Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b84c6a0d-83ab-4063-817a-3c0d0b1e6245.roa
File: b84c6a0d-83ab-4063-817a-3c0d0b1e6245.roa (raw, json)
Hash identifier: h5EAI4uc9vViUL3PoOXUQOa8exAH7uUsD9rKmHieQHo=
Subject key identifier: C6:AD:A9:15:1E:25:DB:1D:6E:46:5E:E2:AF:C3:3A:8A:7B:8F:A5:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C4DF377EAB1099D4A8F2074B9F6007629E6779D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b84c6a0d-83ab-4063-817a-3c0d0b1e6245.roa
Signing time: Mon 20 Oct 2025 03:02:20 +0000
ROA not before: Mon 20 Oct 2025 03:02:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4d:f3:77:ea:b1:09:9d:4a:8f:20:74:b9:f6:00:76:29:e6:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:02:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=53aa0967910d16405aeb2c970990475317c4bb9cf6fb43e83cc1570305ea36be, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:4d:15:67:3e:0d:ac:10:43:c1:e4:e2:68:
60:c7:d5:ed:3b:ed:e3:7f:20:6d:7f:81:c3:6f:d8:
4c:f0:84:c0:fc:d3:37:0f:65:0e:24:de:76:f6:bc:
45:d2:62:71:38:9d:2c:79:d9:b9:2f:ea:5e:55:5d:
50:ae:35:a0:13:fa:10:e4:b4:28:b5:88:6d:cd:04:
b5:c6:d1:fe:48:7c:a8:ad:15:c3:e7:30:94:af:9e:
ff:0e:18:d6:df:ce:3b:a4:ec:81:a9:b7:54:51:2d:
de:ab:18:9b:69:54:ed:72:8c:6e:b3:d1:37:d7:fa:
88:e7:7d:fb:6d:ec:1f:2c:9c:93:2d:f3:dc:b3:38:
04:04:cc:2f:30:e4:99:f4:ef:a7:11:cb:bf:9d:80:
40:b8:a5:47:25:0e:1c:f7:ad:9c:10:24:8f:a9:a9:
23:67:e5:ba:da:65:2d:2a:7a:e5:3b:f6:c8:15:bc:
86:c8:6e:a2:74:a7:54:d1:46:08:a9:b4:da:ec:33:
72:14:20:f8:81:af:03:2b:5d:d4:5b:d6:89:36:05:
23:b0:ad:8e:74:e6:84:a0:d2:87:10:af:d0:ea:f2:
0e:22:ee:5c:72:21:c6:ee:76:1e:22:ab:a0:1b:c6:
69:27:3a:b7:e6:6e:25:f6:44:da:9e:fb:d1:48:87:
d8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AD:A9:15:1E:25:DB:1D:6E:46:5E:E2:AF:C3:3A:8A:7B:8F:A5:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b84c6a0d-83ab-4063-817a-3c0d0b1e6245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.176.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:58:93:0d:d6:28:38:4c:fd:61:a1:fb:8d:97:70:ee:54:7b:
66:db:82:20:e6:a5:0f:f4:cc:75:57:20:68:fd:66:11:ba:87:
96:43:12:a8:72:2f:f3:22:2d:87:c0:d2:fe:f3:bc:86:ae:a4:
f6:87:02:0e:14:fb:54:f2:6e:56:ff:f7:de:b0:81:7a:65:47:
04:47:d1:1b:a5:4d:97:17:62:58:17:1a:bb:9a:e7:82:e2:4b:
26:66:ae:e2:31:4c:59:fc:6e:9b:35:50:b6:f9:fe:b5:b9:b9:
93:e6:36:e9:50:8f:1c:2f:96:be:26:f4:91:af:09:81:ac:c5:
ca:5f:b6:96:8c:d0:b9:30:bc:84:8b:58:4b:9a:b3:75:bb:1f:
0a:b4:48:64:61:7d:a4:66:06:b3:df:b4:15:76:aa:69:1c:74:
cf:75:1a:58:28:39:8a:47:a1:f7:fb:7e:29:8a:b9:ca:9e:aa:
86:f4:a9:90:c4:4c:a0:24:e8:e1:31:c6:90:54:ca:e7:a3:11:
67:91:7f:fd:91:ef:1b:ba:54:4a:51:9c:3c:eb:ca:5b:c8:9c:
74:8d:10:3c:2f:70:f8:c5:0d:f9:10:96:cf:17:e0:a7:4d:2b:
07:9d:76:31:14:41:df:ab:60:66:6f:4a:7b:3a:a7:26:1b:93:
72:15:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:44 2025 by rpki-client