Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae64682-41cf-4f42-be53-e7f8e25e3de6.roa
File: fae64682-41cf-4f42-be53-e7f8e25e3de6.roa (raw, json)
Hash identifier: qSiJPMURXdc26RjpSrmefGluFAUiQIJ/E3VZLW4cOd4=
Subject key identifier: 00:38:CD:CF:44:12:AC:D2:9D:9D:0D:AF:01:75:98:BD:BB:17:54:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4837E1093B551DEB617B99453A8CCE8E626F128E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae64682-41cf-4f42-be53-e7f8e25e3de6.roa
Signing time: Mon 20 Oct 2025 01:41:34 +0000
ROA not before: Mon 20 Oct 2025 01:41:34 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:37:e1:09:3b:55:1d:eb:61:7b:99:45:3a:8c:ce:8e:62:6f:12:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:41:34 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=659cb1d798849167b0ffe75c238022723c8bea40316c4cb08879c457072446f9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:52:49:07:09:f3:56:c6:6c:70:33:ad:41:
b2:a4:98:86:50:7f:30:a6:fe:1c:c2:e0:fe:0a:cf:
26:d6:d2:0f:2b:17:56:35:b4:a3:a5:f4:ee:5f:92:
3e:d0:ee:14:3b:05:f6:bb:e0:07:26:34:87:82:7c:
8a:56:c3:65:05:99:89:a6:26:03:22:c9:2a:a6:5f:
5f:0a:d6:2c:7e:6d:6a:30:1f:46:54:fa:5e:a5:be:
15:5b:d5:ce:b3:c1:5e:89:50:a6:be:20:3b:ae:1b:
d7:61:df:51:f1:4f:c4:b8:35:ff:60:c8:0d:96:10:
44:9f:a8:a4:28:b3:2c:dc:76:b1:e4:e6:a0:38:98:
b0:6d:77:58:ac:a1:09:c8:2d:75:7e:61:09:f3:ef:
13:62:85:65:a6:6f:0b:81:64:a1:6a:6f:61:3a:29:
14:9d:8d:d2:42:73:81:ce:78:27:03:9c:56:4e:75:
e8:86:b6:09:15:c7:fb:f2:89:97:e7:0e:4e:c1:96:
28:03:45:92:4e:50:e7:79:ef:d9:3e:08:b0:a9:f3:
1f:b2:1f:ed:29:91:83:83:49:19:d1:b0:89:b9:65:
54:cd:bf:62:50:81:4c:9a:00:47:dc:71:44:83:15:
d9:89:da:9a:b0:f7:aa:e0:44:f8:cb:0a:98:15:d6:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:38:CD:CF:44:12:AC:D2:9D:9D:0D:AF:01:75:98:BD:BB:17:54:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fae64682-41cf-4f42-be53-e7f8e25e3de6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.64.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1b:58:d8:ad:c2:f3:4f:ed:c9:5f:bd:d2:6b:a7:88:ff:c9:
e8:06:ae:ce:19:c2:2b:39:c6:d3:35:f9:50:f0:e6:8e:87:0a:
17:21:fd:81:d0:76:37:51:43:e3:24:b8:9a:fa:ed:b8:dd:e7:
c0:73:b9:b3:05:e0:26:00:47:70:7d:72:78:f1:f4:5b:29:0c:
23:4d:6c:45:79:fc:8a:34:1f:6c:ef:88:50:59:c9:b4:c3:80:
1e:bf:7e:19:79:78:2e:67:d5:5e:82:c4:21:f7:52:35:0f:43:
89:dd:41:ff:52:8d:06:43:0c:fd:d4:83:58:f2:4d:c5:ad:69:
2b:b0:a3:74:e4:44:14:ef:97:09:75:26:72:cd:a4:f9:ad:87:
d7:2d:59:2c:99:72:e5:04:92:6f:88:96:a1:bf:53:02:39:e0:
ce:66:81:30:71:32:f0:ac:9a:2b:0d:26:01:f0:1a:17:4f:1c:
89:de:83:c3:6b:27:e4:8b:8d:50:d7:27:cb:73:f3:09:ab:fa:
52:83:f4:e9:f8:df:b1:64:cc:6e:17:cb:d4:d0:c9:e4:43:22:
c7:db:8f:23:02:dc:69:ef:50:c8:4f:4c:e4:d4:6d:13:16:6e:
6a:e7:5c:29:53:8f:fe:20:bf:a2:96:9a:e5:87:b6:59:ec:e3:
9a:41:be:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:16 2025 by rpki-client