Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1e5925d-7a9d-4ce2-a4f1-5d7ab13682d3.roa
File: d1e5925d-7a9d-4ce2-a4f1-5d7ab13682d3.roa (raw, json)
Hash identifier: R/nbnIAG4TC3NKgCRnhXeOHj8JRSo9M+ZEwS90gCjR0=
Subject key identifier: 22:C8:A9:AC:27:0F:DB:CE:B2:5E:FF:3A:6F:15:8B:44:7E:FF:D6:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C45F5EE786267917B7495F0AE7A2A51E51FAC23
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1e5925d-7a9d-4ce2-a4f1-5d7ab13682d3.roa
Signing time: Mon 20 Oct 2025 06:11:29 +0000
ROA not before: Mon 20 Oct 2025 06:11:29 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:45:f5:ee:78:62:67:91:7b:74:95:f0:ae:7a:2a:51:e5:1f:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 06:11:29 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=92d2831334ed1c163a5d1c1ff93d17dbc0839f0f4b5cfce242e3a6b680e0c742, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:39:80:a8:e6:bc:b6:4f:63:68:62:35:ff:a4:
4d:e8:6f:88:27:3d:66:6e:17:1c:b3:f6:0d:d1:45:
73:65:c5:f4:15:cd:21:7a:71:bc:1b:d5:26:81:18:
66:0f:b1:48:15:d4:fe:f5:88:de:36:9a:c5:10:b9:
31:af:ed:b0:34:09:44:d0:25:e4:34:c4:46:70:2e:
db:46:3f:68:bb:77:46:a5:1e:77:13:69:72:a9:1a:
ba:b1:27:fd:52:55:c8:f1:11:30:fc:1b:9e:b8:2a:
da:43:95:91:8c:14:c7:dd:7a:6b:5d:4f:72:bf:c6:
5e:9f:f0:df:15:fe:e6:2b:d7:7d:16:11:02:7c:9b:
42:a9:1c:5f:3f:60:c7:88:49:e5:f2:b5:05:d0:98:
73:14:d8:15:89:06:42:66:58:44:b0:20:ae:b3:b1:
6e:48:cd:2f:5c:41:d9:38:69:aa:c5:98:29:1a:ed:
ea:24:1a:35:14:80:e9:34:e4:08:97:91:9e:8d:91:
06:9b:b9:d1:99:0c:34:48:ae:98:73:2b:00:a1:6b:
0c:cc:de:7f:c8:a7:b2:ab:0e:5d:1a:40:da:1d:99:
f9:24:49:7b:32:b7:97:8d:ee:4f:c8:f9:ab:32:c9:
c2:fd:7b:34:22:0d:c1:2e:80:ca:45:a0:f1:a3:50:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C8:A9:AC:27:0F:DB:CE:B2:5E:FF:3A:6F:15:8B:44:7E:FF:D6:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1e5925d-7a9d-4ce2-a4f1-5d7ab13682d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.66.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ed:e4:36:a1:82:da:e7:69:f7:55:f0:4d:2c:23:64:5a:53:
62:41:3c:c7:a1:a9:d9:3b:50:3e:e2:8f:b9:d4:86:78:80:ff:
94:7d:ef:58:a9:1e:9f:bf:6f:04:cd:95:9a:8c:37:a8:c2:0c:
ca:d8:a8:d3:52:53:b8:1b:5d:b4:dd:34:29:20:24:ec:d9:c6:
7b:ae:a0:ae:62:6e:01:c2:ac:c3:18:98:15:22:00:e8:06:f6:
78:1b:bc:07:3a:4d:10:1b:6f:a4:6d:60:94:7f:04:43:16:94:
46:91:06:1e:c6:8b:f5:14:29:e7:9f:f9:a6:74:6e:88:b0:53:
8b:a6:44:32:11:0e:80:bc:91:56:81:69:90:ed:d9:ae:6c:91:
4e:f1:d7:c6:21:e7:7a:75:ce:89:d6:ac:ee:2a:79:80:f1:f7:
14:9e:17:c7:4a:1b:e5:47:49:07:20:f5:9f:fc:9d:17:93:80:
cb:6b:fc:59:6f:3e:e4:e5:a8:5c:55:58:b5:61:1f:02:7c:c3:
8a:6b:4d:1c:b1:e0:a9:49:f9:29:1b:9a:73:b7:6d:31:97:72:
fc:af:47:aa:d8:7f:bf:92:09:1d:59:eb:6b:bf:4e:21:29:6d:
3d:ee:e2:bb:19:6d:92:b6:07:76:1b:85:d1:82:23:ea:09:64:
4e:87:91:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:16 2025 by rpki-client