Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
File: 08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa (raw, json)
Hash identifier: OMkkiPyJxyiYigCGjqBXNictrZigVQvc1nla0rN/1Z0=
Subject key identifier: A3:DC:B1:FB:20:40:B0:FA:D7:AA:B3:61:B7:92:25:32:B0:96:B3:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BF8459ECC09220408B6D82FCD13A5DC3AE0CCAD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
Signing time: Thu 13 Nov 2025 00:00:53 +0000
ROA not before: Thu 13 Nov 2025 00:00:53 +0000
ROA not after: Thu 18 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 104.153.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:f8:45:9e:cc:09:22:04:08:b6:d8:2f:cd:13:a5:dc:3a:e0:cc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Nov 13 00:00:53 2025 GMT
Not After : Dec 18 23:59:59 2025 GMT
Subject: serialNumber=4fb2db6f496a33813b62b6baff6a232466902d0416ea3497781691b418d0181a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:8e:d2:48:e3:b2:19:1d:db:0c:04:24:69:
bb:04:ce:22:00:ca:a5:09:1a:86:63:48:69:6f:67:
b2:08:ac:e1:a0:a0:bf:5a:4f:5d:c1:b8:d7:27:92:
5a:be:ab:dd:4a:0e:f5:43:b8:cc:14:9e:bd:7f:8a:
a7:d3:7e:29:12:1e:1a:fd:b5:55:47:9d:ca:1a:7e:
af:cf:83:66:f9:0e:5e:9d:48:28:f2:20:a7:b4:ed:
a4:76:28:9c:47:e4:8e:82:7b:df:69:e3:99:02:75:
9f:f6:d1:72:bd:dd:55:6f:c0:1f:2b:3d:49:b0:93:
e4:cc:00:cc:c5:57:74:4e:0a:9c:fc:77:b4:b4:37:
13:6a:00:3c:22:2e:88:b3:ef:b5:2d:b1:59:88:db:
a4:91:ec:8e:78:5e:93:17:33:a7:8a:08:3d:df:a4:
53:b0:24:3c:17:68:cb:c1:06:1a:3e:52:e2:a5:19:
46:6e:bc:3e:43:39:59:9a:07:4f:fe:08:f9:fc:45:
cf:f1:1a:e5:c3:cf:26:ad:77:1b:ba:ff:e3:f2:90:
b9:96:c0:44:4c:f9:93:af:c7:4c:85:44:cb:ba:c4:
f4:0c:64:cd:cd:ac:df:31:d8:86:ea:cd:f7:1a:3c:
02:78:bf:d4:69:77:e0:4c:24:38:55:2d:60:0b:ff:
20:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DC:B1:FB:20:40:B0:FA:D7:AA:B3:61:B7:92:25:32:B0:96:B3:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08f6921c-8b33-46e8-8cbd-ae0d5016bb70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:dd:77:0f:71:b4:32:4a:3c:0a:62:aa:9d:2e:0b:86:48:4c:
d3:e1:23:89:b2:82:f3:11:21:a6:1d:9c:a9:16:ed:1a:d7:1c:
c7:d8:09:e2:4b:b8:5a:40:72:e2:f1:93:94:c0:44:13:a1:6b:
da:6d:d7:3e:5b:89:bf:82:ad:e7:a7:ce:b8:bd:f7:24:93:c8:
d4:24:13:30:54:55:54:ce:07:69:c3:ea:55:29:be:a9:5c:d9:
e0:91:09:cc:38:aa:2a:61:95:d6:e4:c3:af:df:52:1f:57:2b:
a1:d9:9e:0c:47:57:40:f5:8c:a6:25:04:77:7e:ab:02:15:7d:
74:bc:06:a5:5b:33:66:ea:c0:e6:34:4f:73:0a:b6:89:96:c5:
c2:b4:8e:23:7c:c5:29:44:2a:54:65:15:1a:71:cf:1b:f8:90:
1f:ae:33:36:24:4e:78:ca:21:fd:28:f9:a4:40:52:66:69:ed:
fd:b4:e2:27:36:2b:d0:fe:dc:bd:de:ff:3a:47:b0:f3:36:ae:
ee:e4:cd:5e:d8:94:e9:b2:45:f5:b8:66:1f:ed:8b:d4:bb:01:
b8:fd:14:52:e0:c0:fd:fb:1d:81:c7:01:1c:87:aa:38:3d:2a:
59:b7:dc:fb:47:e5:10:af:e0:0d:b6:90:6b:74:e4:95:62:0f:
00:f4:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 07:03:28 2025 by rpki-client