Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2b313ef-17a1-40ea-ace2-fdae14fd16fa.roa
File: b2b313ef-17a1-40ea-ace2-fdae14fd16fa.roa (raw, json)
Hash identifier: bWRpFbRFbyzXHYBNIMN4IdCUezS13UgeKy7zLLr3WW0=
Subject key identifier: D6:72:ED:E4:48:25:6C:C3:72:0B:F0:C4:C4:24:87:8E:DE:35:A0:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 761EF02C3599169FFCBFFF4A7B231143780FE5DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2b313ef-17a1-40ea-ace2-fdae14fd16fa.roa
Signing time: Mon 20 Oct 2025 02:52:24 +0000
ROA not before: Mon 20 Oct 2025 02:52:24 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:1e:f0:2c:35:99:16:9f:fc:bf:ff:4a:7b:23:11:43:78:0f:e5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:52:24 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=eadc2467e9603555ec60cdd693cf73b64f739553548e58babd34e7e02037e9c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:fe:14:22:92:1f:01:57:6f:c9:4a:c8:b3:
7e:4a:d1:0d:8c:aa:9c:20:bf:c9:f2:0b:a2:da:5d:
1f:6a:ea:94:92:8d:a1:6c:d4:20:9a:09:01:39:42:
78:c2:4a:ac:4b:bc:19:32:9b:55:6a:60:1e:77:2e:
43:9e:ac:85:cd:1d:e0:6e:f5:40:c2:e8:e0:c4:6c:
60:ac:c0:81:d4:47:b7:a9:d5:5a:c7:65:f1:d1:cc:
94:e1:0a:c7:dc:6f:fc:1d:3a:a8:cb:bc:f9:f0:18:
5a:49:af:29:a2:47:b0:1b:4f:4a:ad:ee:94:9f:d3:
3f:41:95:e4:fe:63:fe:65:c4:45:4b:bc:3d:9d:47:
8c:91:b7:98:c3:19:24:db:6a:26:aa:cc:db:eb:ed:
24:9c:de:a9:89:e8:c3:d6:cd:c6:67:04:52:37:5b:
21:ac:90:fe:e2:c1:4c:06:8e:f7:9f:d0:e2:cc:f2:
52:e6:9f:ac:b5:b1:4e:f8:48:77:53:2a:e3:c6:f0:
07:86:91:40:0a:f4:84:c6:06:ca:cc:b6:df:e0:d4:
18:fb:c3:c9:7f:e7:ff:d6:16:54:80:6a:dd:69:8e:
0b:3e:36:f1:ea:02:66:d9:b9:f7:9d:14:aa:c4:b6:
88:b6:10:92:4e:6f:17:cc:6e:e7:88:a1:ae:d3:9d:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:72:ED:E4:48:25:6C:C3:72:0B:F0:C4:C4:24:87:8E:DE:35:A0:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2b313ef-17a1-40ea-ace2-fdae14fd16fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.68.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:a1:29:35:88:97:f6:a7:df:f6:d5:f9:27:f9:ff:62:c7:2c:
07:c6:33:37:cb:73:0b:99:fd:6b:f4:97:c0:13:23:4f:4e:9e:
47:ce:21:b5:d6:d4:5a:1f:12:a8:7e:2c:6c:3e:d8:94:7a:d8:
bc:3f:cc:58:34:4b:ef:e6:ae:a6:d0:8a:ab:49:d7:8d:1d:06:
dd:75:ed:16:6d:1e:2f:37:74:86:7d:2a:44:a0:69:0a:13:63:
e1:11:24:01:72:6b:45:00:96:c5:e4:57:af:27:f6:7e:70:7b:
fb:d1:2a:4a:67:e2:47:4b:2d:5c:fc:99:36:1b:29:47:d0:3b:
20:c0:d5:d3:cb:c8:90:c8:8e:b1:ad:09:86:76:58:f1:95:6a:
a5:0a:25:47:70:40:7b:99:b5:7a:59:c1:87:df:94:cd:df:51:
2d:15:ab:70:ea:e2:48:d1:10:3e:c4:44:1c:63:c3:36:c8:c7:
27:19:9a:6b:76:4e:be:1e:d9:9f:3a:2a:df:d7:28:eb:07:7b:
52:d7:96:f7:b1:ac:cc:10:1c:a6:dd:fa:d2:2b:c7:ff:1c:01:
36:e1:82:f4:b0:5c:37:96:c0:e7:f4:b7:6c:c2:fe:86:95:f0:
31:cf:b0:c2:57:cf:a5:c8:34:de:b1:0f:79:68:fc:7f:00:b1:
e0:7d:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:09 2025 by rpki-client