Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eea70bf8-5cd6-4ce0-9c8b-36c12400a7c3.roa
File: eea70bf8-5cd6-4ce0-9c8b-36c12400a7c3.roa (raw, json)
Hash identifier: 0kL9catngNldFYgKlHqfAtdxYdHHhzWp1ojxL+cks7Y=
Subject key identifier: BC:B8:02:31:9F:C8:E4:3D:96:F3:17:61:39:59:94:27:87:EC:E6:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67827FEA5D6ACEBFDC6D237A7AF91896F07293A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eea70bf8-5cd6-4ce0-9c8b-36c12400a7c3.roa
Signing time: Mon 20 Oct 2025 02:30:16 +0000
ROA not before: Mon 20 Oct 2025 02:30:16 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:82:7f:ea:5d:6a:ce:bf:dc:6d:23:7a:7a:f9:18:96:f0:72:93:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:30:16 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=ef11b18da5b4e41ffa82f8ca9229326cae06bd4c17aadcdab7182dfc48babe8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c9:56:7f:84:46:33:d2:d9:47:a7:f0:9c:fd:
68:95:ab:f8:43:83:a4:7c:39:a0:f9:b9:20:f3:e8:
48:b6:16:c2:15:10:1d:0e:88:84:8b:09:ef:0a:36:
14:ec:67:68:e9:91:6d:29:9d:bf:1a:28:ef:d0:e0:
3b:91:c3:f6:3d:e4:de:a0:92:54:70:37:e7:aa:9e:
63:8c:ef:89:ee:30:d7:d3:0c:33:3e:52:d9:26:58:
fc:b6:4a:02:e1:35:b8:6d:19:46:c0:e9:d9:ba:9d:
70:e8:df:2a:46:49:38:96:6e:a8:a8:61:6c:b9:a5:
04:79:cd:17:17:c5:80:fc:35:12:d0:b0:54:0b:fd:
73:97:15:fd:41:92:9f:e1:77:56:72:13:04:59:66:
c6:6e:7b:c4:83:b5:5e:08:de:71:48:37:1c:df:83:
95:91:f6:c0:42:2e:69:a8:6d:3f:b9:96:d5:87:29:
14:8d:fa:19:43:be:de:94:61:d4:88:36:31:2e:f5:
0e:a5:ce:db:4c:55:a1:72:b8:68:56:c7:58:c2:cb:
5d:7f:a8:0b:23:98:70:42:21:ca:19:2e:04:70:6a:
91:71:65:c1:55:b3:bf:18:b1:64:0e:62:30:8f:c0:
be:dd:ab:13:3c:f1:03:5f:c3:ff:a2:04:42:00:74:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:02:31:9F:C8:E4:3D:96:F3:17:61:39:59:94:27:87:EC:E6:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eea70bf8-5cd6-4ce0-9c8b-36c12400a7c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.128.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:02:b9:a8:e7:39:88:be:3b:6c:d3:35:96:36:2f:7d:1d:cf:
15:93:d9:06:3a:83:59:a7:06:d5:7f:6f:86:ae:ca:e9:53:54:
a1:9a:f2:aa:57:7c:93:2d:82:12:87:21:56:bc:89:09:a8:3d:
72:92:58:9d:12:83:42:92:c0:0d:2f:53:cd:3f:82:11:31:b7:
63:6d:db:a5:f6:b5:54:31:65:f8:cc:3e:46:84:d4:46:70:55:
bd:74:0a:6f:8f:8b:eb:5a:a9:19:df:50:66:3d:ca:1c:fe:40:
57:2c:31:75:41:a1:69:8d:d3:c5:a1:e2:fd:14:08:3c:10:45:
d8:ff:13:d6:38:7b:ae:17:4a:55:35:dd:22:46:fe:65:d3:08:
e2:7b:0d:58:1f:14:6f:51:b7:0a:b5:8b:7f:10:c5:b4:d2:97:
53:ee:ff:d4:50:1e:ea:43:0c:d0:1a:cb:dc:2f:18:50:10:64:
d9:0a:e2:4f:9a:5e:97:76:cc:8e:c8:93:5e:95:1d:55:49:30:
c9:cb:4d:38:3a:85:16:dd:ef:f2:a0:d6:69:25:09:f3:1d:b5:
03:e9:1d:30:fe:d8:85:47:18:ed:5d:ce:a0:72:97:36:f0:b4:
6f:8a:44:d5:1f:90:79:bd:56:db:15:4b:44:96:71:dc:c7:41:
57:b6:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:21 2025 by rpki-client