Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9944175-c16a-4463-8645-20fe326c9aa7.roa
File: f9944175-c16a-4463-8645-20fe326c9aa7.roa (raw, json)
Hash identifier: ksR1429cOm6nGvog7sjokgsZow02mbZ3nZlLqfJyBp0=
Subject key identifier: 98:D2:88:66:0B:C2:4C:4B:F6:20:E0:8C:09:0C:9F:B0:B8:10:43:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E13428FCDB7887173D408EAA3C4180F03AB60BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9944175-c16a-4463-8645-20fe326c9aa7.roa
Signing time: Mon 20 Oct 2025 01:01:28 +0000
ROA not before: Mon 20 Oct 2025 01:01:28 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:13:42:8f:cd:b7:88:71:73:d4:08:ea:a3:c4:18:0f:03:ab:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:01:28 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=41b8710ded9361c6413f210730326b06ad797707ad8eea133f14c75377a314dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:95:01:3b:06:9c:97:95:40:10:aa:32:9f:
c3:c8:11:78:9a:2c:23:02:96:96:6d:b3:24:be:71:
be:e3:7b:3d:36:9e:0b:9f:99:7c:e2:2d:35:7a:40:
0f:1a:a2:4c:e3:48:62:0d:fd:aa:e4:e5:cd:9f:4e:
5f:c9:2a:42:e1:25:33:16:13:e2:9a:35:74:a6:5c:
c0:f8:f9:51:23:25:04:46:27:59:68:7d:28:05:a2:
1f:00:ad:5a:1d:1c:98:60:62:8f:47:21:16:7c:d9:
60:fb:6f:2b:52:49:51:f6:be:f7:2c:99:a6:5b:77:
09:58:63:93:8b:b4:b0:1f:93:ad:44:8e:b7:91:a2:
5c:17:9c:00:56:92:cd:f8:c8:26:c1:87:7e:26:35:
f6:3d:fb:0f:13:77:bb:6a:c4:9b:7a:af:ea:be:9b:
53:85:8e:5c:77:67:d6:be:f6:cd:1e:ce:1e:bb:01:
08:13:f8:f9:2c:43:eb:70:f9:4d:87:90:c0:3a:d3:
3d:95:c3:b3:3d:fd:b3:bc:0c:51:68:a6:e0:2c:72:
98:65:56:ae:90:d8:12:f8:f9:d7:f3:6d:96:fd:21:
7e:81:4a:de:cb:7b:d6:5c:4f:45:34:2c:d3:85:41:
fb:9e:e1:de:e7:dd:02:a8:73:24:4b:bd:24:53:35:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D2:88:66:0B:C2:4C:4B:F6:20:E0:8C:09:0C:9F:B0:B8:10:43:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9944175-c16a-4463-8645-20fe326c9aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.224.0/22
Signature Algorithm: sha256WithRSAEncryption
10:9e:eb:73:49:be:82:5e:4c:0b:27:de:ff:51:f5:a7:30:6c:
8f:c5:5a:d4:b3:15:ac:24:c6:39:21:11:be:af:ea:45:b7:12:
06:46:ce:4f:da:0d:4a:89:67:2d:b3:d7:ce:e0:0b:9d:23:87:
6b:50:04:b7:66:29:1e:0d:65:e8:fd:9f:09:6d:8c:72:57:0c:
94:76:52:0d:a5:8a:c0:44:90:b0:8e:fb:76:80:a5:cc:46:09:
31:c9:1a:0d:6a:8e:c8:42:f0:0a:8a:63:ef:fe:1d:75:10:5c:
71:32:f7:1b:52:8c:17:48:ce:bc:b1:98:1b:24:94:0a:8a:bc:
53:68:b8:c6:0b:9e:95:a4:ab:c0:b8:3e:9d:c3:27:b1:82:e3:
11:0f:6b:e9:5e:3e:0e:25:cc:97:69:58:f3:a0:5d:70:16:d5:
0e:3d:73:33:f6:1d:d4:44:e2:4a:af:59:5e:57:31:20:65:21:
0d:38:ad:42:cc:2d:e1:06:6c:97:f0:35:c5:6b:01:02:a5:a6:
dd:62:07:98:0e:68:f8:d1:9a:41:a5:59:ea:37:b5:75:eb:cd:
10:7a:6c:22:03:93:0d:fd:d3:64:9e:81:ef:fc:27:de:eb:3b:
02:3b:54:16:21:16:5c:e2:13:9d:50:da:2e:50:ab:9a:ee:29:
52:dd:d1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:19:17 2025 by rpki-client