Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af901016-e87d-4463-b81b-d39973a54c98.roa
File: af901016-e87d-4463-b81b-d39973a54c98.roa (raw, json)
Hash identifier: uVDbGxky0SUmT1kwJ0Gu2QQ3FNiztOxeGCVTspYnq9M=
Subject key identifier: 42:47:1E:6F:4B:4C:F9:81:40:07:F8:CC:3E:C0:07:C0:A1:01:93:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58CFC6BB534D0E3C0F0E5444DB62B105D5E94966
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af901016-e87d-4463-b81b-d39973a54c98.roa
Signing time: Mon 20 Oct 2025 01:12:41 +0000
ROA not before: Mon 20 Oct 2025 01:12:41 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cf:c6:bb:53:4d:0e:3c:0f:0e:54:44:db:62:b1:05:d5:e9:49:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:12:41 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=73cb7614d55c05b4cb66afa477aac473170121b290538b05377ad0c72fa02e8a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:66:69:5b:0c:5b:79:b7:24:89:73:be:95:2a:
74:49:17:b4:68:d7:c8:de:44:80:b8:a7:2e:0d:1a:
5f:5b:af:88:c2:e7:94:7c:2e:fd:86:d0:b8:b1:71:
7b:ee:6d:19:e3:0d:b8:14:89:f0:5b:a7:fa:6e:90:
89:10:5d:5d:9e:b1:60:ae:f9:87:94:19:73:4a:59:
f7:d4:7a:0b:de:d0:36:34:00:be:44:09:36:d3:81:
ff:99:58:b8:c9:7f:4f:f7:cb:0e:df:d2:f3:bf:0e:
b6:f6:c4:3a:ed:55:ab:05:73:82:b1:0a:1d:a9:72:
1c:bb:ab:e0:91:c1:93:09:68:c1:92:5c:57:31:6f:
37:4f:bf:78:5c:fd:5a:cc:a1:90:0e:22:a8:ad:f6:
35:8b:d5:ce:2a:31:6a:88:ab:8a:db:75:5e:bc:79:
87:03:26:36:e7:05:58:ae:a0:2b:b0:75:2d:40:30:
b6:72:60:49:ee:5d:fa:80:64:a2:70:a5:97:59:c2:
07:1d:1f:ba:01:bb:a1:3c:5a:ec:8e:d5:55:fa:c1:
17:8a:66:61:9e:82:7e:aa:48:c7:6f:7f:be:1f:44:
fc:22:c4:88:95:3a:84:10:9f:a3:d7:24:46:47:d2:
a2:4b:79:3b:95:99:47:85:6f:1b:07:27:d6:ac:3b:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:47:1E:6F:4B:4C:F9:81:40:07:F8:CC:3E:C0:07:C0:A1:01:93:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af901016-e87d-4463-b81b-d39973a54c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.151.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1d:d7:94:c2:56:85:dc:8d:6e:69:58:05:f2:4b:6d:7f:fe:
9d:e9:8c:72:cd:74:bd:13:d6:53:5b:c5:b0:d6:6c:ca:bd:2d:
8f:06:0d:1f:a6:ed:c4:04:51:08:f3:f5:68:e1:03:88:17:3e:
86:9c:c7:b8:c8:58:7d:8b:34:6b:a4:3d:4c:48:a7:24:e4:57:
7d:e2:b6:5e:d2:0f:39:1a:d5:f9:07:ce:5a:d0:fb:42:ef:82:
73:52:16:8a:13:14:c7:ef:9d:87:79:08:15:28:8c:f7:25:fd:
6a:c8:c0:3d:1a:65:38:07:75:1d:1f:5c:21:89:54:76:d2:c0:
d2:32:56:1e:41:67:43:3e:88:5c:cc:71:b5:18:16:2b:fc:f8:
a3:d7:fd:ce:45:ed:cd:d4:c5:24:2a:68:09:b8:4b:99:5d:08:
4e:2a:e3:ca:c0:52:04:20:09:e6:a2:a6:8a:81:ce:33:aa:1e:
9a:22:ea:3d:4d:2f:ef:7d:ae:fc:12:01:13:50:73:d3:63:59:
a3:07:c8:66:55:50:60:8e:dd:70:8e:71:c7:29:9f:a6:1e:16:
03:18:52:b7:0f:ad:1b:08:68:93:2b:a3:6c:17:e1:95:6a:90:
77:c9:98:29:36:d5:7a:8d:8c:03:d9:bf:42:e0:27:27:7c:72:
b9:f7:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:17 2025 by rpki-client