Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f58228-aaa4-455d-8433-333235195467.roa
File: b9f58228-aaa4-455d-8433-333235195467.roa (raw, json)
Hash identifier: WBpWkBZddYtF3yN7iHx4WAx6DGMmntSVof02C7pZWP4=
Subject key identifier: 6C:00:45:F8:5B:CA:B6:38:A4:55:A7:9B:80:FC:AF:00:34:F8:01:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05F693EEB752367CC78F7A4A430CFA77C8DDEE15
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f58228-aaa4-455d-8433-333235195467.roa
Signing time: Mon 20 Oct 2025 04:30:16 +0000
ROA not before: Mon 20 Oct 2025 04:30:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f6:93:ee:b7:52:36:7c:c7:8f:7a:4a:43:0c:fa:77:c8:dd:ee:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:30:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=afc1ad9300bcd7b8836f2ec61ce0f6a7e96cd728be5f379dbc86c3e3dd84234b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:e8:70:ee:5e:12:95:ce:d6:8d:91:6f:47:
b9:da:3c:ba:a0:84:3b:12:d6:1a:d5:08:e3:06:a7:
77:be:08:1c:53:cf:09:da:83:f3:9d:f4:c6:a6:5e:
88:d6:7d:95:e2:20:01:e7:ed:6e:84:f9:48:ad:ff:
3d:d7:92:a3:71:f9:34:70:58:be:a1:61:2f:33:2f:
cf:b5:ab:2c:3c:9d:92:58:61:56:4b:6d:72:6b:99:
4e:d7:c3:4a:1b:05:2a:c9:22:fb:d3:04:0a:6d:08:
e1:32:11:f0:ce:27:2c:bd:1e:e6:7f:76:62:ef:3d:
31:55:5c:76:3d:50:e4:7b:8c:c2:4a:f1:41:d6:e1:
8d:c1:1d:94:4f:52:5f:45:73:ed:7f:8c:11:21:cc:
0d:ff:4f:58:4e:4e:b8:50:15:06:ce:7d:86:14:7c:
e8:df:9c:a0:08:d6:cb:59:f2:27:d9:91:70:82:a5:
fc:24:d6:bd:7e:60:bc:ef:26:ef:f5:35:78:48:f8:
fe:e2:b6:b6:66:d5:aa:5d:54:f2:68:62:7e:b5:5d:
b8:ba:e9:a5:04:5e:ac:52:ab:f4:bd:3b:ef:02:3e:
02:fc:3e:ba:f7:e0:09:7a:b8:38:76:fa:91:46:b8:
bb:22:b9:30:14:ea:4b:23:ba:9d:b6:4e:56:c1:6f:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:00:45:F8:5B:CA:B6:38:A4:55:A7:9B:80:FC:AF:00:34:F8:01:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9f58228-aaa4-455d-8433-333235195467.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.55.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ba:0d:f5:32:9d:f0:f5:1c:e6:aa:56:fa:82:fb:32:3b:07:
30:86:cc:34:fe:ff:bf:c3:73:8b:64:a9:d1:4d:c7:32:ae:d4:
8c:1e:a9:0f:15:bb:c5:8a:20:4c:12:ff:81:f6:6d:32:51:44:
a8:37:0b:e3:22:c8:e6:90:e8:47:e1:3e:46:33:67:04:33:57:
a1:9f:fb:3a:c6:19:f8:7f:0d:8f:0d:1d:67:9c:9a:69:a0:35:
d6:de:64:31:48:26:b1:6b:b3:33:1d:c5:26:1b:27:c7:3a:3d:
b8:a8:8d:ea:06:9e:72:82:94:78:03:8f:95:63:39:e2:d2:17:
05:cb:4c:46:10:3b:6b:d2:da:5b:0e:c5:05:eb:45:cc:83:12:
e6:18:3e:a4:e6:1d:73:f1:18:07:c6:93:b6:4b:35:15:15:2e:
96:14:6d:54:49:85:a1:a5:35:2e:29:2d:ea:8b:46:3b:c3:e1:
65:13:a0:92:6d:a2:94:5d:53:db:6e:87:33:02:56:5f:49:3a:
35:08:32:b7:f1:8a:91:c6:ce:1f:7d:bb:30:c9:6e:1f:d4:b7:
42:38:ae:a3:7e:82:75:7b:cb:49:42:24:83:de:ac:f4:f9:30:
ba:56:07:4b:20:6b:89:5b:97:cf:07:42:00:99:14:e1:ae:d4:
b0:de:07:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:55 2025 by rpki-client