Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa
File: 8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa (raw, json)
Hash identifier: 14V0PHuSOzejkjpN9l0cZCuMcDiLBse/T8iTvyByLZk=
Subject key identifier: CB:98:96:12:0E:A9:08:55:04:BA:5A:3F:89:5B:78:8D:EE:4C:B6:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05E926438D648F2E723113925102DF602958B77B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa
Signing time: Fri 17 Oct 2025 00:22:55 +0000
ROA not before: Fri 17 Oct 2025 00:22:55 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 107.21.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:e9:26:43:8d:64:8f:2e:72:31:13:92:51:02:df:60:29:58:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:22:55 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=80b09ea787aeab7893f53ea06ead36459e7c93d8a1ddbb3a0b234103421f3aee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:14:62:db:48:20:72:39:c0:71:d1:aa:3c:
04:21:c1:e3:7b:e8:79:57:bb:30:ed:c0:8c:9d:fc:
3e:6c:21:cf:8a:c5:fd:96:3d:0d:bc:62:70:22:38:
5a:09:32:6b:e7:56:77:a2:e5:c8:e1:90:f5:bf:71:
73:d8:25:65:7f:af:34:2d:fb:04:27:df:75:b1:67:
90:94:71:1f:f2:57:5f:28:6e:5b:6f:15:df:66:89:
61:bb:14:69:69:c7:12:25:05:cf:15:0e:4e:bb:49:
a8:b3:5b:bc:bd:fb:77:ee:dd:d0:ec:b0:23:2c:40:
0f:9f:f5:90:f3:69:60:75:67:33:4d:aa:15:54:fe:
e0:56:1e:32:1b:b0:34:e2:6a:53:de:b6:cb:b4:71:
08:4e:0f:6f:41:c1:2b:36:19:78:a3:c8:c5:81:d7:
f6:7e:82:d7:db:03:08:a1:7c:51:ea:0a:9b:49:03:
0f:b4:d7:23:fa:0a:b3:e6:21:6d:7a:97:c5:23:d6:
17:ea:71:88:6e:d2:87:85:cd:0d:0b:93:f5:00:b0:
f1:2d:f0:ae:6b:f5:c3:21:af:80:51:26:9b:5e:fb:
68:3c:d6:9e:82:1d:48:15:63:0a:8f:21:f3:5a:78:
db:75:1d:25:7e:7a:77:0e:bb:01:ed:16:9d:52:3a:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:96:12:0E:A9:08:55:04:BA:5A:3F:89:5B:78:8D:EE:4C:B6:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8dd3c9f1-214b-450f-91c9-754a0ab85a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.21.192.0/21
Signature Algorithm: sha256WithRSAEncryption
c9:77:01:8f:41:9c:53:c6:30:5f:0d:df:7a:f1:88:ee:b7:2f:
88:1a:ad:b5:18:68:4f:64:c1:51:16:31:df:06:e6:2d:ca:74:
f3:6e:bd:74:44:ca:54:e4:67:2d:78:9d:61:2f:03:7a:1c:6b:
76:d4:1c:6a:cb:35:2f:77:d0:91:9b:10:e1:15:c3:2d:fe:14:
c9:4d:44:34:8e:8a:5e:28:50:f3:2e:48:ff:ab:ef:07:ea:3a:
b9:8e:2b:37:84:eb:07:42:11:8a:51:ea:15:01:79:45:cd:8f:
de:5b:1a:26:2a:38:b8:7c:c9:47:9a:50:55:bd:46:09:66:4f:
50:0a:f6:4d:d4:5b:9e:5c:c7:84:a1:13:3a:0a:33:10:04:c4:
cf:a9:ea:9f:a4:86:00:75:cc:84:2b:60:a2:3f:bc:60:3b:50:
8c:72:88:da:b0:99:14:e5:ba:4b:83:96:01:8f:ac:d6:9c:61:
85:41:f3:04:56:cb:f1:93:8b:ed:be:fb:65:a6:4e:e8:0c:b8:
69:b3:33:32:3d:fe:9c:c6:e4:e5:8b:f7:db:44:d7:0c:07:45:
91:7e:91:00:83:96:16:0c:4d:9a:c0:f2:66:a3:59:75:f9:19:
93:72:fc:52:42:3e:d2:b1:e6:ee:1f:95:df:15:ce:5e:c5:8f:
62:72:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:01:35 2025 by rpki-client