Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81065c0-ecdc-41e9-92c0-6f83b8f0c8c7.roa
File: d81065c0-ecdc-41e9-92c0-6f83b8f0c8c7.roa (raw, json)
Hash identifier: gYHi5XcIpTRUoqlWQaQd8DKMqjsLnxz1Q8Nz0HZVHzs=
Subject key identifier: 78:49:4B:CD:DF:C5:B6:95:1F:5F:E8:8E:22:96:FD:BA:E6:F5:19:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2BB20894396AD2081138E45704F240E63CFA1661
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81065c0-ecdc-41e9-92c0-6f83b8f0c8c7.roa
Signing time: Mon 20 Oct 2025 01:31:06 +0000
ROA not before: Mon 20 Oct 2025 01:31:06 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b2:08:94:39:6a:d2:08:11:38:e4:57:04:f2:40:e6:3c:fa:16:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:31:06 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b0e03a085bc7f3f69a0ad936610d394f281e08ce23c310b7b718e4bf14143c5c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:30:d4:e5:a2:34:b0:a9:79:ff:f1:fa:12:
8c:3f:fc:0c:5e:96:ab:01:5f:89:69:8a:4a:7e:aa:
3f:1b:27:36:71:87:5e:2b:3c:1a:a1:8f:a9:64:aa:
7a:f5:9c:fa:e2:e3:57:8c:7b:11:08:6a:0c:7f:1f:
29:09:85:94:41:38:5c:ae:b8:2f:64:6d:11:7f:ea:
1c:ce:c4:b6:42:cd:ea:3a:06:56:ba:25:0c:10:8e:
8f:34:c9:7e:ba:f0:d8:23:05:e6:33:6f:c8:da:bf:
53:c0:b4:fe:1e:92:a6:1c:0d:e4:fa:25:06:b9:26:
4f:f6:a8:9d:1d:28:d2:0e:fc:9c:7b:bb:28:5b:56:
48:73:76:d7:c6:b2:4f:69:bb:dd:aa:88:92:bf:b0:
ed:c8:78:4b:53:1f:fc:96:cc:b9:88:60:37:77:f1:
1c:c6:e0:16:89:f5:e0:2e:2c:b4:ef:ab:90:96:bb:
f2:dc:a8:3f:5d:8d:9e:f3:8c:cd:14:5e:95:77:ad:
33:05:d5:56:f1:e4:e0:29:f8:db:fa:97:19:59:b8:
ad:03:fd:03:82:f1:ed:bc:18:6a:f1:a1:89:eb:55:
69:9c:bb:79:71:da:06:f5:1d:14:a6:86:72:7e:93:
4e:5a:06:ba:4e:8f:44:4f:28:41:36:ac:1d:2d:0c:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:4B:CD:DF:C5:B6:95:1F:5F:E8:8E:22:96:FD:BA:E6:F5:19:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d81065c0-ecdc-41e9-92c0-6f83b8f0c8c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:04:cc:a8:26:8b:65:f3:af:67:39:3b:69:83:75:7a:80:ec:
0d:b7:10:96:c8:0b:1e:3b:50:06:85:c6:28:90:d7:b6:bb:b8:
fc:7d:0c:fc:a8:09:2a:49:c1:78:6a:59:3a:3c:db:2c:7f:0b:
7d:83:b0:b3:19:67:a3:77:61:12:53:94:cf:b6:3b:53:99:76:
09:c2:ec:1a:61:6d:57:29:0f:12:e7:7d:51:c3:19:9a:22:ac:
a7:89:21:b1:c5:60:2a:df:07:3e:33:75:57:c4:bd:2f:03:99:
17:3b:8d:e8:95:e2:8c:29:0b:2f:d6:bc:a2:b8:6f:b0:01:95:
ff:76:a8:91:19:84:db:3b:f6:44:a3:99:b9:d8:6b:8b:66:dc:
26:5a:b2:b7:85:88:41:ab:8b:b8:44:d0:05:4d:83:cc:68:c6:
f9:22:5e:67:60:11:f4:5e:61:d8:91:c7:a0:89:50:af:ba:e3:
a1:e3:82:98:3f:8e:f8:66:42:d2:b9:20:60:68:c7:33:c6:8b:
38:8f:f8:96:55:14:c2:fe:c6:6c:9d:56:5c:b8:b5:3e:38:e9:
9b:62:90:dd:07:82:88:65:f7:b0:b4:05:02:df:80:e7:b2:e6:
c3:c6:6f:ff:74:22:40:29:4c:e0:59:73:85:9f:26:3e:94:bf:
7d:8c:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:23 2025 by rpki-client