Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f8dda0-f966-4f28-8d83-37698f4ff5b4.roa
File: 50f8dda0-f966-4f28-8d83-37698f4ff5b4.roa (raw, json)
Hash identifier: jo542zBKI7gJQo4/DfsLJddn+mUimRx5ou+l+1A3o7E=
Subject key identifier: 14:EB:93:13:7E:27:80:D8:D2:93:AB:C7:99:0E:E7:A3:A9:E1:70:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 46BB63AD072972B1EAC5862DB02E10DCA7CC872A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f8dda0-f966-4f28-8d83-37698f4ff5b4.roa
Signing time: Sun 19 Oct 2025 03:11:33 +0000
ROA not before: Sun 19 Oct 2025 03:11:33 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:bb:63:ad:07:29:72:b1:ea:c5:86:2d:b0:2e:10:dc:a7:cc:87:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 03:11:33 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=d75b268d159bf1b82e07050c131f5a110ad83b2bd9f1cff6f3453006245fc039, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:40:4d:41:27:8b:f1:fa:45:d0:83:fc:92:
ec:ac:88:11:97:98:5d:66:50:0f:ce:99:e4:17:96:
4d:54:70:be:2b:9d:ae:f1:f5:4e:1f:57:f8:6b:6c:
43:45:58:45:b7:50:bb:64:9e:11:ee:53:91:e6:09:
1b:ab:d3:6c:0c:0f:39:5c:24:7e:89:e8:6a:3c:d3:
38:13:7d:1d:33:cd:e5:6c:62:77:fb:98:a1:98:46:
13:b7:df:fb:cf:15:4e:01:e5:28:3d:6f:4c:d2:cd:
5f:d0:d0:49:15:a5:9e:26:cc:aa:64:cd:c9:75:93:
1e:b4:39:f7:8b:27:f3:26:cc:14:0b:ec:a6:57:03:
19:ac:8e:0c:60:d3:5b:33:84:4f:9b:9b:8a:c5:b4:
17:dc:eb:8e:28:6f:16:a0:c8:e4:93:bc:1e:57:7a:
b8:3d:13:73:f3:0a:73:f2:ce:27:8c:dc:58:37:f0:
68:08:72:2f:29:ad:b0:3f:f8:42:a4:c4:5c:a7:70:
39:d1:69:7c:19:38:b7:78:af:73:d1:ef:2b:67:4b:
d2:0b:e6:2e:11:4e:0b:69:4c:3e:29:6b:59:16:8a:
c8:f6:d8:a8:df:d0:9f:2d:eb:cc:e2:b7:ed:42:f3:
da:04:35:e9:6d:57:ef:84:0c:dd:0d:f9:f7:9d:40:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EB:93:13:7E:27:80:D8:D2:93:AB:C7:99:0E:E7:A3:A9:E1:70:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/50f8dda0-f966-4f28-8d83-37698f4ff5b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.228.0/24
Signature Algorithm: sha256WithRSAEncryption
22:b9:de:9b:8e:fa:58:81:18:d9:ca:bf:91:55:0b:6b:c5:0a:
8c:f5:31:5b:1b:c1:1e:71:71:38:dd:1a:80:ee:38:92:58:1c:
27:b4:e1:00:f1:a2:d5:5f:cc:19:c3:31:ff:90:d1:db:31:9d:
48:94:8a:d6:b8:08:7a:67:a5:12:74:bd:96:6c:1e:3d:db:c1:
42:b9:9f:88:40:5c:5d:6a:a7:2d:0c:9d:60:63:be:e8:39:b5:
84:da:94:6d:ee:99:a2:5f:b8:03:87:c5:be:6f:35:4f:ed:11:
d0:f8:3d:8b:57:4e:89:54:66:b6:dc:ea:3e:5c:dc:1f:1c:50:
c9:37:cc:9c:e6:e6:6f:38:8b:4d:21:13:db:ec:54:54:c0:66:
31:ad:b8:a9:ce:d3:bd:df:5b:14:54:dd:b0:3a:8b:b4:f0:86:
26:37:a5:df:74:02:f7:ff:78:0d:5e:2d:a3:d2:5a:06:c0:df:
35:97:f2:21:d6:52:14:09:bb:6a:b2:bc:c9:4e:76:cb:09:7d:
77:9a:d4:b7:a5:6a:0a:cf:e0:0f:c1:a5:fc:8e:60:d5:89:bf:
13:47:dc:7c:e0:85:02:55:bd:2f:55:29:1e:85:ce:d7:61:b1:
8c:8f:6a:84:35:8f:ef:ea:fb:9a:0d:d6:97:3a:3f:72:88:b0:
df:90:6b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:13 2025 by rpki-client