Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eacc59a-b2f3-4cf2-b319-29fe449010f9.roa
File: 2eacc59a-b2f3-4cf2-b319-29fe449010f9.roa (raw, json)
Hash identifier: LQiuXErC4EtKwvU27sQmUnx4f4hGkCaqBh6SNcdD0RI=
Subject key identifier: 48:7B:B5:20:07:92:F3:B3:FC:F3:FB:02:10:D6:A4:EE:78:E6:86:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3427271A5AE587B6A75198E8C1A98CB5E57C9AB7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eacc59a-b2f3-4cf2-b319-29fe449010f9.roa
Signing time: Sun 19 Oct 2025 01:50:03 +0000
ROA not before: Sun 19 Oct 2025 01:50:03 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:27:27:1a:5a:e5:87:b6:a7:51:98:e8:c1:a9:8c:b5:e5:7c:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:50:03 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=eb07472c5236d62e6a23091761f3a0170b337a90273034ce1346dd1534325948, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:45:a1:cf:3d:67:12:47:fc:be:4a:c1:13:
08:0e:e8:6c:f5:a3:1c:4a:15:d6:e2:c7:87:03:a4:
e0:f3:a3:43:69:a0:70:e9:5c:58:2b:2f:fc:2d:aa:
97:c4:6d:71:ce:23:28:c3:2d:d6:9e:4a:9a:cc:9c:
87:24:83:ab:10:b5:57:ca:48:dc:5b:4a:50:ec:8c:
01:eb:7f:3d:a2:53:b2:38:7d:b7:3d:a7:92:2c:fe:
cf:fd:22:3e:b5:e5:91:1a:32:49:fa:ce:db:32:a0:
17:0e:e2:83:f9:09:4c:ff:2f:73:3a:70:9d:09:30:
38:69:e2:d7:3c:3e:f8:0c:6b:e2:fa:e2:0e:91:df:
9a:74:67:8b:4a:2c:af:95:5b:88:65:d6:00:d6:3f:
9e:ad:4c:ae:22:9f:8e:58:38:94:b6:ae:3c:d9:87:
e9:d2:02:ae:20:1c:95:a4:06:eb:67:0d:4a:b2:f4:
dc:2c:55:b3:d2:c0:f6:85:57:8b:10:1e:e3:a8:27:
69:ef:29:6d:1e:9b:a3:3d:de:76:fb:8c:38:d2:26:
f4:98:16:45:e4:b9:98:3a:ea:08:8c:56:3a:24:74:
71:c7:7c:e3:9e:fc:f3:3d:19:89:f7:02:8b:a9:ea:
7d:48:20:ee:c0:39:af:29:d4:f1:b6:b6:10:38:b2:
b0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:B5:20:07:92:F3:B3:FC:F3:FB:02:10:D6:A4:EE:78:E6:86:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2eacc59a-b2f3-4cf2-b319-29fe449010f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:32:09:4d:8f:2f:b0:de:50:bf:4a:20:2b:07:eb:cd:f1:98:
71:6a:6f:31:c7:bc:05:45:c7:e4:d6:76:55:eb:a4:43:bc:c1:
b8:9d:d1:34:72:e2:f9:73:c8:97:5c:56:8d:30:09:d7:6e:cd:
19:8f:ce:87:53:e8:eb:f8:f2:66:65:4d:34:a3:e9:e6:54:ca:
e2:3b:86:79:e3:20:39:33:c0:a4:a3:59:7b:07:b3:e5:e8:24:
c7:33:0c:d3:d1:0e:e5:45:7e:89:2d:1c:ee:1e:b0:60:b5:31:
aa:e1:3b:ed:10:cf:72:73:09:35:0a:33:a4:18:b0:d4:7c:75:
0c:4b:81:42:d8:5f:5c:4d:d5:4a:5d:0e:31:16:ab:d9:ab:cc:
4a:37:bb:06:e2:da:83:5d:ed:06:c7:b8:9b:a0:70:ba:e9:88:
4a:86:7f:14:45:9a:a9:60:3b:b3:97:6e:66:12:fe:bf:8f:8f:
ae:32:48:2a:07:f5:51:ae:cc:44:35:45:f3:0d:e6:de:0a:ae:
23:43:18:c4:59:3b:e3:66:d3:1b:5c:43:fa:b5:a0:02:e0:21:
15:f8:64:17:5f:10:f7:dd:40:4d:ec:47:3e:01:e2:8e:e7:95:
e0:aa:bf:3e:33:6b:b8:0f:11:67:3e:8a:97:93:91:6a:3c:22:
98:14:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:38 2025 by rpki-client