Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85a01167-9670-4901-8691-1f55fee4a544.roa
File: 85a01167-9670-4901-8691-1f55fee4a544.roa (raw, json)
Hash identifier: p1Z7nGzbNBcbkjbBDJP+Y7gRfHsTv8gBInfiCB/6u/8=
Subject key identifier: A5:0A:4E:8B:F7:69:6F:71:A2:8F:4E:FE:B2:E5:6A:CC:65:6D:E6:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15DBFB89A0FA0C24538C585B9A68FA4304F7F2F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85a01167-9670-4901-8691-1f55fee4a544.roa
Signing time: Mon 20 Oct 2025 02:02:05 +0000
ROA not before: Mon 20 Oct 2025 02:02:05 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:db:fb:89:a0:fa:0c:24:53:8c:58:5b:9a:68:fa:43:04:f7:f2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:02:05 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=579f45644f7b2457e186bf9cf9d51f5bda7f85b3aea4717aa4f3ba051ac95afe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a1:59:a6:52:33:32:80:7a:1c:3f:f0:90:44:
4b:40:94:df:06:fa:00:fb:61:23:e2:96:a9:96:a0:
39:d5:d8:25:20:8a:75:11:eb:9e:c0:17:54:13:42:
34:9c:df:00:cc:0a:10:b5:84:28:29:9f:2a:c0:5e:
b7:88:40:03:05:ea:5e:92:28:f0:bb:06:a6:f7:4f:
e1:40:84:36:1f:66:1f:87:37:fa:85:4f:09:d0:ee:
d5:8a:73:db:30:27:c6:0e:3d:94:31:42:1a:45:39:
26:bb:12:a2:a0:e3:89:6b:61:a7:e8:9a:ae:e7:4f:
37:04:48:1f:81:66:df:c0:32:10:99:0e:3e:d1:07:
58:4b:e3:f1:87:a1:a1:ca:70:cb:7b:a6:52:76:e8:
dd:eb:20:76:97:04:c9:29:40:8d:23:9e:e8:35:6f:
5c:17:60:f3:a7:bc:ec:ad:6f:7a:85:0d:83:4e:fa:
9a:3f:08:e8:73:c2:b4:04:1d:49:62:e1:69:cd:4a:
c8:2d:d4:1e:2f:e4:88:8d:ed:fa:b1:20:75:63:be:
23:49:b5:49:cf:72:64:1f:13:eb:12:39:b0:92:5f:
72:f4:19:55:a3:1d:a4:b1:07:ea:68:cb:1c:d4:8b:
60:c7:db:6b:86:72:38:86:40:a9:aa:e8:e5:a0:17:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0A:4E:8B:F7:69:6F:71:A2:8F:4E:FE:B2:E5:6A:CC:65:6D:E6:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85a01167-9670-4901-8691-1f55fee4a544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.120.0/22
Signature Algorithm: sha256WithRSAEncryption
56:fa:9a:51:da:de:45:28:4b:39:69:9f:56:09:8f:ff:fa:86:
7b:a1:67:fd:ac:51:77:fc:bd:68:cd:9b:66:cf:29:07:bb:4a:
ef:79:15:1a:36:50:3b:72:24:5d:f7:4a:cb:cf:ee:1d:47:b9:
a2:6a:61:88:34:ac:0a:19:b3:a2:e4:c3:f2:b9:27:a5:63:e3:
06:3c:f6:60:7d:48:53:ed:2a:1a:34:be:f0:47:17:7a:df:67:
d4:39:e5:5c:f6:a3:37:8a:63:03:d0:39:bc:93:17:1f:f1:7c:
07:1b:9b:b6:63:42:f3:52:db:a4:fc:13:f8:8a:0f:db:d9:23:
f6:ad:ef:a0:d4:7d:0f:cd:7c:6d:67:69:2a:bc:d9:14:52:bd:
b6:55:23:84:e2:4b:11:51:50:dc:06:d5:13:ac:47:b6:fd:47:
c7:6e:7c:64:ce:b0:59:92:d2:5b:92:3f:a1:13:65:de:85:19:
dd:dd:36:e4:23:94:9e:b4:6a:0d:1d:f6:44:82:25:10:65:51:
52:90:99:e2:61:3c:c1:43:6c:49:a4:b3:65:b8:52:eb:ba:1d:
78:40:f1:9c:48:dc:b7:df:09:93:02:1b:cf:8b:09:94:36:82:
4c:4d:0b:cb:29:17:ae:19:16:6a:2f:22:4c:2f:ba:a4:bf:2c:
1a:ea:a8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:28:33 2025 by rpki-client