Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b57c35ab-01d0-47e9-a318-ad6cc602f2a3.roa
File: b57c35ab-01d0-47e9-a318-ad6cc602f2a3.roa (raw, json)
Hash identifier: mqY937Pb3ennof6OM5KAhy6sjOzaHPioksyOt1yh+0g=
Subject key identifier: 84:E0:9C:96:DC:FA:26:B5:73:99:C4:47:B5:67:7E:E6:3C:EB:A5:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18D73B10925C5EEC2ED1C64E923B5FCD87C9BBC2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b57c35ab-01d0-47e9-a318-ad6cc602f2a3.roa
Signing time: Mon 20 Oct 2025 02:22:13 +0000
ROA not before: Mon 20 Oct 2025 02:22:13 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:d7:3b:10:92:5c:5e:ec:2e:d1:c6:4e:92:3b:5f:cd:87:c9:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:22:13 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8f7eae6f51828ebd67223c851d9845447e46457c3a0d58d1e4fc5a224452aae6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d0:16:32:dd:1a:0d:55:87:8d:c9:2c:14:50:
fb:7c:33:42:12:54:f5:4a:8b:96:24:b8:3e:43:5c:
35:01:44:f4:28:e4:a5:19:66:23:2d:a7:83:30:7b:
af:e7:3d:47:4b:93:fe:8a:60:6a:98:ed:27:22:9a:
90:c1:49:e8:b5:36:1d:f0:c2:d3:5f:87:63:fd:63:
1d:ca:81:01:2d:ba:06:e9:f4:51:64:b0:11:b9:7c:
f0:85:6e:7b:cb:91:42:c6:bd:19:a1:e5:71:55:4a:
2b:63:5d:ff:2b:c2:5e:83:a0:2b:02:cf:9f:14:77:
7d:bf:0a:ee:16:f7:54:08:16:e9:eb:e3:58:50:6e:
9b:a4:dd:77:90:2f:f5:d1:2f:95:dc:0d:7c:13:ac:
db:77:42:04:2d:fa:f1:09:b2:68:27:25:aa:9b:f8:
72:3a:05:46:58:8c:c0:02:1c:47:b5:a1:4a:7d:34:
1d:1c:66:d2:1e:56:84:37:f6:63:cf:26:c1:fd:ad:
75:3f:0b:cf:98:ca:7e:88:6a:c2:a5:fe:31:16:4f:
45:af:57:0b:77:de:a4:7a:b2:8e:65:00:37:5e:e0:
0b:d4:f4:ea:c5:3c:fe:65:27:cc:d8:e0:b7:80:30:
a0:1b:17:02:b5:9d:19:d0:6d:c9:83:33:9b:61:3b:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E0:9C:96:DC:FA:26:B5:73:99:C4:47:B5:67:7E:E6:3C:EB:A5:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b57c35ab-01d0-47e9-a318-ad6cc602f2a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.60.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ad:78:33:86:bf:bb:30:ea:2f:fc:bb:f8:20:98:ea:c8:89:
e3:03:8f:05:66:2e:b9:de:8f:cb:e7:87:99:31:a8:52:37:35:
0a:a5:cd:d6:bf:58:83:49:95:d9:98:59:7f:05:81:6b:89:29:
cf:32:f4:18:38:0a:3d:88:56:c0:96:7e:73:35:f9:07:63:96:
c8:25:aa:e8:98:36:cd:38:a4:f6:ab:cc:b4:6b:3e:9b:a7:71:
f7:66:f7:a5:9e:ee:49:c5:ac:ed:17:12:d7:22:4c:84:ad:98:
54:e4:14:da:f2:08:70:00:e4:80:ed:6a:9e:9d:fd:c1:ff:01:
f0:8c:82:8a:37:8f:62:5b:53:a0:68:79:bc:58:71:68:05:a7:
13:fa:08:4f:a2:ad:a7:bc:c3:d0:92:fd:23:53:b8:35:8d:56:
fb:91:2c:2b:a4:95:b9:80:f4:fa:1a:68:e3:91:f0:89:1c:86:
84:24:46:c1:88:14:cb:c4:42:70:5f:af:ef:a0:26:44:d3:43:
90:a0:e8:3a:2a:35:8a:62:12:ff:b2:65:b2:32:72:ee:05:b2:
ba:19:b3:af:e9:ec:7b:8e:c0:76:9a:a7:68:5c:b4:ca:d8:6f:
18:dc:72:85:33:b5:2d:d4:6e:17:c0:fd:07:6f:11:41:63:2b:
14:f0:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:29:45 2025 by rpki-client