Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cadbe34-b0e2-44e4-a9c7-0f9f4a0879e8.roa
File: 7cadbe34-b0e2-44e4-a9c7-0f9f4a0879e8.roa (raw, json)
Hash identifier: 1HQPaJxz3ytPT0MhqRS20Jmk/A6mGJSddBhTxwlU/BE=
Subject key identifier: 18:A3:9D:B2:46:16:A2:4B:45:33:2F:62:CA:43:14:16:6A:94:17:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79552CC44297E57A8E3A4724694A92B1C54F6CAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cadbe34-b0e2-44e4-a9c7-0f9f4a0879e8.roa
Signing time: Mon 20 Oct 2025 05:10:10 +0000
ROA not before: Mon 20 Oct 2025 05:10:10 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.82.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:55:2c:c4:42:97:e5:7a:8e:3a:47:24:69:4a:92:b1:c5:4f:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:10:10 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b3e6b01e95d82a4125115be50f093320f6589cc6c8cda57290cd8ea8ce8a105f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a8:7d:d1:6a:1f:72:88:be:3b:f7:f8:b5:8e:
8e:28:44:5f:b5:25:60:d1:6f:50:87:38:d5:7f:7b:
0e:ec:44:ac:66:9e:fd:22:e2:be:f1:61:09:e3:55:
85:6a:6e:4e:81:b2:5e:7c:92:91:41:e4:a8:b0:1c:
03:44:52:55:bf:46:56:45:bd:5f:ec:3d:8e:ae:ef:
7d:0b:69:09:1d:0d:1f:32:f7:24:6f:9e:7d:bf:7a:
6c:22:6d:2d:ab:38:5e:47:10:36:ae:3b:55:9c:6a:
5a:66:11:27:76:f4:c1:a2:8e:71:4c:e2:37:d8:03:
30:24:76:6c:07:e1:1d:5a:c6:6a:a7:7b:03:14:ef:
93:2e:cb:74:3e:21:ff:7a:65:8f:08:65:9e:4c:3b:
48:a3:bf:d8:a4:0a:f8:4c:eb:99:9c:4b:b1:4c:93:
38:3e:a7:bb:ed:f1:3e:a2:e0:d8:78:58:d3:a3:ac:
97:33:35:73:e0:4f:f8:32:cb:4b:7e:fc:e2:4c:6c:
7e:6e:41:18:67:1b:2c:68:ed:17:1c:94:cb:09:ce:
a0:67:b0:62:1f:8e:0b:be:62:3f:f2:fb:59:a4:4e:
30:a0:06:d1:3c:2f:be:51:e0:72:89:57:b3:2f:ca:
53:33:f5:63:c6:34:0b:f8:0f:89:27:f1:5f:dc:1c:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:9D:B2:46:16:A2:4B:45:33:2F:62:CA:43:14:16:6A:94:17:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7cadbe34-b0e2-44e4-a9c7-0f9f4a0879e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.82.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:ec:78:57:42:29:30:0f:fe:b3:b3:3f:55:ef:23:54:ca:99:
75:c9:14:b9:e6:db:c1:70:ed:ef:41:01:ca:33:8d:73:f2:64:
ca:cb:68:00:33:94:c3:e5:e4:65:57:11:11:d3:d3:49:09:70:
c3:04:27:99:93:48:d9:e6:9e:cc:38:86:40:ac:38:5f:b5:ad:
fe:a0:54:4e:cc:40:29:0a:83:79:6e:fe:47:c1:5d:f7:5d:a2:
1a:6b:c3:70:18:bd:11:d1:53:d8:81:b0:52:37:b9:69:5f:63:
d7:98:47:ab:7c:83:f5:ac:79:5a:24:6d:e1:f3:77:b8:5f:69:
ac:44:8c:15:ce:b4:33:51:b3:6e:a4:4e:d6:ed:30:e3:a3:ef:
2d:c8:c6:91:59:ab:20:88:58:a5:bb:4a:e7:24:e7:ea:87:dc:
01:aa:d1:13:3d:4e:ca:2c:3c:5d:d0:d8:b3:b1:7a:19:e7:f6:
98:0f:29:4d:4e:cf:9b:0f:d7:10:b3:b5:92:c3:4f:42:5e:e7:
a9:6b:88:00:05:d8:ea:ed:76:37:de:f5:bc:13:06:99:7e:a9:
96:9a:50:13:77:69:df:22:d3:d4:67:d4:e9:ea:49:21:64:4c:
66:27:74:f4:84:5d:65:0e:11:9b:52:fb:8b:c7:2e:71:57:21:
87:3d:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:48 2025 by rpki-client