Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab05323c-b25d-45fb-92a0-264a0f4df0a3.roa
File: ab05323c-b25d-45fb-92a0-264a0f4df0a3.roa (raw, json)
Hash identifier: W2bQwW+BvY7oOQRnVvT0tUyv+P+xkib/BKWSaTV/eEE=
Subject key identifier: 23:44:DB:6D:F4:0B:D7:D4:0C:C4:88:88:46:54:19:85:89:82:D6:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22CB78DBE7CDEE27439700DEF5CF151A1D39D5AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab05323c-b25d-45fb-92a0-264a0f4df0a3.roa
Signing time: Mon 20 Oct 2025 04:02:28 +0000
ROA not before: Mon 20 Oct 2025 04:02:28 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cb:78:db:e7:cd:ee:27:43:97:00:de:f5:cf:15:1a:1d:39:d5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:02:28 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=6327c0a5455ee83b9fa3f6c871eac063834a3d7f631a7407cac9e4720cb91383, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f4:55:a4:10:76:dc:62:97:d4:e7:05:22:dd:
22:d5:16:c0:22:6a:e3:b4:97:d1:9c:6c:4c:c2:a0:
a9:e1:78:56:54:81:ec:d2:6b:55:7b:4d:bc:b0:d5:
0d:59:69:2a:18:41:38:90:b1:d0:26:57:83:55:1c:
51:1c:ac:ca:33:83:fa:2e:ef:ae:87:27:bc:e5:b5:
95:4b:51:b3:25:d8:59:5a:91:61:df:99:7a:3b:8c:
aa:74:ab:10:57:65:de:5d:42:06:82:51:b5:52:6f:
f5:fd:da:91:ca:a5:e2:c9:47:32:b4:fb:1b:08:12:
fb:30:d6:4a:a3:fc:80:14:ab:56:e9:73:6f:0c:74:
1c:26:99:a2:8b:0c:e6:14:b3:98:4a:b9:1a:40:c0:
8f:62:f2:4a:93:d5:16:02:bb:3d:1e:3b:fa:0d:3d:
f8:18:30:f9:d3:82:c4:f4:60:7f:06:a8:1c:3e:c0:
f5:26:f6:99:4f:73:94:13:f6:eb:42:c7:7e:59:e8:
03:90:b6:46:40:32:e6:35:01:e7:c2:f4:8c:35:91:
51:66:2a:68:36:31:5a:98:51:e0:b8:c2:ea:f0:87:
67:0b:c1:2a:56:63:f1:8a:a9:ed:3d:d6:cb:e3:e9:
3e:fc:d8:d9:c5:19:5d:10:ca:e9:07:04:70:66:59:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:44:DB:6D:F4:0B:D7:D4:0C:C4:88:88:46:54:19:85:89:82:D6:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab05323c-b25d-45fb-92a0-264a0f4df0a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.54.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:7f:ee:36:aa:7b:b5:68:34:53:dc:ae:58:79:eb:38:01:47:
a7:ce:99:77:d5:ad:4f:bb:cd:16:16:ba:dd:53:60:2a:dc:47:
3c:f7:38:62:13:48:4a:fe:88:83:b6:27:21:ac:fa:da:9b:4e:
e0:cf:38:02:bb:b1:33:4b:a7:04:fc:b3:80:7f:3d:6b:fb:92:
0f:d4:7a:57:a9:ce:11:4f:e1:b8:ee:c8:94:85:a2:92:76:cd:
a7:83:51:30:9e:b4:92:9e:dc:0b:30:50:9a:4d:1a:6b:82:25:
97:af:58:e3:3f:8b:cc:1a:b3:e6:61:27:9d:28:28:8f:a5:a8:
0d:75:45:e5:93:3e:0c:90:af:63:a7:f0:ec:40:dc:c3:45:14:
f1:f0:2e:39:f1:00:b9:3b:7a:9c:84:e0:c3:14:4b:07:7b:7a:
4c:ab:6e:03:e2:b5:7c:bd:b4:d9:d8:c4:b0:f4:c3:f2:19:e0:
e4:d7:34:ac:d7:17:69:ce:79:ba:48:0e:dd:c0:82:89:33:98:
9b:e2:58:03:0f:d5:32:81:7f:e8:fd:66:dc:86:3e:d0:9c:3c:
d8:0a:4e:c8:18:30:61:4d:53:e6:1d:36:cd:36:aa:7e:82:28:
0b:03:cc:1c:2b:4b:4d:0c:a3:59:c6:f7:f6:a5:eb:15:cd:b5:
fd:f5:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:26 2025 by rpki-client