Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6570efe6-7e55-4830-8a18-6ef0a9b0c022.roa
File: 6570efe6-7e55-4830-8a18-6ef0a9b0c022.roa (raw, json)
Hash identifier: AlU4w55LlduJHkmKtwkFyyZAdA7pr/HbsCIVgQo9/Zg=
Subject key identifier: 33:7E:42:2B:8C:34:56:05:EE:1A:5F:05:BE:85:BA:48:4C:83:B4:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CBA49C061BCE19BF1317121C2E34E54C71F6D1F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6570efe6-7e55-4830-8a18-6ef0a9b0c022.roa
Signing time: Mon 20 Oct 2025 05:20:05 +0000
ROA not before: Mon 20 Oct 2025 05:20:05 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ba:49:c0:61:bc:e1:9b:f1:31:71:21:c2:e3:4e:54:c7:1f:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:20:05 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=614feb49328987c2f7f4852a011a71c4b5accedad4f6c33a43c28d5751f542ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:98:b5:52:a9:a6:22:3c:a6:11:e9:95:e5:
00:62:23:9b:7c:31:98:68:f1:47:e5:e2:1f:36:dc:
19:c8:c3:0b:3c:77:42:19:a1:8e:cd:b8:36:bd:e3:
53:c6:06:db:da:f6:09:e8:37:29:2f:12:ab:7e:53:
98:ba:3b:cc:56:d3:40:8e:28:f0:c8:a8:b9:8d:54:
2b:1e:46:ad:d8:90:e2:69:cd:e0:5b:ce:90:3d:a2:
d4:b8:98:8a:f4:7a:75:7f:8c:55:01:25:cc:63:25:
c2:b7:05:c2:1b:a6:a5:3c:64:06:e6:4b:2b:74:e1:
bd:1f:a8:02:34:47:48:4c:6c:2a:18:3a:1d:47:15:
3c:00:11:df:7d:52:68:bd:a0:c0:53:bc:74:42:b8:
bd:a4:7b:ae:83:46:9d:31:07:3c:e0:76:48:2a:b3:
05:83:31:46:8e:44:af:15:17:22:1e:aa:38:2e:f8:
06:cf:60:53:96:82:36:3f:8b:3a:04:c6:21:79:40:
d2:5d:af:bb:e7:0d:ef:a7:12:74:1b:74:86:95:dd:
f6:d2:c6:95:9f:13:6f:4e:75:0d:b9:f4:9d:28:e8:
1f:05:d5:88:37:95:ea:9e:2b:8b:58:c8:77:5e:63:
5f:00:1b:be:17:dc:54:2d:58:61:3a:85:ac:1a:b5:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7E:42:2B:8C:34:56:05:EE:1A:5F:05:BE:85:BA:48:4C:83:B4:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6570efe6-7e55-4830-8a18-6ef0a9b0c022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.121.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8d:e1:48:5e:35:9f:91:6d:1e:37:dd:ea:1f:8e:5c:33:17:
52:bb:f1:42:1a:4d:50:ec:1b:0a:a9:be:37:a2:fe:13:22:2f:
d0:b6:2a:58:c1:3d:d3:e2:8f:9a:10:fb:39:5f:fd:26:cc:d9:
c1:1a:b5:33:40:62:e2:87:38:0a:6e:bd:2e:d3:ea:b4:81:32:
4b:7e:c6:56:5e:6e:e1:47:61:02:03:26:50:f6:d4:a1:ed:8e:
17:17:fc:6a:37:67:85:00:7d:e8:6a:c4:ce:4a:f4:2b:16:f1:
72:8c:d9:20:8d:69:0b:b8:24:e2:c0:a8:9b:4f:49:eb:7a:e0:
90:1b:97:3f:6a:3b:b5:9c:6c:98:d2:45:a7:12:f5:68:c0:07:
04:87:70:2b:6d:f3:16:58:d6:32:a4:3f:de:e5:31:40:34:75:
9d:1f:88:16:f6:80:3c:d3:6d:8e:00:2f:c6:e1:e0:96:1f:1e:
95:d0:e2:52:45:28:e9:a4:48:dc:20:12:74:56:ae:7b:f8:c5:
0e:cf:3c:7b:3f:d1:cf:6c:cd:3b:b0:92:48:fe:04:2e:bb:01:
90:4c:10:10:20:be:57:b5:5b:cb:9e:8b:ab:b5:8e:68:7f:59:
aa:b9:c9:26:bf:6d:73:57:f2:7c:46:8d:c8:c2:56:94:02:f1:
9f:dc:9d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:44 2025 by rpki-client