Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b87198-44b8-45dc-85f5-1d868584140d.roa
File: a3b87198-44b8-45dc-85f5-1d868584140d.roa (raw, json)
Hash identifier: Rw2Mkv1ikQ5QSOpkRrd45iRxPx0m7lKeHtIspL1JZg0=
Subject key identifier: FB:6C:3B:80:26:CB:57:B0:6F:79:33:87:BC:AF:32:BC:74:AF:0D:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76F5801B85591C6FAB32009B7CCCD4F35217446E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b87198-44b8-45dc-85f5-1d868584140d.roa
Signing time: Sun 19 Oct 2025 02:50:58 +0000
ROA not before: Sun 19 Oct 2025 02:50:58 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f5:80:1b:85:59:1c:6f:ab:32:00:9b:7c:cc:d4:f3:52:17:44:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:50:58 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=c4a31a04a856695c6b4c5c792043587307e1cd6e1e2570f8053a348be13bc3ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:70:14:34:33:f8:6a:1b:72:eb:1c:b3:72:5f:
9c:35:f4:05:5b:61:df:e5:62:d8:bf:89:58:87:c6:
d2:3d:27:7b:8e:a5:d9:48:33:16:80:64:1b:3f:31:
4f:22:8d:10:68:19:a9:5e:d3:8c:7d:8b:ff:c3:c4:
f4:04:95:d4:77:ed:a5:0f:74:cb:ac:3e:3e:5f:c7:
32:bb:b5:6e:34:fa:4c:86:5e:fe:db:a7:90:c5:b8:
1a:f8:99:d8:8f:f0:3b:bb:2a:5f:88:48:dc:b7:70:
b7:71:64:17:54:3c:d5:f1:e6:4d:73:f1:bc:df:bf:
1e:af:c5:13:f0:85:9c:7d:43:75:42:98:2e:74:93:
5d:af:58:63:be:2d:12:7b:3a:b5:25:47:09:07:0d:
92:d7:69:40:70:c0:d3:85:77:0e:7b:16:7e:3a:ae:
03:38:3d:12:ac:02:8e:0d:70:fc:f2:69:22:11:86:
15:97:8c:7a:1a:d2:b9:6d:11:10:ea:36:41:8a:02:
26:df:9c:fa:92:11:8d:20:22:f7:c9:b8:8f:b7:4f:
a6:db:df:e7:5c:a9:80:97:d8:90:6f:e6:97:ed:99:
01:2b:63:30:94:c7:e3:3e:39:53:ae:87:d3:ae:52:
e7:b5:94:33:89:a9:28:92:54:3c:77:58:07:70:6e:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6C:3B:80:26:CB:57:B0:6F:79:33:87:BC:AF:32:BC:74:AF:0D:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3b87198-44b8-45dc-85f5-1d868584140d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.45.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:bf:b9:86:2c:43:d3:41:a9:67:23:af:6c:f3:4a:4f:88:0d:
fe:00:4f:a7:e3:90:36:0f:ce:70:10:b0:7b:ca:95:74:3d:ec:
f9:84:74:0a:17:4a:52:44:05:3c:33:16:4c:0f:95:3e:46:bc:
db:2d:86:08:7b:f4:a8:d4:cd:33:7e:4b:68:44:53:e5:99:f2:
f4:31:74:e8:de:e1:3b:52:a9:e9:5f:2f:71:73:b6:7e:de:f0:
f8:63:f6:2f:0e:65:99:5d:d4:9d:8c:aa:68:7e:50:19:42:2f:
f5:a4:14:61:46:fc:ac:58:40:f6:9f:4b:54:8b:8f:90:b8:11:
8d:50:a4:05:f9:80:c8:dc:71:ae:af:28:86:56:a3:01:94:7a:
46:5c:92:d8:ee:8f:25:9b:bc:3e:a7:3e:69:de:e7:70:fb:cf:
1e:9d:f7:e9:9d:e4:77:fc:f8:68:89:78:eb:66:f0:20:13:57:
da:9c:3a:1c:88:1d:3a:13:9c:f6:53:a0:ae:80:01:f2:f6:ef:
4e:77:99:79:ae:98:f9:df:ee:06:af:a5:a5:55:3f:c7:07:c4:
3a:ba:73:09:5d:22:61:ad:cf:06:aa:a6:cc:59:63:e2:5a:58:
e9:21:26:e7:6c:27:fd:62:61:a1:19:95:23:ab:db:82:c0:a1:
f3:55:4f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:29 2025 by rpki-client