Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce645ae6-1bef-4295-a968-5807ca985b86.roa
File: ce645ae6-1bef-4295-a968-5807ca985b86.roa (raw, json)
Hash identifier: 46V0Rm8WFGUL2nniCnzpzQU330zvkxYmf9YJG+CE4mw=
Subject key identifier: 2E:00:5A:92:CC:CF:FA:05:90:DD:39:E9:59:34:94:8C:62:CC:92:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 068A5FDD29FA8F6B75BBFE28B8F7E51FE4881D0A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce645ae6-1bef-4295-a968-5807ca985b86.roa
Signing time: Mon 20 Oct 2025 02:12:34 +0000
ROA not before: Mon 20 Oct 2025 02:12:34 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8a:5f:dd:29:fa:8f:6b:75:bb:fe:28:b8:f7:e5:1f:e4:88:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:12:34 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=911141e4feeaf1ea361ddade7eb7be196adc339b286f0a2978d33d0d9b92939f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:a1:06:80:6e:8e:7a:af:66:cc:87:9c:92:
9d:86:4c:17:25:45:ac:93:e4:6e:32:9a:b3:e7:10:
23:24:22:96:a3:da:ce:02:78:a6:22:97:50:bf:7f:
9b:b2:ea:0f:2b:01:f8:db:f6:a3:ca:67:c3:82:b5:
c1:43:ad:37:5d:3a:f6:9e:cf:f2:f8:bc:c6:01:e4:
41:96:61:2e:d0:50:aa:2b:cd:2b:07:fc:b4:4d:1e:
fb:49:ba:5b:9d:af:b2:34:a8:c1:c1:ae:0a:ba:5a:
4d:f2:88:20:2c:c0:01:a7:1f:9d:19:ef:73:b0:1c:
aa:70:4f:fa:1a:e1:a7:9f:e5:96:1c:4a:fb:d7:23:
b0:fc:55:bf:e9:1c:11:54:72:32:59:85:09:19:e0:
75:67:84:48:30:7c:dd:a9:bb:c5:0f:34:c3:80:eb:
e0:4e:2b:88:bd:96:c0:32:15:75:00:fb:3c:b4:35:
0a:a5:00:df:f5:c4:95:56:c9:ab:46:c8:d3:59:32:
2d:cc:2f:36:f0:b5:b3:52:98:d8:af:aa:d4:bd:f2:
e0:ba:6b:d0:85:e3:00:cc:45:26:76:a9:36:3b:a3:
f6:38:13:40:7b:de:3f:ae:54:4d:aa:92:8b:8e:65:
8f:c9:f7:58:4c:50:45:7e:34:43:7f:8d:c8:90:c2:
a0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:00:5A:92:CC:CF:FA:05:90:DD:39:E9:59:34:94:8C:62:CC:92:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ce645ae6-1bef-4295-a968-5807ca985b86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.64.0/22
Signature Algorithm: sha256WithRSAEncryption
76:2c:8d:5d:bc:83:8c:57:6f:ac:ba:c4:12:66:0c:bd:9b:b7:
00:ad:f7:ea:b4:45:eb:1d:1b:8f:9c:53:9c:db:d7:83:0c:07:
cb:1a:43:16:85:8c:8f:5b:e2:a0:fa:c1:37:49:02:e6:b4:2a:
de:23:c9:e2:cb:40:2d:f6:00:30:a1:25:6d:02:82:6b:1c:30:
da:86:70:eb:b0:90:fa:2d:62:e4:ae:7b:c2:25:f5:66:c3:69:
8e:40:34:4c:7e:a7:29:e1:cc:16:9f:63:7c:ed:5c:51:ef:f8:
60:67:23:d5:23:bd:96:21:6f:54:23:f0:5d:46:3a:bb:2a:bc:
85:fa:74:b0:b7:de:b5:8b:68:97:b3:4f:b3:50:91:ca:63:f6:
66:09:3c:01:83:5c:bd:18:ae:10:12:f8:a9:c9:ea:b1:e4:b4:
65:58:ea:31:ca:ff:be:d9:38:94:de:a9:e2:a2:1a:e2:e4:86:
d0:f3:a4:80:09:d9:2b:36:84:fc:5f:9c:71:37:21:1c:04:74:
05:85:cd:b7:2c:d8:ac:9a:8e:00:f1:d6:69:ca:eb:a1:b4:98:
98:f3:4f:56:d8:2d:9c:c8:1d:be:7d:81:28:ff:17:f8:c7:73:
66:29:3b:28:e9:27:74:06:d8:f4:11:84:f9:bb:5d:f3:b9:a7:
e3:33:5b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:07 2025 by rpki-client