Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3fc5e5a-c9c5-4e2d-9b90-c3e172f3d698.roa
File: e3fc5e5a-c9c5-4e2d-9b90-c3e172f3d698.roa (raw, json)
Hash identifier: TsRIPRfUcGNHj0Cimnf6myyYHKqTJ/69iwzze2WfrmM=
Subject key identifier: EB:43:85:7C:11:0B:68:75:CB:B7:E8:F7:A9:62:7C:39:D4:7A:99:C5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F4092B4E604176A4F99374F219762BE2C6A53A7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3fc5e5a-c9c5-4e2d-9b90-c3e172f3d698.roa
Signing time: Mon 20 Oct 2025 05:00:08 +0000
ROA not before: Mon 20 Oct 2025 05:00:08 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:40:92:b4:e6:04:17:6a:4f:99:37:4f:21:97:62:be:2c:6a:53:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:00:08 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b1debd9a0eae3170be946d92ef91fae621890ebc175750c936157c1270495b6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:9d:33:f1:1f:b8:ee:3e:e0:88:06:bd:da:
cb:17:4d:a6:73:d3:e6:51:83:0d:7f:28:d9:a7:13:
ba:21:fb:97:e9:d3:c6:7c:32:1e:ce:d6:51:4b:c9:
cb:7c:1a:38:91:34:5f:28:32:31:bf:19:1b:bc:d8:
68:08:f0:9e:f4:9c:c4:33:42:2e:2d:77:2e:56:ee:
09:c9:37:cf:74:df:fd:ee:58:03:f2:57:48:8a:d4:
1a:75:99:73:b5:81:8b:13:fb:f1:93:3c:21:0a:66:
0d:45:20:53:06:b9:ed:c0:dd:14:81:a2:8c:9d:9a:
f9:90:fd:8f:04:89:c2:3f:db:de:10:e3:6d:38:9c:
39:be:53:31:d2:4e:32:4e:4b:94:3f:83:7c:43:37:
d7:3e:cb:7e:d3:a2:73:61:cf:9f:38:45:cc:a2:f5:
16:4e:dd:aa:ec:2a:90:fa:32:a2:ab:bb:d6:36:3f:
fe:de:41:a6:db:13:62:75:03:a4:a8:ed:ea:e0:a0:
71:6d:a4:79:8c:da:5a:f6:da:7d:5f:ae:2c:01:57:
03:52:aa:73:d1:45:55:6d:fe:d3:bf:2f:31:3f:a9:
15:ba:92:70:ba:5d:7f:8d:ba:22:90:43:c1:e0:f3:
a8:7c:9d:88:ab:84:7c:0f:d6:c8:3b:d5:9b:cb:2b:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:43:85:7C:11:0B:68:75:CB:B7:E8:F7:A9:62:7C:39:D4:7A:99:C5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e3fc5e5a-c9c5-4e2d-9b90-c3e172f3d698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.176.0/22
Signature Algorithm: sha256WithRSAEncryption
36:c1:ae:a6:c4:7f:cf:8c:1b:85:ec:6b:d9:d0:c5:3a:ce:c3:
6b:fd:d5:b1:0f:02:4e:9e:5a:28:45:26:3d:58:3b:8f:ca:0a:
ef:f8:d4:f5:4c:53:61:52:18:d0:84:17:8e:50:d5:09:bf:11:
01:22:96:95:44:19:06:5a:c1:bb:c2:19:62:7c:cd:2c:26:3a:
c0:a2:3d:d6:4e:ca:49:02:44:cc:b2:07:8e:d5:b3:95:9a:8c:
e5:38:b9:1a:cc:4c:ae:96:14:24:e6:88:0b:3e:6c:8a:e3:1b:
3b:63:f7:78:60:b9:05:95:28:9b:bd:80:7b:33:1a:09:ba:fd:
ab:15:1d:b6:31:14:e3:cc:70:7a:9c:5f:73:e6:0a:49:ef:cc:
34:73:c8:69:81:20:55:ea:81:74:d1:7e:bf:88:92:18:1d:8b:
28:24:9d:c4:93:d5:85:bf:72:95:06:91:7f:9c:96:da:16:79:
2b:0e:4b:84:6e:36:b8:42:96:a4:c0:92:c4:a3:20:71:29:f8:
86:4b:7a:da:40:32:d5:22:c1:c5:c1:de:2a:05:c4:f5:c4:84:
8b:b5:46:43:87:f2:14:7d:e1:7a:c1:12:e3:69:02:89:e4:26:
d0:2a:ad:5b:93:0c:99:b3:c8:f4:1f:c6:d3:e2:50:42:d9:c2:
f0:9d:68:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:40 2025 by rpki-client