Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b59ad06f-69e4-4fe2-b7d2-fb9d1cae7720.roa
File: b59ad06f-69e4-4fe2-b7d2-fb9d1cae7720.roa (raw, json)
Hash identifier: Lab4psPyxlaJZlWwO8cUgzVjvsYPmk2TtkTj+/I0Erk=
Subject key identifier: 8E:53:CD:CE:1C:B8:5D:E8:E4:ED:C0:FE:88:EC:8A:D5:3E:E0:F1:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63D0E750370B696040F95BD5643BE6EFD268C0DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b59ad06f-69e4-4fe2-b7d2-fb9d1cae7720.roa
Signing time: Mon 20 Oct 2025 00:02:20 +0000
ROA not before: Mon 20 Oct 2025 00:02:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:d0:e7:50:37:0b:69:60:40:f9:5b:d5:64:3b:e6:ef:d2:68:c0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:02:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=39c5c3d7b3993d4d5119b3396c51efe6d9fd54b9bbf8b3dbc6f42ffc4d3648a8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:9a:04:4b:cc:4e:86:69:04:fb:c0:48:01:
ce:8b:26:9d:f4:c6:21:d7:86:6b:a8:31:7f:c7:d4:
04:84:58:9d:61:90:87:80:d0:a1:f8:07:8c:ad:a9:
a4:7c:63:48:c9:d8:ba:45:04:9a:5a:b1:7e:ab:b3:
82:10:23:2b:ab:ea:11:b5:81:e8:25:96:32:8c:ad:
0b:b6:6f:7b:17:6e:ad:20:5c:f8:22:4c:f2:b8:4f:
f7:55:d0:b9:1b:5c:41:76:67:4c:83:9c:52:d0:03:
ad:ce:22:8d:c6:97:d2:74:7b:cd:3d:fb:a5:a4:95:
a0:41:09:0a:32:59:aa:62:9b:3b:fc:cf:d8:24:32:
b8:fb:e1:0b:bb:d1:7d:b4:bc:91:88:d8:02:35:6f:
4c:b3:b2:de:7d:86:6b:db:12:50:26:8c:57:ba:e0:
01:9d:c4:86:18:b4:6a:bc:24:98:d4:5c:74:91:ad:
59:cf:8f:5a:bf:6c:de:c8:2e:2a:0e:23:b8:ef:22:
00:48:b1:a8:6b:f6:56:03:ff:3b:80:31:70:9c:8a:
8f:a0:0e:13:04:61:03:be:b0:0e:ff:ff:af:55:c8:
6e:c5:8b:4e:7a:e8:5e:de:a3:f2:2c:58:e0:fc:b3:
ef:3c:e5:60:e3:25:4d:48:95:df:21:e9:c3:24:61:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:CD:CE:1C:B8:5D:E8:E4:ED:C0:FE:88:EC:8A:D5:3E:E0:F1:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b59ad06f-69e4-4fe2-b7d2-fb9d1cae7720.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.181.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5c:09:1f:d0:42:f9:81:7b:31:bb:9f:aa:bf:db:c6:63:a0:
d2:10:f0:95:f6:d5:25:b8:5b:4f:f2:c5:23:6e:a3:43:9d:e1:
77:fd:25:f8:49:ce:77:17:24:4f:cb:5b:97:8c:18:87:73:7e:
7c:fd:b8:93:4d:5d:f3:bc:1e:9f:84:db:27:bb:c0:6f:c1:d0:
2d:4e:2f:47:9e:a1:c4:b4:a3:8a:55:8e:bf:8c:d1:5b:24:06:
65:a8:d0:76:99:9c:57:55:3b:e2:d2:de:1f:60:e4:5d:a4:84:
b6:d4:69:57:62:86:97:7c:95:a8:e8:fb:ab:5d:25:d9:c5:04:
24:87:0f:8b:63:0a:fd:4b:d3:a0:82:16:30:1e:64:54:36:38:
49:40:03:ed:c5:5e:af:12:af:87:65:96:68:6a:32:8d:18:28:
6f:a6:8b:ba:a8:c6:c7:04:66:a5:17:49:31:2b:b8:c7:ff:81:
4a:b8:a2:25:43:be:2b:7d:01:60:03:bf:58:e3:bc:59:0a:5d:
47:1f:37:39:07:2e:e2:f9:f9:1a:53:69:e0:1d:04:ad:b2:db:
30:66:9f:8a:5d:0a:da:2d:3f:34:cb:4e:f7:10:a7:49:f4:86:
c7:4f:78:6b:65:e3:59:67:f9:be:b7:eb:7e:b4:03:8c:22:a3:
40:39:1a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:32 2025 by rpki-client