Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8785d411-8f05-4f77-b7e8-639d62d5ed01.roa
File: 8785d411-8f05-4f77-b7e8-639d62d5ed01.roa (raw, json)
Hash identifier: 2ZOuh/qdx6VQnc0L1YipPBf/O58bsYLw+bCv67PhsOQ=
Subject key identifier: 89:7A:6D:5F:95:49:CC:9B:40:63:9B:B3:15:4F:C8:BA:88:89:3A:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D99F29750C86BE8D97902C38820E0ADE0DCF107
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8785d411-8f05-4f77-b7e8-639d62d5ed01.roa
Signing time: Mon 20 Oct 2025 05:50:45 +0000
ROA not before: Mon 20 Oct 2025 05:50:45 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:99:f2:97:50:c8:6b:e8:d9:79:02:c3:88:20:e0:ad:e0:dc:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:50:45 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=07a27d037497c58a09c909bfa29a787dfae05cc9e864d4971fd0d9d068f869b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:c8:bd:c9:3d:78:95:23:40:87:2a:61:8a:
bf:74:0f:ca:9e:c2:33:28:c7:61:7d:08:be:73:fb:
f5:ad:55:25:9d:cf:36:09:18:d5:89:4e:2c:53:fa:
2a:ab:18:29:84:23:6f:71:b9:6c:5c:09:91:46:a4:
fe:7b:8a:25:b3:32:a1:6e:bc:a9:b7:18:2d:98:da:
5d:d6:d9:fa:40:92:d3:15:ea:2a:4e:47:33:3e:9d:
e9:c5:e8:76:14:c7:ae:35:92:60:29:d9:38:67:bd:
cb:4f:93:d5:13:aa:fb:e7:cf:4e:21:55:6b:fe:e9:
ed:41:09:43:bc:b3:2b:53:2c:04:d1:1f:7c:c8:51:
d8:e1:92:19:cb:97:76:e7:0e:85:99:be:30:fa:08:
98:b0:d4:4a:15:8d:55:59:07:b0:a1:ff:02:a4:14:
c4:91:45:be:aa:cc:d2:40:cf:10:e3:1f:de:bc:37:
59:ea:67:12:fd:bc:8a:65:54:2b:1f:54:52:70:c1:
ae:a4:c3:c3:9e:df:a4:55:7a:f5:80:cf:52:ef:41:
02:2a:df:51:5a:8c:1d:8b:ff:05:6b:22:9b:c4:d0:
da:9f:fe:2e:c2:43:0a:c0:90:33:57:c7:2d:ed:59:
53:2b:83:d0:0e:c8:10:f0:03:1d:03:9e:35:33:48:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7A:6D:5F:95:49:CC:9B:40:63:9B:B3:15:4F:C8:BA:88:89:3A:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8785d411-8f05-4f77-b7e8-639d62d5ed01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.144.0/21
Signature Algorithm: sha256WithRSAEncryption
05:d2:72:91:cf:01:d5:7a:32:87:a6:d1:61:09:dd:54:5e:9d:
49:12:c1:b1:70:a9:96:41:f9:5b:69:f9:f8:4a:2a:8f:9a:7c:
25:25:ac:3a:d5:b4:4e:d0:e3:29:01:43:a0:87:63:f6:b4:ac:
6e:69:da:da:80:30:87:67:7f:b2:0c:e8:81:d0:a6:b0:8a:4e:
36:26:cb:9e:5b:9b:28:32:ab:0e:ed:4d:d2:92:4d:7d:25:7a:
b8:45:10:97:54:f2:e7:45:c3:28:bb:ed:2d:ba:95:26:b2:78:
aa:1b:bb:99:00:fb:01:80:fa:1b:47:cc:d0:77:ac:7b:31:4c:
eb:16:08:f0:f8:61:08:73:f0:92:91:61:1f:8b:8f:6e:41:74:
ae:41:06:f4:8b:36:95:d8:54:a8:bf:a2:3a:85:d8:dc:60:50:
1e:c7:11:1d:0b:5f:57:bd:9d:9a:fd:d6:a3:e8:57:c5:cd:9a:
ae:dc:53:ff:5f:27:1e:13:fa:df:c2:39:00:cd:6c:64:2e:d4:
34:4c:ab:6e:9a:c3:c9:e7:02:9c:07:58:49:34:81:a7:2a:cc:
e2:0f:5e:ca:06:54:88:de:61:c5:c1:0c:bd:aa:a2:57:ab:ee:
77:f4:6d:5e:71:53:64:78:94:f1:6f:9b:22:76:8c:ab:62:6b:
0b:40:5b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:18 2025 by rpki-client