Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2619b5-814a-496d-852b-9403484818e8.roa
File: eb2619b5-814a-496d-852b-9403484818e8.roa (raw, json)
Hash identifier: oCHnF0VYjaeyief9d8PXsBWlLO+sbkpgK581VXvBVfs=
Subject key identifier: 9D:88:CC:97:B6:9A:80:D1:BD:B5:7F:69:E4:0A:5B:5F:86:72:26:3A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BC3B8F92CA67E347547A9AD32F00C96E79FD356
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2619b5-814a-496d-852b-9403484818e8.roa
Signing time: Mon 20 Oct 2025 02:32:31 +0000
ROA not before: Mon 20 Oct 2025 02:32:31 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c3:b8:f9:2c:a6:7e:34:75:47:a9:ad:32:f0:0c:96:e7:9f:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:32:31 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=c58529801dfb25362e80c96129d4a0110a3b3b5b709661b1b14453127fcffa4c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:34:48:db:72:62:a6:ed:b5:01:b0:c0:73:16:
e2:aa:53:44:ff:40:2c:f6:e3:a1:51:61:a3:3a:97:
a5:8d:04:f7:f3:83:bf:3d:1a:14:30:ad:25:fd:20:
f4:36:8d:48:34:24:95:81:75:cc:53:44:d7:74:ff:
bc:4f:03:3a:1e:91:43:f2:7d:03:f7:fb:ec:c4:11:
b4:06:80:50:54:9f:37:15:dd:f7:87:30:48:f1:e4:
db:35:25:28:02:dd:22:1e:85:9f:59:0a:21:06:60:
22:ec:ea:69:f1:f6:45:8b:8d:22:4a:ef:cd:ac:cd:
f8:7d:4d:9d:55:ef:6e:67:b8:9d:4a:9d:a8:fa:30:
19:22:10:10:31:ee:40:a7:8b:33:f1:bf:a9:23:2c:
d7:21:e8:24:6e:2d:12:d1:79:a0:14:25:a4:e8:c2:
c4:81:cf:3e:5e:75:6a:df:03:59:5a:18:52:ec:ad:
67:1a:14:e1:27:63:35:1a:21:5e:6d:90:47:5d:47:
5a:9d:36:c5:94:d6:f5:ef:51:10:f3:e0:67:d3:82:
71:c7:49:bc:f5:1a:62:7e:9a:3f:70:f9:e6:36:9a:
0e:88:fd:85:86:61:40:e5:d4:0b:d6:87:9a:a2:9e:
98:ef:7b:cd:8a:06:df:04:2d:6c:c8:15:a6:a8:06:
a0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:88:CC:97:B6:9A:80:D1:BD:B5:7F:69:E4:0A:5B:5F:86:72:26:3A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb2619b5-814a-496d-852b-9403484818e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8c:59:42:d2:d2:b5:0c:0d:eb:a1:9c:fb:f0:fa:7b:77:bd:
8d:10:cb:7d:86:bb:e8:aa:80:af:dd:f8:b9:08:6f:23:43:d4:
13:db:26:ce:cb:07:9f:46:09:d5:3d:e7:2a:cd:4d:73:86:3b:
e9:b4:13:6b:f1:c3:61:89:28:16:c1:b0:49:c8:3e:83:f7:a0:
db:d3:01:85:20:de:0e:6a:38:e5:9f:c7:7e:ef:97:e6:c5:18:
8d:77:0e:13:72:92:6f:5f:fb:3b:52:14:de:d5:86:01:ae:23:
87:42:6d:10:56:05:63:cf:ca:8f:04:63:bd:ca:68:06:a5:bf:
87:e0:9a:58:11:29:0b:7f:86:dd:b2:36:b9:42:01:12:31:b9:
60:96:c7:b0:44:c7:95:10:ca:e2:89:ca:a2:98:73:34:0a:66:
2c:d1:8b:a9:9e:68:c7:92:2d:da:de:ba:26:ad:1a:c5:41:6a:
e0:99:9d:a0:22:d9:53:7a:34:84:2d:fe:e2:fc:23:0d:df:19:
73:3b:97:96:59:fd:c8:af:42:f2:14:d1:84:9a:6a:06:96:66:
b1:f6:2b:9c:0f:f6:01:c3:9c:05:39:07:42:c1:b5:f8:58:ae:
a7:a6:d1:a6:f2:c7:a8:c1:f6:f9:4b:df:41:b5:67:e2:7c:d2:
f5:6b:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:27 2025 by rpki-client