Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77c8c30c-6b7d-4f11-9166-a6f2db625f04.roa
File: 77c8c30c-6b7d-4f11-9166-a6f2db625f04.roa (raw, json)
Hash identifier: eq10zapCuPJr1AqK9DZh9WF26IOpO1xiwAg1YiKd/nY=
Subject key identifier: 7B:4E:8D:7A:71:8B:41:F4:7D:04:55:09:49:5A:3E:64:D8:30:3E:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A7DD3CCE2F1154B4EABD21CD424529CEE49AEF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77c8c30c-6b7d-4f11-9166-a6f2db625f04.roa
Signing time: Mon 20 Oct 2025 05:51:29 +0000
ROA not before: Mon 20 Oct 2025 05:51:29 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7d:d3:cc:e2:f1:15:4b:4e:ab:d2:1c:d4:24:52:9c:ee:49:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:51:29 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=ca5dbcb72efac7441e34601daf7085bbced9b0bcd6213b9100ca0a2b32276b1b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:0c:29:d0:4b:b7:26:78:1f:07:c7:dd:ac:
8c:25:f7:0e:00:19:d6:96:b7:ce:3f:37:e3:63:a7:
bc:50:72:03:9e:74:15:5e:76:fe:61:78:06:8c:32:
c8:0f:27:ad:73:aa:37:19:86:e2:7d:9c:49:5e:35:
f7:ea:c6:23:44:45:62:21:26:da:b9:6d:6c:df:6c:
55:c9:d2:48:54:d2:28:51:7d:65:ec:fa:44:39:7f:
60:df:9c:a1:20:a1:a5:b8:ce:ea:d9:c5:d6:27:28:
41:d0:c4:43:34:de:2e:9f:65:fe:a7:82:cf:7a:cb:
a7:a6:60:7c:5d:3e:9d:de:63:b8:f5:05:13:10:0b:
c1:fc:53:e6:80:c2:a9:5e:10:98:24:b8:0a:2c:a6:
9c:d4:b1:cb:33:38:ed:7e:26:83:f2:82:e5:d9:23:
9d:bf:c4:a4:3d:c7:05:dc:5e:c3:a8:a7:20:db:a1:
74:f0:77:44:a0:33:bc:1b:67:15:39:8a:ac:72:33:
46:6f:92:3c:b5:40:b2:34:fb:cb:2c:2a:67:34:12:
4a:2c:0f:98:49:5c:ed:6a:df:74:ff:75:3f:fe:42:
bf:16:9e:c4:f5:cf:b8:13:8e:36:57:06:36:fa:9a:
f2:ae:e1:81:33:46:da:3e:11:b1:de:7b:33:2e:3e:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:8D:7A:71:8B:41:F4:7D:04:55:09:49:5A:3E:64:D8:30:3E:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/77c8c30c-6b7d-4f11-9166-a6f2db625f04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.217.0/24
Signature Algorithm: sha256WithRSAEncryption
99:07:6a:1c:88:e0:24:92:3f:6b:32:33:12:17:eb:28:54:dc:
82:f1:bd:cb:bb:71:55:58:1b:a0:f0:29:47:cf:eb:d1:ea:93:
a5:31:1c:67:9d:a1:2f:d8:9e:50:4f:f6:43:2a:dc:60:d1:20:
4b:80:54:ce:af:3d:3d:95:bd:27:c7:b8:58:49:91:74:9b:55:
1f:6a:f9:88:62:e8:16:45:c3:4f:35:91:63:d2:6d:a3:30:7d:
c9:72:07:44:49:32:e8:9f:7b:57:a3:6e:43:b3:55:4b:0d:c6:
93:50:44:7d:66:c1:1f:77:b7:50:a9:e2:58:46:cc:39:aa:b8:
ac:dd:4b:76:fe:bb:03:8e:a7:3e:7f:69:07:77:73:35:6b:1b:
68:7e:97:a1:e9:6f:1f:1c:88:8d:ac:44:91:c7:bc:e9:01:0b:
91:be:da:84:4c:65:73:61:cc:34:dd:a0:99:fc:2d:a0:30:05:
e2:d7:9c:d2:6e:c5:02:da:8a:3c:7d:60:d2:ab:17:49:7b:f1:
da:59:a2:a2:2d:8c:b8:fb:d6:81:37:6f:39:af:d0:ea:be:98:
9b:54:b4:f7:ce:d9:f9:fe:ee:c2:75:ee:99:e9:56:9a:de:65:
63:60:67:f1:ab:e0:c9:e4:8e:6c:4c:7b:88:2d:f3:39:f0:65:
3f:b7:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:51 2025 by rpki-client