Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf4062eb-fb4d-43cf-a4df-fb1ff9bde8c9.roa
File: bf4062eb-fb4d-43cf-a4df-fb1ff9bde8c9.roa (raw, json)
Hash identifier: nA9pLRnEozMAqm85zl1pHEz9+G6HjXquxNrj4N2i85E=
Subject key identifier: AA:6B:D9:1E:C3:25:99:1B:A8:AD:2D:42:7A:58:5A:C9:B5:F1:F4:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A923EEF53EA399DA8FCBAAD85A7F5D329608C58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf4062eb-fb4d-43cf-a4df-fb1ff9bde8c9.roa
Signing time: Mon 20 Oct 2025 02:40:51 +0000
ROA not before: Mon 20 Oct 2025 02:40:51 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:92:3e:ef:53:ea:39:9d:a8:fc:ba:ad:85:a7:f5:d3:29:60:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:40:51 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d18b88f15a109e75c79ad2e9c7f4d516112fc08f6deb0e407d3f238aab53ebf5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:27:67:3f:06:58:24:d0:7f:da:15:d7:e9:
90:2e:50:49:45:77:51:83:71:28:27:f8:87:e8:77:
26:4c:d9:0f:56:12:c7:46:3d:3f:66:a4:39:30:a3:
b8:7a:8d:3d:a1:39:4c:6a:57:09:da:da:6e:ff:d0:
ce:0f:22:97:38:8a:a6:72:96:e0:1a:07:7d:d3:cd:
36:0e:30:8f:af:d8:0d:6a:55:66:44:1f:3f:b2:d5:
06:02:20:38:fb:f2:6f:ad:80:1c:41:e0:0e:3d:7d:
6e:56:6e:f1:8c:fb:a4:83:40:a9:67:20:93:ad:86:
3b:b8:e3:8e:99:7c:37:7c:84:15:ac:6a:fc:0d:28:
9c:eb:40:21:4a:37:3f:0e:6d:54:69:97:a4:33:06:
99:6b:5b:1a:ab:ab:f1:a2:35:ed:2d:83:76:48:7e:
b0:49:8e:12:9a:ee:3c:3e:b6:f2:bd:24:ed:82:c3:
a1:e3:c1:8a:26:d3:43:e6:31:09:d3:f7:d1:2f:38:
42:28:f4:fa:96:ea:f0:d5:3d:91:2d:95:cc:dc:9c:
c4:54:82:8c:cf:e1:2c:14:0a:b0:ee:2e:da:e0:64:
61:ce:a7:fa:20:63:b7:ed:cf:c8:1e:73:98:bd:d7:
0a:b2:5e:fa:8f:af:9b:69:83:50:c2:4d:a0:23:ad:
a9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6B:D9:1E:C3:25:99:1B:A8:AD:2D:42:7A:58:5A:C9:B5:F1:F4:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bf4062eb-fb4d-43cf-a4df-fb1ff9bde8c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:a6:65:bd:5c:d3:32:e0:03:02:0a:74:27:1d:25:35:93:fe:
53:5e:4d:92:af:ad:9e:c7:5e:8d:76:55:55:8a:63:55:2c:66:
b7:5c:f8:4f:93:68:10:2d:9d:32:a5:e7:11:85:d1:50:a8:b1:
f5:d0:6a:99:50:14:38:1a:21:2b:ed:1a:01:cb:e7:3d:ce:48:
8b:da:a2:6c:e8:40:97:47:84:fe:cb:5a:ca:f0:32:61:0f:ea:
3f:82:f8:b8:d6:51:28:f5:95:27:61:9e:1e:e8:ab:5c:5f:7d:
94:bc:8f:53:a7:ac:f4:a4:13:5d:d9:91:8a:c4:71:14:92:8e:
3c:df:98:69:bf:cf:6f:5e:d1:c4:b7:b0:20:da:93:47:9d:2f:
75:47:b4:1e:4d:cc:11:0b:d5:1d:37:2a:f9:df:4b:6f:c6:1b:
3a:4a:88:b4:2e:e5:21:51:3d:bd:9f:ab:b3:09:4e:ed:7f:76:
fb:8b:50:8a:f7:7a:41:5e:c4:7f:b8:a2:be:03:1e:91:3f:8b:
88:ea:56:0e:10:d2:49:c0:f2:60:bd:46:07:f0:a5:99:92:38:
d1:c4:2f:ba:43:f2:e4:e7:74:9e:b8:ed:b4:9f:fd:33:d6:69:
8f:40:f9:83:11:85:19:27:23:1d:b8:49:04:5c:62:20:85:08:
39:e6:6c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:53 2025 by rpki-client