Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70e6fcf-0891-4ef2-9a9e-97c6a6de8b89.roa
File: c70e6fcf-0891-4ef2-9a9e-97c6a6de8b89.roa (raw, json)
Hash identifier: fX4RvF7xwcczHsoqdPTh76MjLOmrjowp9KmpRr7N3EQ=
Subject key identifier: 90:6D:9E:BE:FB:CE:7F:A6:24:FE:A7:B1:6F:2D:1B:C1:5E:95:9E:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7705862353A0FDE7074079EC4321FDD5080A7BFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70e6fcf-0891-4ef2-9a9e-97c6a6de8b89.roa
Signing time: Mon 20 Oct 2025 04:01:45 +0000
ROA not before: Mon 20 Oct 2025 04:01:45 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:05:86:23:53:a0:fd:e7:07:40:79:ec:43:21:fd:d5:08:0a:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:01:45 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9df79a22c324d8a406567cc072458053cbf314d34dfefbb1634f5eb00fb9aeb9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a0:93:53:9f:fb:e0:42:ac:2d:6f:1d:db:bc:
2c:16:7a:95:61:52:56:f6:b5:75:f0:c6:0b:1b:11:
f2:5c:e7:0d:7a:07:90:2a:be:a2:64:4c:97:27:7f:
ae:e9:f6:14:ae:66:41:0f:fd:e7:d4:d8:1f:df:03:
5d:4f:f4:78:ab:1d:1f:c3:e8:55:98:f6:f3:00:aa:
a0:61:0c:36:ae:28:fd:aa:ab:06:a8:59:5d:93:0f:
64:df:79:ab:74:34:4e:d7:aa:7a:4a:97:aa:fd:27:
c1:0c:5d:d6:7e:9b:d8:5f:a3:b5:ec:54:0f:13:99:
bb:61:92:de:ae:a8:3b:b3:dc:ed:10:36:58:1e:c9:
1e:03:3f:5b:01:bc:65:8f:77:84:ca:29:e6:97:d0:
1f:cd:9d:5c:87:82:c6:fe:94:68:74:91:3d:b4:6d:
19:8a:94:be:3f:a0:ea:85:a1:5a:4b:c4:0e:2b:de:
20:69:18:32:11:34:e9:6b:ac:b4:d4:34:5e:53:e4:
62:6d:16:1d:c3:5b:f9:92:ae:77:d0:36:02:ac:93:
bc:09:83:31:26:15:44:8f:cd:71:29:49:24:d5:a7:
d8:82:83:17:ad:83:f9:1d:56:d9:94:71:37:48:5e:
12:ba:02:39:b5:82:20:06:a2:77:a5:b1:c9:d5:50:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:9E:BE:FB:CE:7F:A6:24:FE:A7:B1:6F:2D:1B:C1:5E:95:9E:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c70e6fcf-0891-4ef2-9a9e-97c6a6de8b89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5d:a7:f4:e4:5d:2d:a0:d2:0b:de:db:27:24:7f:68:78:c9:
25:bc:a5:57:9b:d6:5e:0d:ee:d0:b7:54:ba:40:30:f2:23:a4:
7f:3d:04:9f:8e:b7:10:f9:af:fa:42:72:c4:b7:45:8a:c8:52:
15:0a:14:ae:83:4a:89:69:47:aa:de:7c:d6:84:2e:99:4c:bb:
da:e0:48:c4:8a:9a:bc:49:bb:9c:21:98:50:05:24:bc:86:65:
d1:85:30:5f:5c:73:fa:b2:06:09:d6:62:2f:ce:c3:81:bb:ab:
2b:33:e9:a2:77:02:d8:dc:9b:5f:b0:e4:5e:42:57:d0:3e:da:
19:5a:6e:f0:e2:7d:85:ee:eb:8e:17:af:f6:c9:7e:8e:de:20:
b7:26:13:e1:8b:83:98:f6:d8:95:bb:78:ab:11:65:ca:c3:a0:
87:5d:30:56:f6:a4:00:8a:83:2a:47:79:48:6d:1c:ff:87:d5:
6d:1f:c5:71:74:4d:27:90:af:f0:70:08:87:1a:7f:2c:13:a8:
e2:9b:df:87:1a:1e:6d:71:54:4c:99:a2:9f:ce:d8:39:04:bf:
71:54:f6:98:99:f9:7e:20:3d:17:5a:df:8e:c4:8a:46:f1:2f:
ca:97:98:3f:4e:3e:37:0f:56:0d:c5:60:1d:aa:95:c2:30:80:
84:e1:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:06 2025 by rpki-client