Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92345fca-915b-42f6-b567-24e3f465a3ba.roa
File: 92345fca-915b-42f6-b567-24e3f465a3ba.roa (raw, json)
Hash identifier: nScKiiLCLwErPcFRprEMvE3nnGHwAtylPQ+XzkuQ4JQ=
Subject key identifier: 11:B9:61:1B:2B:35:BF:C3:6E:44:00:E8:A5:33:10:E8:A0:94:C3:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2913EC64AD4A5EAFAB7FF20757C66BB790C02AB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92345fca-915b-42f6-b567-24e3f465a3ba.roa
Signing time: Mon 20 Oct 2025 04:01:44 +0000
ROA not before: Mon 20 Oct 2025 04:01:44 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:13:ec:64:ad:4a:5e:af:ab:7f:f2:07:57:c6:6b:b7:90:c0:2a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c4d82a624cba41adc506cfd7aabc92fb039c1367fc32ace9c0d75ae80c5c73d2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:c9:60:6e:51:f0:f8:9c:86:d5:49:31:9f:
e2:1a:e8:f4:39:d6:eb:79:d5:76:70:5c:f9:7e:82:
6f:48:74:a0:cc:ab:46:d5:11:50:9d:ad:fa:74:c8:
82:5d:cb:24:14:37:bf:b5:c8:b8:5b:92:b9:65:1c:
66:40:5e:82:4d:7a:2d:90:1f:80:0d:57:8d:3b:4d:
92:aa:11:0c:c4:2a:10:16:43:5d:85:b2:4d:9c:2e:
24:ad:95:8f:a3:9e:6e:9a:46:cb:a0:8b:40:1f:40:
31:e4:a2:a9:85:1d:c9:2d:a1:fb:ba:b8:95:2b:4c:
f0:5c:1f:c7:1f:f1:7f:3d:9c:c0:3c:c3:cc:31:0f:
b1:c3:c5:aa:6b:21:c0:c0:3a:1b:c2:61:45:89:19:
88:fb:fe:b0:b9:b3:5f:42:ae:ee:fd:ba:40:6c:f9:
8c:8e:0b:43:fb:47:07:32:e5:93:dd:fe:eb:22:47:
c2:a8:af:4c:1f:3c:6c:3d:3f:ab:8d:c7:fe:d7:09:
62:2a:33:cb:f5:64:eb:06:1a:2a:27:27:c7:28:3a:
1b:94:8a:3d:88:3e:e8:c9:0b:ad:25:a8:e8:b1:50:
0f:fa:80:ca:25:e0:4a:1d:d9:a4:45:fc:22:dc:2d:
47:3e:2b:48:bc:c3:e1:d8:7f:82:0a:e0:9d:1c:9a:
c1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:61:1B:2B:35:BF:C3:6E:44:00:E8:A5:33:10:E8:A0:94:C3:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92345fca-915b-42f6-b567-24e3f465a3ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f5:54:fa:70:a6:4e:11:8f:0a:bc:f5:50:63:3a:b7:0d:0e:
de:02:4c:1f:c8:83:78:12:80:2a:e8:38:63:1f:d6:59:f8:16:
d1:9c:5b:d7:f1:4b:b9:3e:81:41:bb:92:36:26:e9:a9:56:ff:
0d:13:da:51:ad:bd:f4:23:63:ec:4e:ec:69:4d:23:5e:9b:92:
6d:a2:36:79:43:c0:33:44:39:f1:c5:ea:c8:a4:e6:7b:50:04:
4f:18:a5:79:01:33:5e:bc:1b:b6:31:22:8d:2a:d1:5a:65:46:
66:98:db:84:bf:eb:b2:9c:c8:f0:0e:c0:dd:42:b3:a9:79:1c:
34:c6:cb:3f:1d:b4:4a:87:d8:e0:79:89:c6:11:f7:20:6c:60:
b8:2d:b1:97:49:fe:ea:6a:51:58:5f:78:4a:c5:71:c7:b2:f3:
cf:fa:ad:fb:71:5b:4e:33:2b:a9:69:e1:03:2e:a2:52:c5:dc:
da:66:7d:02:08:36:1d:a9:77:58:96:c0:02:ef:bc:d0:53:60:
84:05:80:dc:db:36:9c:af:15:b9:84:18:31:fe:b4:4e:a3:cf:
f2:ab:5e:25:cb:1c:7b:aa:68:0d:d6:f7:62:75:e9:44:a9:d1:
65:4c:f3:bd:18:73:20:59:56:a4:a4:b8:ef:7f:fd:c6:32:7a:
9c:04:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:35 2025 by rpki-client