Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60180496-d9ac-4218-aa73-6176135cb844.roa
File: 60180496-d9ac-4218-aa73-6176135cb844.roa (raw, json)
Hash identifier: wVUF9Q3Ul9ndT2j6olU00Peoa5uJ3RaYSstKg4e5xiw=
Subject key identifier: 03:52:CC:EB:A7:FD:58:2C:45:E7:3D:0F:D2:49:B9:8E:A2:7D:F9:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5EFE20E10BA72AEF22C15E1E0D1D1D32EA00C659
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60180496-d9ac-4218-aa73-6176135cb844.roa
Signing time: Mon 20 Oct 2025 05:00:09 +0000
ROA not before: Mon 20 Oct 2025 05:00:09 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:fe:20:e1:0b:a7:2a:ef:22:c1:5e:1e:0d:1d:1d:32:ea:00:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:00:09 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4eb00c9f700e06d495c950cfc5b8fa6e49cde330837d84213ebf042619480390, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ec:64:6b:3c:7f:48:95:8a:b9:e1:e3:b7:63:
97:37:31:6b:9a:41:fc:50:f6:a3:db:14:0b:4f:3c:
0d:3a:31:b0:19:b3:dc:db:e4:1a:a4:59:4f:5e:e3:
b5:24:7d:57:c7:60:eb:c5:b8:5b:18:4b:58:80:ec:
b5:3d:b2:db:9a:ee:ec:aa:24:61:a5:7e:fb:62:ca:
76:a9:f5:ee:0d:4b:46:0f:f9:ea:50:27:14:56:18:
f5:6b:ff:df:21:10:a8:d8:56:ad:97:75:cb:09:c5:
2a:d7:67:ab:85:d2:de:26:9d:f5:92:cf:15:b2:d9:
04:1e:3a:1a:51:f0:64:a1:a7:ce:5e:6f:db:dd:b0:
21:6b:40:58:30:5f:37:c9:c2:f3:0e:b8:f7:3f:0c:
a4:0b:92:a9:d5:80:b9:c7:6c:3d:fd:10:7d:ec:c2:
38:85:51:8f:72:4a:1e:96:b9:0d:9c:a3:cb:55:be:
95:6e:cf:71:77:b6:0f:3d:f3:0f:74:18:63:33:41:
89:5f:7b:dc:b1:6b:9b:f8:a8:d1:2e:74:18:6f:ce:
0d:39:18:a2:cb:79:51:3a:a3:d9:05:3d:99:2f:de:
db:03:54:68:65:81:52:c1:7b:5d:61:58:ae:ca:bd:
a2:c4:58:60:e9:62:52:4f:84:ee:9f:b2:3f:f6:18:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:52:CC:EB:A7:FD:58:2C:45:E7:3D:0F:D2:49:B9:8E:A2:7D:F9:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60180496-d9ac-4218-aa73-6176135cb844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.219.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:3d:43:ea:9d:bb:30:0c:ae:c6:d0:79:09:d9:c2:f7:5d:f0:
f6:cc:fe:43:69:19:32:34:8a:50:09:93:7f:07:6a:6e:50:80:
23:b4:4b:65:39:6f:2b:8e:d5:4e:d9:41:00:b4:6e:7a:26:79:
39:30:b2:dc:8b:7a:17:94:d5:fb:b7:ee:fe:a1:6c:a3:4f:d3:
11:a6:0a:d2:47:74:0d:38:c0:08:0f:12:68:d1:6a:bb:1b:9a:
ee:45:99:9a:20:ce:ab:54:84:4a:68:b4:cc:90:56:66:94:4a:
92:38:71:a1:e9:6c:ca:a3:e3:14:fc:73:ee:5d:03:99:8f:50:
93:1c:91:41:c7:46:85:07:7e:f2:53:26:fe:84:60:b1:67:fa:
02:09:95:73:18:0b:c6:c6:2b:39:28:70:6b:a0:8d:7e:73:80:
f3:56:6b:37:06:27:d6:0f:e9:dc:b2:3b:e9:07:45:ed:c9:f6:
0a:07:d2:8d:df:ab:da:a5:7b:08:28:f6:48:a3:db:1d:04:6c:
34:e2:18:1c:ab:2c:d1:cd:ef:8e:e6:89:c0:a7:01:a5:90:e9:
0e:be:74:38:8f:0c:23:ce:82:be:b2:37:c3:88:4d:3b:0d:54:
23:e1:de:c1:48:85:67:4e:fb:e1:4a:58:21:47:e5:8f:94:b0:
e0:42:50:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:50 2025 by rpki-client