Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b387da4-b950-4402-84a3-b206cc240e09.roa
File: 8b387da4-b950-4402-84a3-b206cc240e09.roa (raw, json)
Hash identifier: Yh6T+WqF5IMw8Mb6HkBWHEu2mFs8zlnTBptkM6LqWqo=
Subject key identifier: 96:0F:6F:47:C3:85:F2:6A:87:D4:5C:38:D7:22:5D:10:57:2A:88:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4296537901C8D2E01B3843FAE7161F2AAABBC912
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b387da4-b950-4402-84a3-b206cc240e09.roa
Signing time: Mon 20 Oct 2025 06:02:17 +0000
ROA not before: Mon 20 Oct 2025 06:02:17 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:96:53:79:01:c8:d2:e0:1b:38:43:fa:e7:16:1f:2a:aa:bb:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:02:17 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c71ad73c4610099a8cbf301738c374b1ba573477e383f6db752efe97b1fb4b63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:d9:81:13:be:58:4b:c5:71:39:ef:dc:0a:
b2:3c:0b:aa:cb:30:3e:05:15:ce:81:56:60:bc:1e:
bb:a6:88:4d:98:dc:1f:f1:6c:fa:bf:27:ef:8e:da:
a1:99:46:0c:e1:6d:6d:07:d2:ae:36:fd:bf:f5:98:
fc:99:38:e2:69:92:af:d0:e7:fa:a0:63:d2:7f:61:
66:e8:e0:71:6f:43:73:74:c8:d5:c3:c8:ed:a4:bb:
04:80:86:96:c2:1e:1a:6a:30:96:8d:47:d4:f0:1b:
2d:12:40:ee:a4:c3:dd:d8:ba:89:32:4b:2b:61:ba:
87:21:0c:8f:de:f8:7f:8b:3e:0d:21:47:84:a6:36:
8d:5a:8b:78:24:bc:2b:e4:c1:f8:b0:6b:23:a9:75:
b7:66:5f:85:6c:6d:a6:5c:52:61:5e:0e:bf:a1:c8:
22:ba:4b:a1:df:34:73:d6:88:a2:a6:16:2e:23:9d:
eb:be:8d:17:0d:e7:fb:e8:3b:f0:ca:73:7e:33:45:
0a:a6:cf:2f:d8:8d:3d:c7:e5:21:aa:ed:59:17:b0:
04:be:74:69:fc:bb:00:4b:83:93:40:b6:1e:3c:67:
21:45:e4:52:72:86:aa:ed:76:4e:e2:0c:ce:67:43:
5a:70:01:27:07:f6:09:3a:9a:02:04:eb:62:7c:77:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:6F:47:C3:85:F2:6A:87:D4:5C:38:D7:22:5D:10:57:2A:88:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8b387da4-b950-4402-84a3-b206cc240e09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f1:64:27:03:0b:8e:14:08:86:55:fd:87:97:9c:96:74:64:
1d:b4:0c:eb:99:06:2c:fd:97:31:cc:a9:26:99:d1:35:ae:e3:
07:85:53:ed:7a:7d:08:e8:08:c9:21:2e:a9:c1:5a:08:dd:28:
c6:70:2a:76:6c:3e:25:de:30:31:00:1b:b3:ed:80:eb:95:8a:
52:6b:cd:51:2f:7f:27:61:2a:7e:23:db:40:c3:77:12:b3:f9:
ff:e5:37:c1:a1:eb:9d:89:d8:d7:e6:30:2c:34:06:26:88:34:
60:47:59:6d:ab:d9:51:36:fe:c6:69:c6:83:a0:19:7f:99:6e:
ec:66:5e:c0:f9:50:6f:31:ae:dc:1d:77:f4:74:e9:eb:5d:41:
fb:a7:78:d7:cb:8c:e8:b8:29:a6:80:28:d5:b4:8e:53:63:60:
77:fd:ed:ed:c7:64:09:6c:b5:a6:9b:aa:a5:63:fd:7e:e6:df:
af:0c:78:55:be:d0:43:3c:63:9c:44:b1:86:67:ba:08:2c:a5:
ba:c3:69:db:69:1c:42:fc:8a:b4:d0:a3:99:f2:76:1c:21:b7:
98:74:cf:89:4f:e9:ab:8d:a2:f9:38:1e:08:ee:c0:70:d0:e4:
d9:b5:18:4b:ea:8f:07:ce:9a:f4:83:33:95:1e:aa:59:22:3e:
dc:f0:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:24 2025 by rpki-client