Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd885e18-0b6b-4a9b-97b6-d364bc61ce3c.roa
File: bd885e18-0b6b-4a9b-97b6-d364bc61ce3c.roa (raw, json)
Hash identifier: q4pn5uifiNDZtkTe9n05xTO0BK51vct/hAfG0lDMylM=
Subject key identifier: 52:5A:84:94:C7:D0:B1:69:BC:0B:0D:DA:AB:DA:F7:27:E8:82:44:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6EF70CADF54AC2C13A2D6F7CEBE71907119FCE78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd885e18-0b6b-4a9b-97b6-d364bc61ce3c.roa
Signing time: Mon 20 Oct 2025 03:31:48 +0000
ROA not before: Mon 20 Oct 2025 03:31:48 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f7:0c:ad:f5:4a:c2:c1:3a:2d:6f:7c:eb:e7:19:07:11:9f:ce:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:31:48 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2bd3c92d330521db4e7945e843fb2937e6fe12027ec9c58d8e3baaf23a17f38b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:54:68:df:25:23:07:cd:6b:88:10:0d:2e:
f6:0d:e1:42:54:58:6f:23:cc:8f:c7:8d:a1:b3:eb:
a2:ad:99:13:b5:1a:d5:d5:49:56:9b:58:12:07:b7:
4b:bd:be:45:28:03:85:47:5c:8c:df:11:9d:7c:df:
d4:b2:82:dc:8b:3a:d3:12:5e:16:12:47:a3:3a:0c:
4c:65:47:22:b5:e9:c9:81:55:2b:2a:ea:25:87:4c:
b9:b3:3a:b1:ab:fb:09:e9:d1:2b:e1:d3:09:69:dc:
51:21:51:9f:4b:77:ed:e3:fe:d1:47:5f:a0:5c:86:
b4:27:20:48:36:8f:50:49:29:2d:fe:88:b4:e0:28:
30:4c:33:24:d9:4f:73:2b:cd:1f:7f:39:b1:c8:16:
6a:ff:ed:67:32:95:2c:66:20:4a:16:b7:e1:ee:c7:
80:db:de:d3:25:ed:92:76:3b:93:56:39:b3:26:bc:
ff:f2:91:4e:42:b0:d7:7e:18:04:95:dd:b8:c8:6d:
f8:bf:63:f1:62:44:99:53:d5:c5:e0:36:99:9b:9a:
e1:55:7d:66:32:64:d3:32:bb:1b:65:b2:da:6c:5c:
ed:96:79:fc:6f:51:d3:3e:05:c3:d4:fe:17:ff:da:
24:62:db:4a:91:b8:17:ed:f7:62:1d:bd:25:e3:6e:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5A:84:94:C7:D0:B1:69:BC:0B:0D:DA:AB:DA:F7:27:E8:82:44:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd885e18-0b6b-4a9b-97b6-d364bc61ce3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.169.0/24
Signature Algorithm: sha256WithRSAEncryption
23:e7:d0:84:69:1c:c7:d5:e2:52:d2:ae:6f:19:8a:e5:5f:47:
31:fe:38:7c:fd:cf:6d:02:8b:44:cd:52:50:e0:dd:11:e7:54:
59:ea:bd:b8:21:7e:77:f0:82:d9:66:16:fb:0e:8e:ae:a3:9b:
c4:40:4c:67:e2:0a:0f:b4:62:71:90:c5:31:2a:cc:7b:8a:a9:
5f:b9:05:66:03:64:74:0d:e4:83:41:3a:5a:2e:7e:b1:34:47:
4b:8f:e9:05:a5:9a:2b:76:67:87:1f:68:9c:48:d8:a5:b1:36:
89:f8:af:a7:91:16:52:db:86:7b:c7:43:7d:76:3c:4f:a9:51:
e4:0a:fc:03:3c:49:f9:e5:4a:7b:57:29:43:fd:94:08:67:23:
f5:a7:59:f2:32:ab:e6:80:9c:1d:eb:f3:53:6f:24:b5:93:8e:
c9:04:b9:2c:4d:47:29:27:c5:7b:ee:7a:f8:b7:d3:b1:30:ea:
b9:2f:84:01:e5:0f:49:a7:25:a8:26:4f:46:60:81:ea:42:76:
13:fc:91:e5:0b:77:64:00:a4:15:fb:2c:f6:43:b7:c5:69:12:
e7:f1:a6:c3:21:19:01:4a:6d:bb:7d:18:07:c5:e9:01:23:d1:
fb:6c:06:cc:3c:fa:8a:89:7b:9f:19:e1:e3:c7:70:19:4f:89:
49:97:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:18 2025 by rpki-client