Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22d9bf6-d595-4ba4-917a-940a96e56b03.roa
File: c22d9bf6-d595-4ba4-917a-940a96e56b03.roa (raw, json)
Hash identifier: bINubpm3PFZpQPnLC9ExPh5Vo6qHWd82iZ3yNrZEzCQ=
Subject key identifier: B6:8F:94:2A:5A:73:0F:4E:CF:EA:D6:3C:6F:57:E2:DC:C1:EC:41:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E530F071D078DE73ABAB84FFD91EA3B8891D425
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22d9bf6-d595-4ba4-917a-940a96e56b03.roa
Signing time: Mon 20 Oct 2025 00:30:14 +0000
ROA not before: Mon 20 Oct 2025 00:30:14 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:53:0f:07:1d:07:8d:e7:3a:ba:b8:4f:fd:91:ea:3b:88:91:d4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:30:14 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8dcdc3aa0ae8de634c7b0ea67946bb15260b443ea8af79f04968a7cc034852e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:31:be:25:a4:f6:e8:71:04:93:e0:5c:06:
e9:b2:e2:92:1f:68:2e:b6:e2:c4:d7:dc:d2:a2:78:
19:56:ff:8f:6e:07:57:02:e3:8c:e5:d2:ce:c4:37:
cb:73:9f:16:d0:e7:d4:c4:be:dc:b5:c1:48:a3:bc:
46:f5:98:e6:94:88:a7:bd:fd:a0:d4:2d:13:22:8b:
30:09:54:e3:a5:31:00:0b:02:9a:0e:ac:e4:c3:8e:
6d:a1:ab:0e:d1:17:5d:fd:10:29:d8:61:7e:35:e8:
8d:0a:38:44:56:37:a9:e2:70:11:fa:4e:0d:7e:70:
78:fc:08:72:fa:9d:3d:90:1d:a8:0f:92:9e:52:e2:
fd:d5:5b:c9:90:ef:cc:57:f3:6c:ec:9f:61:74:e2:
af:21:40:b5:55:95:5a:b5:06:e3:d2:4c:18:79:a3:
d3:ee:37:7e:b3:75:8d:b9:44:f3:5c:f9:a0:e3:8e:
2e:66:83:41:0b:b5:67:1f:df:c8:95:a0:3a:13:aa:
c3:22:53:61:74:56:9d:40:79:80:1b:94:c2:37:12:
f8:0c:f8:a5:b8:d3:c9:39:69:2f:f4:e7:5c:8c:67:
fe:f4:59:fd:98:8f:9d:c8:69:5f:c8:19:ba:03:38:
a9:e4:8b:6b:bd:a5:24:b7:52:20:16:62:d8:e8:5b:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:94:2A:5A:73:0F:4E:CF:EA:D6:3C:6F:57:E2:DC:C1:EC:41:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c22d9bf6-d595-4ba4-917a-940a96e56b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.12.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3d:32:ce:0a:97:27:5f:a8:8e:e3:a6:27:2f:b6:ec:61:0b:
72:5d:0b:3c:46:4a:03:30:b1:e4:ff:be:c7:00:6c:10:f8:ce:
bf:74:8b:53:48:b3:7e:6a:57:ed:9a:17:0a:7a:ea:c6:46:ee:
b5:65:ff:9e:2a:d9:9f:cc:c3:c4:0c:ca:a9:74:93:69:5f:ac:
17:cf:30:44:35:00:ef:fb:50:b8:87:7c:64:9d:68:e6:c6:e1:
30:d5:56:b8:a0:1d:d6:ac:7b:c6:86:c7:1e:ac:72:e6:8b:15:
57:91:00:0c:b4:90:07:01:b5:04:71:77:4f:33:6e:14:f3:27:
0b:d5:99:0f:2a:6d:15:9d:37:61:79:d5:c0:c9:ab:b3:f8:97:
b4:0d:2b:1b:38:d8:07:e6:c3:b5:c9:df:7c:d8:20:d9:0f:45:
29:bd:55:9d:27:17:8d:d2:d3:10:14:a9:bf:b8:19:30:c3:b8:
a8:93:4e:81:f0:02:5e:42:b5:f3:63:ff:a8:1a:e5:c0:e2:b9:
00:bc:cd:cf:cd:59:78:92:19:0f:da:bf:59:75:29:ae:0a:b7:
d0:69:3c:45:ba:1b:5e:23:d9:19:f6:df:5b:c5:36:ec:55:42:
29:b9:ed:a8:41:57:92:5a:62:01:66:34:97:c5:ef:18:9f:41:
0c:d1:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:52 2025 by rpki-client