Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa
File: 84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa (raw, json)
Hash identifier: K//7AvKoRco0J2rE3IC7O4f2LniTt4ZdXtCjrYLFaMY=
Subject key identifier: F2:58:19:28:49:39:3C:8B:78:98:92:51:05:A3:D1:E9:7D:E5:3D:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 62D162D11E3FB602DE0CE0C7059500A1DF577CA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa
Signing time: Fri 17 Oct 2025 00:22:10 +0000
ROA not before: Fri 17 Oct 2025 00:22:10 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.21.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:d1:62:d1:1e:3f:b6:02:de:0c:e0:c7:05:95:00:a1:df:57:7c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:22:10 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=49ed8a67db9b6d2559c9fe1be0c5bfaea1d323027ec2c53aa0d16447cedf8891, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:87:cb:aa:d1:49:58:36:b7:43:6c:f8:70:
39:83:c3:41:b3:3a:0b:3d:0f:dc:04:e1:54:b1:b6:
13:53:4d:ed:0a:f8:70:32:1c:22:30:ab:92:f7:b0:
00:f9:54:d2:ff:a6:5a:69:8d:e2:2e:e8:98:a9:af:
9e:74:37:d5:57:13:58:ec:38:54:48:95:15:da:c9:
24:c8:df:82:ea:c0:dc:94:19:26:53:c6:00:1d:4e:
9b:ff:f8:c6:a4:3c:b2:15:1e:9e:b4:e8:0d:1c:36:
43:36:46:ca:06:c0:d2:a8:40:74:a1:c6:84:fb:cb:
78:7a:c1:e6:0b:b1:35:24:03:0e:6a:9c:38:1e:ff:
ed:ba:52:28:41:af:e8:9d:93:42:db:78:fe:ef:5b:
90:78:6d:bc:a7:f2:9e:74:1f:c9:eb:02:e5:a2:21:
91:1b:8d:b7:a1:b0:ff:e4:20:b5:f5:97:57:54:e7:
fd:21:52:59:ca:3a:d7:9c:87:25:25:c2:cd:3a:6b:
21:20:20:a6:44:a0:a6:82:50:e9:a7:35:1f:cf:30:
ab:82:34:6d:c1:db:92:f2:b8:ad:39:98:12:09:2f:
c8:95:55:74:de:1e:47:7f:60:db:c7:7d:2f:25:b8:
5c:69:2b:4e:0a:29:b1:b2:54:03:06:37:a7:f6:03:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:19:28:49:39:3C:8B:78:98:92:51:05:A3:D1:E9:7D:E5:3D:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84dc64ad-1b9e-4419-95fa-e68a2e53fdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:e4:c0:01:79:21:de:7f:0f:1f:86:ed:2e:1c:04:96:d4:a5:
c8:59:14:34:af:7e:06:a3:dc:39:3d:a8:b1:57:00:d6:a9:44:
b2:19:e0:a3:66:30:d1:c4:3f:d6:e3:65:df:9f:3a:34:90:ea:
6c:c1:a8:7b:37:ca:13:12:71:22:1a:cc:73:f2:b6:f0:1b:9c:
50:42:bd:93:b2:bf:8d:d6:1b:e6:d7:d5:9b:9b:2a:43:dd:89:
8c:eb:19:22:72:82:4a:65:5c:5d:16:da:ae:19:67:5a:77:f9:
1e:6e:86:5c:3a:c7:fc:8f:33:ae:9b:12:e7:d6:f3:1b:0d:8d:
55:eb:3b:ab:45:28:0e:1f:93:58:b4:71:46:d3:28:6b:62:a9:
bd:39:53:b4:ea:ac:74:ab:ba:e8:32:0e:9f:be:3a:a6:0e:6b:
96:f1:c9:1f:51:49:18:12:46:05:e7:d6:58:ad:0c:6e:3b:13:
e2:1c:4a:4c:72:cb:d2:f2:69:ca:ab:51:76:81:9a:eb:bf:e6:
09:0c:cc:0d:a0:5e:01:f8:49:ae:c6:91:a8:34:3a:f3:ae:ae:
ab:1a:5e:6e:15:28:80:8e:95:15:72:95:27:01:84:b4:b0:6b:
8b:29:ee:ab:bb:7e:4d:4e:cd:f9:2f:e9:b6:ab:41:e9:e8:e1:
6c:48:a2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:21:06 2025 by rpki-client