Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5464c235-7f81-4383-be9c-93fea8ecf3ee.roa
File: 5464c235-7f81-4383-be9c-93fea8ecf3ee.roa (raw, json)
Hash identifier: 1T/bmOPziNyehYR2kYodjNaOwEPazNWU/X+wc+BMQBc=
Subject key identifier: 88:85:F7:CD:5C:FE:86:23:F8:BC:03:71:2D:27:67:E1:C2:36:29:DE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 316211631101322352BC9F4A2D11ED46BEB0D6CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5464c235-7f81-4383-be9c-93fea8ecf3ee.roa
Signing time: Mon 20 Oct 2025 01:11:11 +0000
ROA not before: Mon 20 Oct 2025 01:11:11 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:62:11:63:11:01:32:23:52:bc:9f:4a:2d:11:ed:46:be:b0:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:11:11 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2ced05e45dec7d64552e41d4ee30b98dbb44ac5dec731f31093ebd5d8c602d4a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:d9:c7:dd:16:5c:d9:1f:95:34:fa:58:cf:
6a:e9:5a:29:41:c6:39:88:b1:35:21:fd:40:d6:cc:
07:43:cf:86:36:6c:86:b2:23:df:21:62:42:e2:77:
73:48:4c:0a:e7:9e:53:89:a3:68:88:25:c5:65:b0:
26:d4:fd:49:2a:93:d4:89:37:2b:34:01:aa:01:c0:
40:28:f3:ed:f1:36:9c:be:d0:e7:db:38:db:0c:34:
8d:92:9a:6e:90:84:b0:3b:50:99:f1:68:e0:83:23:
11:83:74:c8:51:6b:3a:99:d2:0c:91:f0:c6:9b:03:
75:8f:6c:d1:2b:b8:56:da:27:d8:6a:f5:12:34:a2:
82:ea:53:91:63:cc:dc:1b:8e:c5:cc:78:a5:2a:e7:
b7:7a:76:99:2f:1e:46:42:85:2d:6f:25:e3:6f:48:
1f:b1:c5:85:58:cd:40:8f:e1:cb:fc:e8:e5:90:54:
30:77:5a:0c:d6:09:03:65:30:82:45:2e:9f:46:ef:
36:d5:4d:c2:c2:d8:37:8b:d2:34:60:e3:f5:23:8d:
ae:a4:5c:9e:3c:93:a8:d3:38:4f:6b:ab:3c:b0:ca:
bc:c6:3b:2e:ec:ff:fb:9e:3b:cd:8a:3b:1c:38:47:
90:ad:62:c6:cf:23:0a:5c:89:36:cf:6f:b5:ec:d5:
17:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:85:F7:CD:5C:FE:86:23:F8:BC:03:71:2D:27:67:E1:C2:36:29:DE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5464c235-7f81-4383-be9c-93fea8ecf3ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:04:8d:1c:42:b2:bf:97:22:01:35:a7:54:c5:01:0f:ae:cd:
02:be:04:10:60:58:49:c0:2d:ce:27:7a:14:36:9c:fc:65:6d:
58:fe:ac:4e:27:39:f8:86:a3:98:76:5c:af:d5:5d:ff:55:f4:
36:a8:05:88:35:a8:e6:ca:82:4d:9e:87:cb:60:f5:01:a3:ba:
da:e3:8b:c6:f8:0a:22:f5:86:bd:ce:ec:01:f5:f6:a4:15:1d:
97:d4:d7:2c:58:21:ae:5e:63:97:33:0b:2b:f1:9b:47:e1:ee:
86:0b:d6:88:79:d7:17:0f:5c:55:b6:bb:a7:cc:5f:cb:da:c9:
8b:ec:8d:2e:4a:33:97:f7:16:ed:59:0b:98:e3:b0:6d:33:d3:
90:51:72:67:63:01:41:a2:79:84:8a:fe:4a:37:1c:6e:fd:56:
8b:6d:75:8b:11:fa:9c:b8:5c:a1:a1:8e:b1:60:45:af:d5:a3:
04:c3:38:b3:14:04:50:3b:4a:da:10:08:b9:23:94:bb:37:de:
d3:8e:a9:e6:01:9e:9d:80:6f:fe:f2:00:0e:1a:d8:e1:4f:58:
67:22:af:a7:ae:96:40:c8:ae:f0:0f:00:62:af:87:40:70:c0:
fa:c2:9e:f3:59:5c:fa:a1:f9:7c:9f:55:b2:eb:9b:46:7a:c0:
74:01:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:11 2025 by rpki-client