Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58ea9635-ad90-4967-a99a-eac68857127f.roa
File: 58ea9635-ad90-4967-a99a-eac68857127f.roa (raw, json)
Hash identifier: 41eSHZePN9rhgTIXUEjRuREawkIErcFtQaAfb6g/P8E=
Subject key identifier: A4:8B:3A:27:40:15:C6:85:50:AA:C8:37:04:58:31:7D:31:41:C4:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4899ECAE33C6E4C764693510A0DBBC4D787D8691
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58ea9635-ad90-4967-a99a-eac68857127f.roa
Signing time: Mon 20 Oct 2025 01:11:58 +0000
ROA not before: Mon 20 Oct 2025 01:11:58 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:99:ec:ae:33:c6:e4:c7:64:69:35:10:a0:db:bc:4d:78:7d:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:11:58 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f166371a6c4491b233975efb082f1718c30aa7286880851a7c5cc574b768b371, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:14:a1:36:c6:59:02:ef:5c:bd:d4:4d:93:
c5:9c:0f:ae:45:5c:e7:16:55:0c:5d:2b:29:3e:4b:
a2:66:e2:e0:01:78:39:7f:16:bc:ac:dd:b5:78:0c:
38:a0:50:69:57:ef:f0:d8:98:7c:36:a9:31:5b:89:
62:5e:5d:74:ea:72:10:14:1d:df:49:06:af:50:c1:
14:61:cd:ec:81:f6:0e:23:71:3f:03:03:e9:70:ff:
f9:d4:71:63:47:6e:6a:78:3a:69:04:5c:0d:63:d3:
bd:63:bf:a1:e4:73:d5:14:4e:e0:78:e0:e1:b5:9e:
70:d9:4e:4d:61:21:6e:c0:76:85:65:07:bf:9f:84:
50:f4:b8:5a:a4:e7:6b:aa:44:61:1f:6c:91:30:a3:
61:33:df:f1:aa:91:8c:a2:0d:d9:15:e7:01:7b:dd:
34:8f:36:08:52:9a:b6:f8:20:31:88:9f:54:23:ec:
d4:8b:ac:31:b4:e6:44:72:7c:d3:60:30:2c:a7:92:
06:e6:2f:57:40:4a:6e:72:f9:97:4b:27:75:6d:aa:
47:50:6a:8e:9c:71:d9:83:dd:48:41:70:6e:bb:54:
53:95:45:c7:ae:bd:23:f5:11:dd:ef:2a:50:dc:c9:
bf:d7:ef:94:a9:d5:79:6f:99:79:de:9f:c6:da:ee:
44:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8B:3A:27:40:15:C6:85:50:AA:C8:37:04:58:31:7D:31:41:C4:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58ea9635-ad90-4967-a99a-eac68857127f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.176.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:da:f8:74:09:bb:c5:04:c1:06:47:2a:fa:e1:01:39:97:70:
0f:9f:f1:b8:c7:ed:0b:bf:27:d0:76:08:53:f1:be:92:62:8c:
3e:eb:89:3c:27:45:e8:60:82:d5:0a:c7:9f:e5:32:06:59:6a:
39:42:9f:c5:a9:bc:04:1b:00:e2:c8:04:68:bb:0a:fd:c1:e1:
46:7c:f6:10:3d:5a:e4:2f:d4:07:a5:41:8b:4a:ed:5c:a6:15:
95:0d:d7:05:cb:3a:55:1f:ef:95:02:94:3e:76:a3:c7:01:4c:
95:c8:f0:56:f8:8a:16:5a:5e:06:0d:61:44:4c:a1:18:d8:e0:
82:e4:66:ef:09:fa:83:20:ae:50:39:57:59:ac:55:1e:b8:41:
dd:c3:d2:8e:d1:8d:92:02:11:63:f1:be:e0:d7:6e:06:a3:82:
a5:55:90:52:9b:11:49:37:93:59:68:53:e9:36:a8:c2:5e:55:
44:01:92:d8:31:64:7a:a7:47:08:ee:d7:79:dc:3f:8b:c1:27:
6e:ec:10:e9:1e:a2:b5:22:25:4a:c6:2a:25:80:94:a4:1a:84:
65:98:9f:d3:d4:f9:71:14:9a:98:e0:7e:a1:b5:ff:2e:bf:1f:
36:7c:75:a3:33:5b:e5:cd:ea:6d:99:94:30:2a:d8:1f:2c:13:
c0:9d:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:01:47 2025 by rpki-client