Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfcef9c-6a74-4237-b285-156bed149816.roa
File: 6bfcef9c-6a74-4237-b285-156bed149816.roa (raw, json)
Hash identifier: J4+1VFTkG99Ab7zY8k0+1Dzq4e/vZ9n1rQa/NA+GCq8=
Subject key identifier: 11:57:47:FC:0B:FC:B1:69:D4:18:6F:00:55:C6:FE:59:4F:D9:DB:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62B2541707FE70B720064DAE5BE18D330AFF0098
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfcef9c-6a74-4237-b285-156bed149816.roa
Signing time: Mon 20 Oct 2025 02:20:50 +0000
ROA not before: Mon 20 Oct 2025 02:20:50 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b2:54:17:07:fe:70:b7:20:06:4d:ae:5b:e1:8d:33:0a:ff:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:20:50 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9f6a7a3b16987e0bb5ba3ecb664328ebbb3a4cc98f80f1bb252c092c3348137c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ea:8b:6b:2f:6b:40:10:45:6e:76:ff:19:ad:
ec:94:fc:51:ac:3e:6b:16:d5:b1:c8:08:8c:7c:1c:
57:ae:35:20:0f:99:57:37:86:77:e7:72:62:6d:05:
1a:6a:6a:68:65:ce:e8:75:ab:45:1c:a7:4b:90:12:
68:3f:3d:88:cd:b5:9a:c7:dd:f7:f4:54:4a:b5:4b:
a8:d3:a0:42:84:b3:26:23:2e:4a:e2:c4:8b:5f:9f:
57:83:a4:0a:d1:c8:7c:d7:11:97:fd:c3:35:47:12:
2d:83:37:59:b8:98:6f:2a:d0:04:50:74:69:75:1e:
8d:5d:bf:46:05:af:0b:da:10:07:a2:27:4d:c6:46:
59:18:de:cc:55:eb:d0:76:4a:c9:a9:29:ed:e9:a5:
89:19:a1:e3:be:3a:ba:c5:83:8c:28:8f:77:67:fb:
82:fe:15:90:59:73:ce:4a:91:3d:43:6b:6b:4a:b3:
57:ee:44:f2:7d:bf:38:15:b7:79:1f:74:68:fa:f2:
45:68:fc:62:08:37:2e:5e:c6:2f:12:c3:dd:57:73:
72:5f:0b:ee:25:ee:70:62:b5:55:54:99:1a:45:0f:
ed:c4:88:7d:ee:83:2a:ac:d8:e7:8f:79:43:e5:15:
55:cd:db:82:e5:24:65:4f:72:9f:7b:ef:0e:a7:bb:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:57:47:FC:0B:FC:B1:69:D4:18:6F:00:55:C6:FE:59:4F:D9:DB:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6bfcef9c-6a74-4237-b285-156bed149816.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.218.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a0:3b:12:e7:bb:22:eb:dd:7d:fc:1a:74:2e:78:5b:a3:3f:
f4:24:91:c2:6d:31:8c:6e:ac:ab:4d:72:42:7a:c8:3f:f2:b7:
89:da:db:96:a9:2d:7c:63:8e:26:94:e4:67:16:ca:bf:2d:fc:
75:39:d3:29:a6:57:fe:1d:e8:80:2b:89:80:5b:5d:3f:a2:b1:
de:07:8a:1d:d7:72:4d:10:ed:60:ff:0a:f4:a2:ea:14:21:a3:
2c:a2:2a:4e:11:79:ca:18:c6:ba:63:20:df:a4:86:ca:2d:d0:
4f:13:f0:5b:e5:19:04:1e:cb:b4:1b:93:3e:b9:00:1b:29:e8:
15:6c:39:9f:7d:71:c5:bb:e7:65:18:0f:8f:45:ca:5e:c0:2b:
66:a6:f7:e2:c0:fc:14:a2:6d:4f:4e:56:45:b6:02:44:cf:4e:
ec:64:cb:16:47:2e:b5:b0:4b:5d:90:ce:db:5a:e5:73:b2:30:
64:23:6a:a5:0d:01:a9:e6:7d:ff:ab:e8:d1:a0:3c:5c:6c:51:
cd:17:cb:56:31:c2:f4:53:63:e0:10:ea:15:0c:20:37:14:54:
cb:01:a3:3f:c0:04:ef:f0:88:1c:c3:ed:66:23:21:41:43:46:
ac:7e:a3:c0:cc:e6:df:43:68:83:fe:a8:7e:8a:8c:8e:e1:89:
b1:da:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:24 2025 by rpki-client