Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9205ee05-a71e-4bcc-bb5d-97ea7d9fd522.roa
File: 9205ee05-a71e-4bcc-bb5d-97ea7d9fd522.roa (raw, json)
Hash identifier: y6HQd6UUOy92y3QxYyEoxwbVDLAsPJc0Ft1BQ21PMGk=
Subject key identifier: 0E:30:A0:1A:7B:B7:2C:3E:C3:DD:6E:30:EC:AC:73:B7:80:27:2B:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70AA802FC696286D595BFBFAC38D2BB3E7DAA1B1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9205ee05-a71e-4bcc-bb5d-97ea7d9fd522.roa
Signing time: Mon 20 Oct 2025 05:02:18 +0000
ROA not before: Mon 20 Oct 2025 05:02:18 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.134.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:aa:80:2f:c6:96:28:6d:59:5b:fb:fa:c3:8d:2b:b3:e7:da:a1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:02:18 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9c5592a172daa68ce27170c74d2ada527c6bc4bd48a265af68f3b834350c2d5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:ec:4d:ae:e0:3b:9c:ca:b8:3b:fc:d4:72:
87:e4:1b:72:c7:dd:7e:bd:63:c0:2d:f1:87:48:08:
9a:01:b3:e3:b8:e5:ef:83:b9:1b:6d:ee:09:c8:a2:
5e:88:35:dc:6d:b4:ed:3a:be:cf:d1:f2:49:e4:8c:
3c:94:d4:8c:b9:df:bf:8d:d6:63:fa:63:16:6d:00:
bc:4a:63:c0:1a:b7:f1:5f:2b:2f:3b:f8:58:e8:db:
5d:32:00:4b:12:4e:ad:4b:57:76:84:16:e9:b2:f2:
0b:2b:2b:69:85:3f:4e:75:99:7e:81:14:a4:3e:93:
63:1f:00:ec:46:be:61:bd:40:ad:87:73:54:e2:1d:
86:af:b9:41:fe:13:2a:d6:29:3b:00:5b:2b:8d:ab:
aa:cf:22:6d:48:79:be:bd:63:54:c2:a6:53:c3:3b:
af:b5:88:c9:1b:2f:4f:a2:c9:da:b9:30:27:10:53:
20:5f:e9:67:fa:32:e1:78:25:c6:32:c7:99:56:58:
be:52:03:cc:d9:16:11:99:22:4a:c2:fe:f2:e2:6b:
c9:48:65:b2:bf:4e:02:80:fc:96:5d:74:38:52:e6:
a5:3d:2d:2a:de:2d:ff:1d:39:9e:05:0c:e3:8a:df:
e1:c0:e4:c6:2e:78:be:c8:69:fb:52:16:ab:51:69:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:30:A0:1A:7B:B7:2C:3E:C3:DD:6E:30:EC:AC:73:B7:80:27:2B:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9205ee05-a71e-4bcc-bb5d-97ea7d9fd522.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.134.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:f7:23:af:e7:b2:e0:cc:fd:a5:42:a1:cb:73:ad:95:6b:aa:
e8:ed:90:7e:c7:1d:c9:42:77:f9:db:10:1c:d7:d3:51:ee:6a:
4c:ca:23:8c:1a:d1:d6:5f:bd:9a:cb:8e:0f:6b:85:21:e8:ac:
e3:03:53:e7:ea:5e:fe:50:20:87:19:a5:72:58:dd:3d:92:2c:
0e:b8:80:7b:45:c4:98:f8:63:62:4b:c4:0f:d9:92:9a:14:16:
56:b4:13:16:bd:24:f7:1b:9f:1f:ef:a6:91:7a:80:1a:89:d4:
36:e2:00:8b:a5:6f:a6:0d:0b:ad:df:17:72:51:d5:fa:61:b4:
89:c4:97:86:b4:08:c0:2d:e2:1b:6d:b5:62:f3:04:50:2b:26:
16:af:8f:21:99:e4:f2:ed:16:29:11:4d:00:9f:ec:b7:b6:d9:
0e:7b:39:92:eb:00:f7:32:4f:02:a8:53:a5:9f:dc:bc:1c:ce:
56:46:77:9f:5d:75:22:ea:e5:87:e4:9f:61:71:ff:e8:51:07:
da:a5:e2:3b:fe:61:2a:46:56:99:a6:cf:44:73:b1:6e:37:bd:
88:be:90:d2:4c:84:b0:f2:dc:d6:0c:b5:1f:6f:40:f8:0f:0c:
1c:af:d5:2e:2d:57:63:96:05:b0:f2:1e:3c:7d:e6:ae:e6:5a:
df:c6:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:50 2025 by rpki-client