Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583a36d6-3c47-4968-94d8-275da85f7de8.roa
File: 583a36d6-3c47-4968-94d8-275da85f7de8.roa (raw, json)
Hash identifier: HNWUzE31SJs9bDCRcCld2jbxCh7c7Gr9mSQN2SgFJN0=
Subject key identifier: 64:A8:A9:17:70:E3:1E:88:31:D2:52:F4:37:BD:24:94:04:98:8A:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 022A054F4C47FD304ABFF7FD3205CAA61047090A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583a36d6-3c47-4968-94d8-275da85f7de8.roa
Signing time: Mon 20 Oct 2025 02:52:21 +0000
ROA not before: Mon 20 Oct 2025 02:52:21 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2a:05:4f:4c:47:fd:30:4a:bf:f7:fd:32:05:ca:a6:10:47:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:52:21 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2776cad916026f5bee5e27989b7b971d80f47acf00f795e06435c1ae057a48ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:13:d1:e2:9f:10:fe:34:55:a5:cb:0e:b4:
43:04:cd:74:13:a7:d9:c1:fe:aa:c4:de:4f:1d:13:
94:3d:ab:01:5a:a1:14:27:43:9e:0f:d7:7f:ce:ae:
a0:52:ce:a5:20:44:cb:3a:09:10:f0:0c:97:4a:fa:
4c:1c:47:4b:6e:96:2e:b4:e8:27:bb:7e:dd:96:ff:
7a:e4:e6:8a:70:cc:9c:a6:55:19:b1:52:02:8a:77:
98:50:79:ea:c8:5e:35:e0:e9:62:ca:ec:77:80:96:
3f:14:c6:2d:7e:97:c1:fd:e9:2c:09:ff:5a:f2:aa:
1f:e4:c8:e2:b2:ec:be:53:eb:57:52:7b:67:31:cd:
2d:fd:51:5f:5b:a5:11:5c:a3:cc:39:81:e9:ef:a4:
35:2c:7d:cd:61:f0:ef:aa:82:f4:e4:29:ae:e6:1e:
6c:79:4c:6c:8a:21:09:8c:1b:0e:31:a5:32:67:d5:
89:5c:dd:b9:e8:92:56:36:d1:85:df:07:bc:92:b8:
1e:17:2f:14:9d:dd:0e:db:49:01:07:0f:97:50:01:
a7:e4:44:a0:86:8c:9e:a0:df:65:4b:ff:00:26:9b:
c1:98:01:8b:d9:3e:b1:e0:b3:a7:da:19:fe:03:65:
32:9f:17:25:f0:bd:b8:89:01:6e:e1:23:f5:66:e0:
bf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A8:A9:17:70:E3:1E:88:31:D2:52:F4:37:BD:24:94:04:98:8A:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/583a36d6-3c47-4968-94d8-275da85f7de8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4c:d2:66:dc:21:ac:8f:8f:ca:1b:6f:8c:a2:01:a6:35:64:
31:42:42:8b:65:f9:2a:8f:0e:c2:99:f2:ce:fb:d5:7d:3d:ae:
b9:77:e6:56:9c:db:98:af:bc:41:25:b6:96:61:2e:eb:f6:64:
5c:11:5a:ac:db:ff:28:2c:57:61:ec:40:f9:26:65:05:bc:ce:
8f:ba:53:bc:b4:d5:b3:6d:09:35:98:4c:23:61:b3:56:08:72:
fb:56:32:5f:38:38:84:be:6d:e9:7c:03:4e:19:c7:73:34:bd:
85:ae:d5:09:88:d1:5a:c4:6a:aa:2d:a6:73:32:dd:34:26:16:
87:4e:d0:20:9c:e6:86:56:b9:57:bc:8f:ff:b4:5d:16:b0:72:
ec:c3:4d:5d:0e:26:0d:2b:d9:d5:b0:b1:20:28:f4:f1:ca:08:
08:64:15:b0:ee:8a:5b:10:b9:f0:cc:eb:8f:e2:87:da:22:4d:
07:13:d3:52:b1:ea:6a:2d:b3:f6:d6:ab:41:b2:92:7d:1c:76:
c5:54:b2:17:33:cd:a4:cb:b2:a6:96:47:c6:c2:23:d9:66:66:
34:46:ff:27:77:cb:7e:09:ab:29:c4:ef:06:48:20:d0:d7:b1:
8c:97:11:f3:e9:94:aa:f3:d4:de:32:9a:66:71:29:4c:d6:81:
c2:62:61:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:26 2025 by rpki-client