Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0b7acf2-3ce1-4b2f-be4c-be78caea046d.roa
File: f0b7acf2-3ce1-4b2f-be4c-be78caea046d.roa (raw, json)
Hash identifier: uC+RTXLqqMXReWORetlD4baSeiu4s7LXDkThPcQ9zjY=
Subject key identifier: CB:6C:27:42:DE:FB:5A:85:7A:02:C9:1F:FB:1C:A3:B1:54:9D:1F:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01C29F8B23EEDA63C99D917B0A980BC693991597
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0b7acf2-3ce1-4b2f-be4c-be78caea046d.roa
Signing time: Mon 20 Oct 2025 05:10:10 +0000
ROA not before: Mon 20 Oct 2025 05:10:10 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c2:9f:8b:23:ee:da:63:c9:9d:91:7b:0a:98:0b:c6:93:99:15:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:10:10 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=fc4cb10f05400d70eecd60c97c87ca7cd1c9c3bca1ed70a28898fce8360b4519, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:d6:ec:92:89:67:9c:6d:e9:f0:58:b5:8c:
2d:32:34:39:11:92:cb:8a:29:96:f7:d4:be:0b:f8:
33:3a:41:84:d7:45:fb:f0:45:9d:a5:9e:80:57:49:
34:89:ed:14:0d:06:05:10:db:7a:dc:13:bc:87:b1:
fe:e8:96:85:80:f1:c7:36:c5:0b:0f:98:40:46:2a:
3b:11:16:b5:ba:1f:6d:a8:36:e4:e4:79:33:7a:da:
01:12:8f:44:8b:c1:59:96:02:3b:ee:ce:2f:db:64:
b0:df:19:6f:d0:44:0d:ff:b6:b3:62:83:da:41:78:
02:90:94:bf:49:de:aa:0a:4b:da:7f:7a:ae:69:b7:
2b:5e:7b:6c:a8:2e:e3:8d:4c:cd:32:d1:2b:f8:33:
b3:a0:27:00:58:6b:49:20:15:86:27:12:fc:01:61:
12:49:1a:87:33:d4:9a:86:a8:f1:94:2b:2e:a0:30:
fc:f3:34:b8:dc:30:1f:ca:d0:3f:1e:15:32:21:43:
70:9a:d8:06:b1:23:26:74:09:a4:82:ed:d1:3b:d8:
f5:b4:c7:ab:60:5b:ba:bd:7d:ad:4e:0e:e8:bd:f1:
92:7c:79:de:c4:27:1c:bf:46:f7:90:71:d8:ed:83:
24:63:b8:a0:51:15:17:10:8b:35:64:21:30:71:ea:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:27:42:DE:FB:5A:85:7A:02:C9:1F:FB:1C:A3:B1:54:9D:1F:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0b7acf2-3ce1-4b2f-be4c-be78caea046d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.248.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:8c:9d:22:62:70:f8:87:b3:ba:ea:93:99:36:31:a5:3f:c5:
27:63:b9:3c:9f:08:b8:1a:f3:a5:3c:42:ec:3e:d9:ed:64:9e:
11:40:f6:97:45:ec:90:4e:9d:41:b1:1c:3b:2b:fd:ed:e4:49:
0d:d4:12:ce:eb:d5:79:ff:d8:f9:aa:bd:6a:13:f9:c0:2a:cc:
c0:8e:a6:87:6e:7b:6c:d8:12:6a:43:a6:5d:09:bb:55:f2:f6:
ab:d1:bb:d7:40:df:c0:23:b6:ef:9e:e7:b6:9d:60:cd:74:d1:
46:18:13:1e:56:6a:c3:56:b8:21:88:87:a0:8a:01:30:17:60:
f6:98:bf:22:4e:ac:31:5e:88:e8:1a:ad:22:ba:18:84:bb:14:
9c:e0:c3:e2:f4:8b:ac:3b:fd:a7:5b:e5:58:8b:ed:28:72:dd:
25:05:b1:b6:35:80:36:af:cc:5f:8b:f2:c1:84:25:2c:82:cf:
fe:17:fa:f2:0b:d5:8e:38:f3:9a:d4:43:22:0c:03:fe:ee:87:
a1:d2:ef:8c:62:8a:1c:84:74:84:80:77:2c:9c:d8:99:06:96:
69:e9:5a:16:2b:3e:e6:fd:b2:6e:8c:d2:f1:5e:e2:d4:72:95:
83:9e:10:c1:aa:7a:33:99:c2:39:1d:b2:8a:2a:62:82:54:a9:
e5:17:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:50:01 2025 by rpki-client