Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0a9adb1-a815-4d35-8841-ca0e1a30cc78.roa
File: d0a9adb1-a815-4d35-8841-ca0e1a30cc78.roa (raw, json)
Hash identifier: Fapz0cilDdn96cnUnw8+qZf8mNrDmO4/f/qwiWJe9yk=
Subject key identifier: FE:8C:56:75:90:50:2C:90:37:D3:8D:A2:EB:A9:F6:04:BE:85:40:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79DB4EDC8FE1851FAEB1AAF5F3A806B457F277E8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0a9adb1-a815-4d35-8841-ca0e1a30cc78.roa
Signing time: Mon 20 Oct 2025 06:22:12 +0000
ROA not before: Mon 20 Oct 2025 06:22:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:db:4e:dc:8f:e1:85:1f:ae:b1:aa:f5:f3:a8:06:b4:57:f2:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:22:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=f3fa6140513046dba189de7bb7cdf0b30f299f10ced5b92a404283f9dbcb84f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:77:8b:4c:8a:1e:2d:3b:57:44:32:a4:a7:
2f:ab:69:5e:58:fc:a2:15:19:c7:4e:c9:91:2f:ed:
1a:cd:2f:3d:2e:4c:65:48:e4:30:0a:c7:72:d6:07:
67:1b:3e:c1:7f:0d:02:85:66:fe:26:45:e4:db:67:
8f:1f:79:a8:6f:cb:7e:33:b3:1d:25:7d:ec:9e:4f:
fa:0a:55:04:56:aa:15:e7:a8:e0:8a:4b:2a:f5:43:
db:49:de:03:1f:54:41:64:85:cf:64:e8:e1:bf:5a:
65:f9:c6:d3:1c:e3:2e:d1:1a:2b:2d:a5:e9:8d:c5:
20:ba:0f:11:06:90:7f:f7:72:a3:aa:b6:55:62:7e:
f3:f8:88:b8:45:ca:7d:66:f6:f9:5e:ca:d0:64:9c:
52:24:53:d8:04:64:5a:7c:d6:ff:dc:68:90:17:1b:
28:0a:95:23:3c:84:ec:da:3f:27:5c:92:60:06:e4:
c5:9c:2c:0a:dd:18:1d:4f:09:18:c6:de:56:83:88:
6e:40:52:34:ca:34:4d:ae:ff:23:b1:ab:a9:c2:1c:
79:1f:9f:15:41:12:7d:8e:84:0f:3e:2b:48:a3:b5:
6e:17:34:25:bb:52:b7:2f:b3:21:82:da:68:65:cf:
4a:23:28:fd:5b:5e:db:a7:90:dc:bd:03:f7:ee:bb:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:56:75:90:50:2C:90:37:D3:8D:A2:EB:A9:F6:04:BE:85:40:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d0a9adb1-a815-4d35-8841-ca0e1a30cc78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.88.0/24
Signature Algorithm: sha256WithRSAEncryption
96:1a:36:4a:5e:e3:bc:09:40:0d:66:8e:ca:be:d8:0e:97:d1:
af:73:d0:ef:28:8e:bb:f7:ca:3a:0e:89:12:00:ac:aa:06:9a:
33:28:c4:d6:de:b2:99:82:ca:ec:e8:89:62:c7:56:01:e7:65:
a1:94:0b:b3:43:66:b5:9c:04:d6:a4:af:ff:4e:33:9f:da:1a:
77:1f:7f:99:85:27:cc:12:62:5f:41:b4:46:2e:0f:d9:ee:d7:
d2:7f:70:d7:78:7f:2e:f2:e5:d6:54:80:24:97:e4:62:8d:46:
78:38:01:3c:c0:1d:1c:8a:a0:de:39:2e:79:0d:4c:8c:42:73:
f0:2e:f8:6f:40:fc:b8:98:70:d9:67:0e:04:c4:99:54:1f:62:
c1:ea:46:28:72:96:03:b8:15:3c:29:fa:67:1c:8f:42:ed:9e:
77:7d:0a:81:5f:9c:96:c3:02:79:78:8d:cc:b8:09:46:18:63:
38:f2:87:9b:36:56:ff:25:ab:89:6a:aa:8e:a8:45:79:52:78:
0d:d9:eb:38:35:50:cd:a9:aa:81:58:2e:ea:7e:e6:b8:3a:65:
fb:ee:c5:79:08:1c:ed:12:f0:d0:df:df:54:4f:95:71:95:87:
73:a3:37:66:60:0e:ba:07:27:66:64:b5:49:22:af:a5:81:ca:
29:0c:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:04 2025 by rpki-client