Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa
File: 51b3f021-a7b7-49f6-8173-528075001f81.roa (raw, json)
Hash identifier: BKS9Nrx81Yvfj1QB3n3FcRuHr8QFcZZOAx1qkm7iB40=
Subject key identifier: B7:F9:B3:6A:BF:39:9E:81:8F:57:A4:4A:76:13:3D:F6:64:35:EE:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 236416A923D994A52D8017CC1B7BA729106D30C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa
Signing time: Fri 17 Oct 2025 00:21:11 +0000
ROA not before: Fri 17 Oct 2025 00:21:11 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.21.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:64:16:a9:23:d9:94:a5:2d:80:17:cc:1b:7b:a7:29:10:6d:30:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:21:11 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=20bf4cdf01d3ccf7563cbc8e3dd392c89ab2214e41b3fff6b820028722227b78, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:8b:1f:e8:e2:52:1e:75:db:3c:a6:bd:8b:
20:ab:5a:ed:91:23:2b:e6:6f:6e:b6:78:83:f0:7b:
fb:23:f1:a5:d3:1b:1e:01:f2:a7:24:c9:3f:73:72:
33:f3:7a:fc:46:d3:e1:1c:6c:d8:a3:9b:d2:44:8b:
d6:02:9b:54:d6:be:a7:7b:78:a8:52:cb:8f:a1:fc:
5b:1c:a4:fd:b7:22:12:6c:13:90:95:68:93:92:39:
28:b4:f5:12:79:72:13:92:5e:fa:8c:c6:70:24:99:
7f:34:14:5d:5a:77:04:0d:c5:32:b7:b3:ad:5b:d8:
18:1a:16:c4:e2:01:12:f4:3e:ab:8e:72:5a:a1:c1:
38:6f:d6:ce:66:b1:34:aa:76:9d:7b:0b:16:fb:d5:
9e:97:93:83:f7:da:67:84:2a:6a:90:c8:d2:4d:96:
11:1b:7e:b3:2d:7a:e0:09:bd:80:bf:ab:cd:a4:e9:
57:d1:6e:86:32:e3:ca:f5:e8:f7:3f:26:99:23:40:
cd:53:59:04:dd:2d:a8:2f:1c:c7:a3:07:42:78:0a:
b5:fe:c7:66:af:a8:49:69:56:40:4e:49:b8:0c:e7:
05:e8:90:9a:bd:17:16:8b:b8:0c:d3:ea:0d:81:be:
d7:7c:9c:78:bd:8c:53:bd:73:11:24:79:1b:fb:56:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:B3:6A:BF:39:9E:81:8F:57:A4:4A:76:13:3D:F6:64:35:EE:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51b3f021-a7b7-49f6-8173-528075001f81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.80.0/21
Signature Algorithm: sha256WithRSAEncryption
30:07:06:b0:0a:b4:b6:9a:e0:99:fc:67:79:35:74:df:4a:e9:
71:ff:0a:d6:1a:c0:18:72:97:f0:50:c2:43:dd:6b:10:af:e5:
10:22:51:6d:c1:be:45:0f:dc:e3:aa:3a:92:8e:81:67:ef:16:
51:50:7c:8e:60:69:38:be:55:9d:5f:7d:f0:35:d9:f9:0d:95:
7b:68:bf:ef:ff:6f:a8:3d:f0:69:f5:48:3b:70:94:8d:ac:e6:
6d:e9:77:4d:4a:80:48:77:89:51:44:92:e0:72:e3:b1:c1:5d:
73:65:f8:12:94:b2:05:68:e3:ea:49:b7:94:02:3a:81:a6:c3:
7a:0b:96:41:b4:76:f3:f1:e9:3b:40:ff:9f:1e:65:f2:f2:14:
8f:8e:11:f6:2d:8e:ac:7f:2f:87:c9:be:f0:14:bb:18:60:b8:
5a:6e:f8:51:34:29:60:c8:3e:d0:7d:cf:9b:e0:dc:22:c5:aa:
8b:bc:88:f1:0b:a8:6a:7f:df:66:88:48:9b:dc:02:53:13:53:
63:48:fb:96:82:4b:c7:2e:35:2b:3e:4e:5a:29:0e:8d:41:ee:
74:da:77:2c:ca:96:6d:b3:07:3d:80:21:cf:bc:ff:74:6c:d5:
4b:ab:b4:cd:37:71:1a:36:3b:2e:bb:6e:dc:8c:46:21:30:04:
61:9a:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:03 2025 by rpki-client