:ea:
bb:64:c6:21:d7:7a:1c:3c:47:14:8c:44:9d:1a:ab:
9a:29:c9:6f:c4:42:ec:f6:a2:19:78:e3:df:ad:89:
a5:47:33:db:fa:ab:78:3f:a7:5c:f2:42:5c:72:a6:
f3:f5:5c:1d:fb:ae:bc:96:62:86:8d:b4:74:cb:30:
59:35:aa:28:66:f8:a6:7f:5e:f7:02:a6:02:bc:ef:
68:50:86:e8:2d:2e:d4:48:e7:74:4a:f6:e6:8f:01:
25:0f:12:6a:58:8c:3b:3c:0d:66:f1:06:fd:f7:4e:
ed:c9:33:e0:e4:09:64:69:2f:a3:a9:ea:06:c4:21:
cc:4e:d2:68:99:42:41:66:0f:4f:4d:47:f1:b6:3d:
d1:26:c3:8c:8e:a5:26:bf:ee:aa:d7:38:09:58:ed:
ef:6d:ae:0e:51:4e:82:d1:5d:08:b8:06:22:ab:30:
5a:25:de:70:24:1c:38:a2:dc:8a:af:50:f0:f9:da:
68:29:42:a7:6b:a3:c2:5f:d8:89:8e:c7:39:30:d6:
79:3e:61:5b:07:de:e6:12:a2:05:de:cd:b1:82:35:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:FE:51:D2:F0:C9:C4:79:5F:AC:88:88:FD:CA:D0:B1:10:EB:52
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4da2ffa3-9467-4cd2-9521-27c65b24ff18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.168.0/21
Signature Algorithm: sha256WithRSAEncryption
82:3e:0a:35:c8:75:0b:a8:46:24:cf:23:26:5f:a6:6f:49:78:
90:68:44:44:9c:da:e1:b8:d0:d4:78:16:0a:92:b7:72:0b:c2:
c4:d7:f8:da:9f:97:a2:aa:97:46:95:f1:e4:f3:af:fb:32:7d:
ce:52:d4:37:2b:30:a2:59:af:51:f8:ef:34:08:20:05:ca:12:
a1:e2:84:56:08:8b:17:d9:af:d0:43:bf:32:d5:56:8d:0f:d3:
6c:c8:27:2d:b0:28:95:4c:7f:94:d2:04:02:7e:22:ac:a3:e3:
83:12:f8:0d:1b:2d:47:8f:fe:61:82:6c:e7:5d:4c:e3:ab:42:
e6:08:bf:c6:20:35:0f:d9:81:ab:19:5a:5b:8d:0c:fe:24:9a:
f4:30:2e:ff:78:6c:8f:c5:b4:23:60:e8:24:91:96:b1:55:f8:
dd:49:0e:12:3c:c2:50:ba:4c:68:3b:a6:e0:dc:fb:3a:63:ce:
ec:d4:6b:b1:44:2a:5f:fd:36:69:04:60:6e:b3:95:be:54:54:
1e:30:bd:8e:a3:7b:36:73:18:07:01:00:1f:9e:dd:b2:e8:4c:
86:c4:65:0d:d2:60:a6:cf:6c:a9:46:f2:c6:c5:91:92:54:4f:
ff:da:da:53:d8:00:62:35:5f:77:ff:8f:e8:c8:3f:45:05:53:
cb:6d:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:31 2025 by rpki-client