Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e213787-9703-479e-9880-b3f85a1523da.roa
File: 3e213787-9703-479e-9880-b3f85a1523da.roa (raw, json)
Hash identifier: X3TeYgxAM4zeB7qmqCs+BOFhYBvmgpSJOc/OE+XN8JA=
Subject key identifier: 2E:BA:F0:B8:3A:A0:57:C9:93:F5:72:B7:34:BA:97:6E:7F:B9:12:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 386C5541A292096ACD1E549DB45DB0E2C8114A76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e213787-9703-479e-9880-b3f85a1523da.roa
Signing time: Mon 20 Oct 2025 01:20:48 +0000
ROA not before: Mon 20 Oct 2025 01:20:48 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6c:55:41:a2:92:09:6a:cd:1e:54:9d:b4:5d:b0:e2:c8:11:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:20:48 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=0249b9dd4fd0b36294b881673e0d8b5bd78508ac41a87d80e225ea85baecb0a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:00:8d:7b:d2:36:b2:b8:89:ee:7b:d9:f3:
e7:94:28:6a:43:8a:63:c0:d7:71:93:c9:88:cf:dd:
e4:2c:4f:a4:26:63:a5:af:fa:da:ee:9b:7d:11:e7:
17:89:6e:13:52:f9:5f:1b:f0:5b:1f:9e:8b:b2:cf:
8d:e2:a5:05:54:6c:5e:bd:39:1f:7c:6d:cd:d1:fb:
ca:dc:94:97:cc:9f:fd:49:18:d5:3c:9d:6a:24:66:
0c:3a:f9:38:cd:67:86:6c:49:ca:e5:1b:a2:2c:bf:
1c:eb:3c:d4:fa:78:98:a2:18:f1:2a:12:27:6b:06:
ef:49:dd:f9:b4:7d:26:ee:17:b1:ba:a1:ce:7e:0d:
b5:0b:46:67:46:f3:d1:bb:d6:f1:de:88:f7:bf:61:
e1:49:1d:66:7d:81:8f:68:e3:44:ea:1b:44:f7:22:
c2:05:b3:ac:36:95:a5:e2:f6:30:c5:a8:42:67:0b:
7a:6d:25:e7:78:2d:d5:13:93:1d:73:ad:cc:9c:1c:
89:1e:56:36:47:ec:ba:13:3a:43:b8:85:ea:8e:d2:
cc:d2:70:23:f3:f5:39:27:a2:5d:a3:19:66:bb:86:
04:10:47:0d:2d:57:14:8a:8a:47:dc:4b:cb:3f:69:
92:38:9d:a3:a5:e8:cf:16:61:95:55:3e:c9:1f:31:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BA:F0:B8:3A:A0:57:C9:93:F5:72:B7:34:BA:97:6E:7F:B9:12:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e213787-9703-479e-9880-b3f85a1523da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.85.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:f0:e1:ca:d1:0b:9a:34:9f:4a:55:3e:e3:86:ae:56:4a:48:
ff:7b:41:f3:73:17:ba:5c:12:48:ec:6f:3f:e3:56:7a:11:69:
29:f7:30:6a:eb:b2:4a:f9:0c:de:bc:8c:48:53:f1:3e:65:1f:
b6:92:29:1b:97:fd:3a:9c:76:93:fd:79:7d:eb:2b:04:22:23:
83:2d:7e:69:92:75:f9:c1:3f:e6:31:26:df:7f:d4:63:9e:a1:
4e:bb:cb:a2:06:76:c8:8f:c4:be:07:47:0d:87:0e:1a:da:05:
46:6d:75:37:e2:32:56:63:be:b6:89:c7:98:29:8e:47:d4:d2:
46:dc:48:3f:61:98:7c:77:58:03:50:6a:60:33:e4:ed:d3:13:
80:57:dd:7e:aa:dc:30:d2:40:2c:69:4c:0c:ea:f3:bd:a7:00:
d4:ea:bb:e6:c8:a2:21:8f:bd:04:4b:81:f8:51:63:7b:85:62:
a2:fa:73:47:6b:fe:a0:68:09:19:63:e9:88:e9:37:45:a5:24:
54:d3:1a:53:e6:11:70:f2:27:e9:f5:bf:73:c9:34:d9:c5:2f:
2b:2f:89:dd:cc:45:59:2c:48:e2:d4:0d:dd:b4:f0:ff:5a:0f:
eb:79:5e:ee:88:34:b9:94:91:e8:52:09:bc:cb:2f:f2:3e:03:
cb:b3:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:17 2025 by rpki-client