Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f51983a9-6ee2-45e7-be1b-d2ee1f617f78.roa
File: f51983a9-6ee2-45e7-be1b-d2ee1f617f78.roa (raw, json)
Hash identifier: Ewlq7iiy8JTBCaiXec7L0bjN/jmyl/iPXZgGZXxQPxQ=
Subject key identifier: 57:CE:F8:6F:17:38:DF:2F:2A:D8:87:5C:93:58:54:10:02:07:DC:5D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B244A953C4234162761ED411B5EAE6163BD3085
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f51983a9-6ee2-45e7-be1b-d2ee1f617f78.roa
Signing time: Mon 20 Oct 2025 01:50:12 +0000
ROA not before: Mon 20 Oct 2025 01:50:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:24:4a:95:3c:42:34:16:27:61:ed:41:1b:5e:ae:61:63:bd:30:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:50:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=21a2421b18b05475beef6a0fcaffb5b11ec5952895e8a494cb83bf6384ad364b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:b1:75:70:52:96:05:77:b1:1d:fb:06:e8:
d1:8b:05:4a:ae:ff:1b:0a:ff:90:a7:a1:89:9f:4f:
fb:36:bf:a1:0b:88:a5:5c:c6:15:00:37:73:10:db:
36:ca:7a:2b:01:2b:ab:dc:db:a8:d3:85:cb:e2:1b:
3e:c8:66:30:9e:d7:83:ce:55:18:cc:c3:ca:15:15:
0f:aa:32:6a:81:9e:b2:b8:7a:8d:8f:d3:46:02:3a:
fb:5e:7b:fd:c8:42:9d:7c:0c:47:65:36:d6:9d:1c:
dd:f3:33:17:47:82:35:ef:f4:fb:84:57:a7:b9:4e:
65:43:b5:57:fe:e4:1f:af:1f:e2:66:55:d5:f5:35:
b1:2d:05:30:36:be:51:b2:ca:47:d6:dc:66:d3:5e:
fa:bc:55:01:f3:ea:d6:55:71:fe:e2:aa:e1:ef:33:
df:4a:d8:98:83:a9:90:7b:5c:63:b0:73:16:ea:f1:
9d:d7:8d:db:67:b0:07:6b:54:59:7e:20:ff:ac:d9:
84:55:12:45:24:38:01:19:99:c0:77:b3:11:cd:6c:
d5:c3:a2:bb:a5:d3:0e:d9:0f:28:a6:11:7e:20:66:
ab:b3:b0:81:1f:48:4f:54:2a:52:c0:b3:72:1d:2d:
98:3d:19:b8:74:b8:47:b5:71:52:e1:d3:c2:30:fc:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:F8:6F:17:38:DF:2F:2A:D8:87:5C:93:58:54:10:02:07:DC:5D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f51983a9-6ee2-45e7-be1b-d2ee1f617f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:43:b7:4f:5f:74:46:7f:65:18:21:c7:a1:ca:a2:71:0e:6b:
91:0a:02:61:a1:cc:1e:da:5c:2b:71:7a:f7:b5:c2:4b:41:9a:
b0:c6:e2:a1:9b:6d:50:1e:be:2a:2b:ac:64:c3:27:c5:8d:33:
cf:09:cd:c8:a2:68:b4:11:ac:53:ec:8b:2f:9e:5e:33:1f:0f:
eb:da:6e:b9:4f:12:07:c8:7a:ac:3f:4f:94:6f:61:3c:5a:94:
a5:3c:c3:10:62:c5:10:6a:22:2c:05:ca:9a:da:1a:cf:31:54:
bb:1f:be:b6:37:ae:21:ad:ee:aa:fc:8f:d9:ba:2b:3e:ce:83:
de:fe:8a:47:ee:ca:1f:7a:9a:d8:13:02:94:43:c3:15:ad:b2:
ff:e8:ee:d8:54:8c:e4:38:72:83:99:81:31:2b:32:49:b4:fe:
7e:43:5e:a6:f0:be:d7:dd:c2:d1:e6:62:f3:ce:5e:2a:de:17:
5e:ae:8c:0c:e6:4d:30:c5:df:9f:df:eb:65:ea:1c:e5:5f:bd:
c0:02:b6:80:02:c2:2d:4c:1b:f2:9a:3a:ad:90:df:b2:db:b5:
a6:5d:4b:98:7b:bc:3d:28:f6:06:2b:ff:9e:f7:95:8a:3f:be:
81:d1:a9:13:d4:f0:95:89:19:e3:30:d7:17:8a:a8:43:f3:6d:
3c:50:b2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:23 2025 by rpki-client