Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b61a142-900a-412b-a7a4-f1bff40f93b9.roa
File: 6b61a142-900a-412b-a7a4-f1bff40f93b9.roa (raw, json)
Hash identifier: pLtitG+rcJgj9ZTIFks2Hj6xV6jAW7HqxOpaizGWESw=
Subject key identifier: B6:39:F9:FC:F8:36:39:2E:9B:CE:A7:D7:AE:6D:3A:37:B0:3F:0E:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0426C0E3ED7A91EC44303C24630A30A828FB205A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b61a142-900a-412b-a7a4-f1bff40f93b9.roa
Signing time: Mon 20 Oct 2025 01:12:02 +0000
ROA not before: Mon 20 Oct 2025 01:12:02 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:26:c0:e3:ed:7a:91:ec:44:30:3c:24:63:0a:30:a8:28:fb:20:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:12:02 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=ea08d398801b08fac0b402df8a804c4922155f9419eea442e40343b11f78ce96, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5e:7a:3f:62:bb:fb:25:f4:b5:a8:1e:81:e7:
06:c3:a5:5b:95:c7:1b:dd:43:1d:5c:39:42:e3:9b:
95:b3:17:54:43:27:cf:e6:05:93:55:d8:36:54:de:
a3:82:21:66:e1:ca:ca:b9:c2:91:5a:7b:92:27:c0:
b4:73:8f:e7:f3:29:30:94:80:a1:22:10:fc:f4:b1:
ca:15:4e:23:40:2d:a4:c4:24:33:de:61:02:e0:8a:
55:a3:d8:b4:79:56:87:9b:77:4d:7d:3a:14:8d:4e:
34:c1:7d:89:cc:d1:e7:94:5e:fd:e0:64:89:bd:af:
80:39:26:39:67:21:c5:09:75:24:41:27:8c:a3:02:
f1:ce:a0:4d:e8:c5:72:2e:50:7a:b8:86:41:64:f8:
f1:49:88:40:23:0b:c1:06:b6:43:9b:92:d4:f3:b5:
f0:65:8f:71:df:9a:9b:08:09:1d:1a:7e:9b:3f:aa:
40:2f:72:6e:b0:7a:d0:d7:ae:f6:07:5d:62:a5:bb:
0c:e8:3c:c1:19:47:c8:a9:8d:46:c9:d7:cc:47:ba:
1e:f9:22:3e:c3:2e:2a:02:88:70:20:67:51:fc:18:
7b:65:f4:96:b5:62:e4:03:a9:8a:d5:a7:32:88:63:
7d:d3:e5:80:df:ff:b5:83:a0:16:14:60:23:95:90:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:F9:FC:F8:36:39:2E:9B:CE:A7:D7:AE:6D:3A:37:B0:3F:0E:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b61a142-900a-412b-a7a4-f1bff40f93b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.38.0/24
Signature Algorithm: sha256WithRSAEncryption
29:72:f4:ac:e5:03:30:15:91:84:d6:58:95:04:e0:24:ae:f2:
8e:4b:89:07:fa:ed:5c:7e:8e:dd:94:86:62:1b:f6:01:32:2e:
52:95:21:8f:8e:27:db:77:97:fa:e7:7f:c8:cf:67:61:1c:78:
bb:8a:c6:e5:c6:70:74:19:3c:87:aa:d9:4b:f3:3b:58:57:fe:
a3:39:ea:56:aa:51:dc:44:cc:5b:83:f5:03:fa:11:d7:4f:26:
49:79:fa:23:57:d1:67:eb:ed:82:33:fe:3c:65:4d:e1:a8:89:
7c:36:65:b1:c6:7b:07:8b:18:b8:32:1a:fc:35:71:01:2d:7f:
a9:f1:79:62:ae:97:98:6c:9f:aa:57:91:a5:f0:f5:65:4e:0d:
55:4e:99:8e:f7:40:21:16:0e:3c:2e:ce:6e:ea:fc:fa:93:57:
68:61:db:5e:2a:8a:b4:5e:d4:39:f2:bd:89:1e:b7:00:7b:2e:
43:7b:0d:4b:25:97:51:d8:25:15:e9:7d:f7:60:56:79:f1:ed:
8d:f3:1c:0e:96:10:fb:e3:66:bc:b0:e3:ed:f2:f5:ca:78:f9:
7b:d8:30:13:7c:9b:cd:72:9a:29:be:07:ca:73:cf:a0:ab:cc:
9b:c1:be:df:13:ec:1c:22:0a:f3:2e:1a:59:27:4c:a8:11:34:
4e:6f:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:36 2025 by rpki-client