Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6242f40-ff89-4446-bead-fde06d0026cd.roa
File: c6242f40-ff89-4446-bead-fde06d0026cd.roa (raw, json)
Hash identifier: QGNLbxkQyMUO7ZCy6MF81MqSPolZiWmHveTfvMzjfH8=
Subject key identifier: BF:9C:F9:69:C3:60:1C:89:AD:0B:4A:70:AB:D4:B1:82:9C:16:B5:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2073A29FEE26D9646EA9FED61112D61FE50C8880
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6242f40-ff89-4446-bead-fde06d0026cd.roa
Signing time: Fri 17 Oct 2025 00:21:19 +0000
ROA not before: Fri 17 Oct 2025 00:21:19 +0000
ROA not after: Fri 21 Nov 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.22.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:73:a2:9f:ee:26:d9:64:6e:a9:fe:d6:11:12:d6:1f:e5:0c:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 17 00:21:19 2025 GMT
Not After : Nov 21 23:59:59 2025 GMT
Subject: serialNumber=b2028f8f227a9516aee47a14ea5f9a733feff3294596b392d6db0df1818b6fa4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8e:07:92:09:b3:3f:28:d5:77:82:46:5a:c7:
49:5f:ce:19:52:a1:b1:c9:18:33:f5:3b:5e:2c:01:
b5:23:19:e4:f4:58:fe:e2:74:3f:ca:b9:c9:da:31:
92:31:bd:8a:69:be:0e:3e:14:2c:88:26:c2:73:fb:
1e:2a:85:2d:1b:f7:0f:a4:a8:86:d1:d4:1f:01:77:
db:c9:87:e2:de:16:da:d2:8e:3a:e9:8c:a6:76:52:
be:2d:53:65:86:20:65:eb:9f:2d:a7:61:f0:e8:13:
d2:ee:56:65:e0:b0:0c:10:2d:79:92:3c:dd:5b:60:
e5:23:ee:2c:a1:d9:ea:0a:02:f4:be:78:62:87:eb:
83:f9:3f:75:76:54:fa:5d:ea:8e:93:8a:42:e0:42:
2e:c1:a0:9f:5c:92:a0:0c:e8:bf:2e:35:55:e0:e3:
26:7b:7a:e9:61:54:15:fa:aa:a7:2a:e1:1e:30:e7:
6b:5e:e8:34:73:7e:95:99:75:00:da:90:b2:3c:ef:
0d:5f:e3:64:1a:b7:d9:9b:b6:2b:d4:d8:e2:07:cf:
b6:17:bf:81:22:30:0f:76:5d:c8:6a:3a:2c:81:25:
11:6c:87:39:2f:5e:54:5a:67:4e:be:ca:f5:5c:80:
6c:de:c4:d5:45:06:58:be:0b:b7:95:07:a0:34:40:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:F9:69:C3:60:1C:89:AD:0B:4A:70:AB:D4:B1:82:9C:16:B5:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6242f40-ff89-4446-bead-fde06d0026cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.22.144.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:da:3f:ca:bf:c8:1a:1c:83:2c:8f:cd:9b:ff:f7:97:ce:b1:
78:c0:30:e2:e9:c1:bf:21:4b:3b:4e:b1:46:ff:73:6e:50:7f:
6a:d2:e7:42:93:01:0c:8d:4f:cb:7e:d5:cb:72:41:5b:75:1e:
04:ff:49:ab:e0:76:a8:95:48:a3:ca:d8:13:fe:d5:50:7e:96:
4c:bb:55:28:b3:12:9c:0f:32:8f:14:57:56:cf:e3:2b:57:91:
d5:fb:6a:c1:28:4d:f2:d4:29:e6:20:3c:72:d8:fe:b5:3a:49:
65:87:9f:1a:3c:2a:be:40:0d:9d:35:f2:75:a4:00:67:07:6a:
c8:91:21:62:fa:f7:6c:28:6f:84:6a:9b:39:73:0c:c1:c6:03:
cb:3e:fb:10:69:21:f0:30:a9:e5:44:36:1f:55:4b:93:40:55:
55:81:4a:8e:a5:00:d3:6f:d2:53:d7:4e:47:86:ce:e9:ac:0e:
77:c9:a1:18:b6:7e:5f:5b:a2:12:dc:2a:21:9c:2d:4e:b8:00:
0a:a2:3f:c3:42:23:a7:66:61:6f:ad:96:a0:9e:04:f9:d1:db:
81:b1:1c:be:0a:77:26:83:26:82:d9:db:71:5f:38:db:92:8d:
b4:16:8b:4d:76:bb:87:8a:22:c8:3e:91:67:dc:1c:8a:9d:a0:
59:b6:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:20 2025 by rpki-client