Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c278aa47-b70e-428b-a489-5133320aae9b.roa
File: c278aa47-b70e-428b-a489-5133320aae9b.roa (raw, json)
Hash identifier: +FZ1CwVLlRK+/sEM6wxCsNPz+TUQKemoZhyGzswwCUU=
Subject key identifier: 02:42:15:9C:5E:A9:F4:C4:49:AF:14:D0:64:25:DD:24:45:EE:AE:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5FDE6AF2E9FD3BA545BACC176EB51BAC9D28E170
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c278aa47-b70e-428b-a489-5133320aae9b.roa
Signing time: Mon 20 Oct 2025 02:11:44 +0000
ROA not before: Mon 20 Oct 2025 02:11:44 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:de:6a:f2:e9:fd:3b:a5:45:ba:cc:17:6e:b5:1b:ac:9d:28:e1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:11:44 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=2a7cb78af2e7f08909be8c39c78b7d19bdac89a6e5c517f40a6b7fb4c075b731, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:23:81:cd:03:f7:48:3e:1a:2f:49:8b:85:20:
54:b9:76:1a:f7:85:d1:1b:5f:fd:08:2f:85:3a:0a:
e9:18:80:11:22:01:94:75:b2:17:a5:d7:3b:2d:a3:
f3:da:69:3c:25:25:d5:51:d4:8c:f1:a9:15:3d:1c:
03:49:71:f4:8c:a3:d9:c1:37:ad:58:1f:8a:9c:ba:
8b:57:56:5c:84:f3:d3:82:65:d8:0d:bb:79:e1:6e:
56:32:35:b9:96:d4:b5:06:e2:83:df:cf:92:68:8c:
da:08:c5:f4:98:fe:8d:5e:dc:cc:df:d9:64:40:05:
91:10:2f:43:45:95:2f:45:cb:24:c9:3d:0b:bd:3b:
b2:3f:68:65:7e:44:fd:ca:3e:98:e7:dd:a4:0c:99:
8b:46:c0:7e:f3:da:03:e8:9f:5e:0b:62:81:58:00:
3c:61:00:55:08:c5:34:33:fe:d3:e8:70:ff:91:be:
e2:5c:c3:9d:93:a3:f7:50:4e:e3:73:f7:45:c6:8a:
03:e3:6e:45:3c:48:25:a7:db:53:bc:b4:e4:e5:32:
88:b5:67:2d:8c:64:96:e7:2f:cd:8d:77:91:ae:24:
f1:f6:6d:8b:7d:27:8c:a6:39:b4:a3:e8:80:f2:62:
e5:f3:28:2a:e6:70:96:30:e0:b0:fa:b0:d3:94:a8:
80:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:42:15:9C:5E:A9:F4:C4:49:AF:14:D0:64:25:DD:24:45:EE:AE:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c278aa47-b70e-428b-a489-5133320aae9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.67.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5c:e1:da:85:b6:1d:e6:7a:0f:3d:aa:ca:b0:21:52:eb:03:
b6:75:7a:10:23:db:e7:af:b6:16:dd:fe:65:fd:aa:60:4a:43:
a0:ea:cd:72:3b:85:a9:37:c6:59:bd:5b:3b:d9:25:5f:ad:a2:
0c:9d:a4:bd:8f:b4:e0:aa:bf:91:1d:64:ec:d3:36:07:a8:03:
57:fa:12:2d:3f:c7:2c:01:41:b2:13:95:50:76:30:1f:86:4a:
22:2a:e3:33:eb:dd:3d:4c:fa:52:2f:94:6a:4a:53:28:a6:e2:
de:16:0f:ad:eb:f7:27:85:69:5f:69:f1:6e:5d:9e:ab:33:2e:
b0:9a:40:7e:a8:9f:70:a5:6d:ec:52:6c:99:b0:75:e3:09:87:
88:06:34:ef:e5:16:45:0a:1e:17:b6:dd:52:49:7d:fc:e1:c6:
3a:1b:74:f5:b8:22:ad:63:f0:ef:29:c7:0c:34:31:bb:0f:c2:
a2:61:cd:83:3e:3b:e2:95:1b:87:3b:c7:a0:f4:34:de:a5:02:
f3:c4:6b:4a:00:78:c3:d1:94:65:88:c8:b6:4f:1f:02:85:e8:
8c:cd:04:36:35:ad:f8:37:ba:85:d5:3c:85:a2:d7:fe:af:df:
49:a8:7d:0d:fd:49:b0:49:c5:8b:53:3a:ae:12:0a:53:de:36:
91:82:aa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:19 2025 by rpki-client