Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9054e8c-b5fe-4e8c-8f51-b5daaa423e78.roa
File: a9054e8c-b5fe-4e8c-8f51-b5daaa423e78.roa (raw, json)
Hash identifier: BMcBWM4e4cR7gutZZHQ5yWACRrh6if3DSHf47x9eGtE=
Subject key identifier: 59:FE:20:61:B1:B2:15:12:03:AC:1A:A2:EA:5C:69:EE:2D:80:88:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C02C423BDE94ED496741405349F01EBF99E7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9054e8c-b5fe-4e8c-8f51-b5daaa423e78.roa
Signing time: Mon 20 Oct 2025 04:22:03 +0000
ROA not before: Mon 20 Oct 2025 04:22:03 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:02:c4:23:bd:e9:4e:d4:96:74:14:05:34:9f:01:eb:f9:9e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:22:03 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f4f1996fafa64019b462062d6f1a0f29361750347fdad2967baaac1a1292f303, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:7e:f5:0a:16:2f:0d:46:1b:34:7b:c6:c5:
71:67:8c:ab:86:b0:5e:8a:5c:45:6a:50:5a:c6:c5:
d1:3e:a6:bd:88:fb:57:24:bb:36:c6:82:64:bc:6f:
48:fe:41:3e:85:92:76:ae:ac:d7:72:1c:49:da:1b:
40:ed:ef:99:43:26:be:9b:53:9c:43:0d:f5:6c:70:
99:a8:6b:0f:55:af:aa:bc:b7:0b:af:6c:7a:07:b6:
15:55:cd:0b:e1:4e:5b:1c:2b:a4:bd:2c:68:46:ed:
1c:d6:5b:59:b5:0c:e6:45:fa:4b:96:d5:14:aa:ca:
de:b7:c0:18:0a:61:08:3b:19:d5:55:17:2d:a4:db:
2f:73:0d:05:d3:ed:7a:e6:42:b6:eb:b3:0b:d8:bf:
25:8d:8b:99:2f:c6:58:00:cc:c4:97:77:a2:47:66:
2f:96:53:66:6d:a6:d6:78:81:70:ec:09:f3:25:0a:
6a:bd:2e:a2:36:10:83:24:bd:7c:09:ef:f2:84:a0:
60:c0:e3:41:22:1c:bf:b1:86:c7:e4:dc:3e:61:ae:
ff:7a:b2:98:c1:79:15:d4:e9:63:a1:89:09:5e:db:
f1:6b:51:44:bb:07:e2:ab:ce:34:a7:68:6d:26:ce:
fb:f0:9b:34:5d:4f:bd:fc:45:73:56:bf:08:e0:ae:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FE:20:61:B1:B2:15:12:03:AC:1A:A2:EA:5C:69:EE:2D:80:88:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9054e8c-b5fe-4e8c-8f51-b5daaa423e78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.145.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1b:ac:a0:f3:ba:e6:cb:93:f0:0c:b0:48:75:73:c3:c5:0a:
69:5a:05:d8:4f:20:67:a9:43:72:2f:2c:af:3d:b2:76:35:b3:
f6:89:93:c8:8b:f6:64:d1:89:1b:71:a5:b3:3e:81:5d:34:12:
8c:ff:ba:c0:90:07:65:1c:7d:09:4e:81:0a:4e:33:a9:04:68:
bd:df:db:3b:01:a7:ac:24:a4:be:bb:dc:e9:de:64:42:a0:d3:
84:a5:42:d0:1b:ce:95:b3:14:20:a8:aa:cc:58:14:29:95:18:
4e:c3:ee:e9:2d:3b:cf:ca:37:43:ef:54:8f:84:33:00:89:0a:
fc:76:84:98:8f:cc:6a:60:5e:2c:66:30:9b:30:59:57:99:45:
c5:43:55:0a:80:33:68:a9:38:13:e6:e5:af:f4:50:a6:f8:c1:
a3:21:28:51:bb:49:68:47:51:96:a1:8d:6d:ab:3d:90:ec:ff:
48:b1:33:5c:fa:35:3b:5b:c6:be:40:6d:01:ee:69:c3:e9:5c:
24:f8:2b:4f:2e:39:df:a7:37:a7:61:1b:88:0d:ff:9c:b6:da:
6c:ce:c8:a9:4c:f6:a7:db:f7:0f:55:e8:f4:e5:61:d9:9c:f2:
b8:fd:16:a8:1e:65:69:d4:0c:27:16:2b:8a:84:94:e5:53:fb:
d2:77:a4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:25:48 2025 by rpki-client