Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e5aa922-e999-468f-9a7f-fc46487c6346.roa
File: 3e5aa922-e999-468f-9a7f-fc46487c6346.roa (raw, json)
Hash identifier: 2PVRBspMmAB/SYCnCnR9AOnhZ8qUdDzzKTN510vQcIw=
Subject key identifier: BB:A4:72:72:E2:63:17:6F:6C:64:7F:F8:1F:48:8C:3F:B5:C8:14:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FC1BE30334F243BE761385E73A11E683F46ECC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e5aa922-e999-468f-9a7f-fc46487c6346.roa
Signing time: Mon 20 Oct 2025 03:30:20 +0000
ROA not before: Mon 20 Oct 2025 03:30:20 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c1:be:30:33:4f:24:3b:e7:61:38:5e:73:a1:1e:68:3f:46:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:30:20 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=8b6e5ee0ed4409d0f0851b6a97cd2912453ffddedb24a5ab813f4814c67c3c9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:22:70:f7:7b:04:8c:c7:64:fc:1b:d9:07:58:
9d:94:3f:a3:00:d1:24:81:fb:b7:4e:9a:39:27:0f:
a2:50:28:a8:39:01:67:39:18:fa:be:e0:a4:53:16:
ae:4b:46:d7:94:ca:18:14:2b:cd:e7:00:ae:05:4f:
6a:61:42:d1:be:ff:67:b6:a2:3f:5b:1f:40:67:50:
87:53:d3:86:f4:21:46:e9:f5:53:c4:44:b9:70:72:
92:3b:40:f9:c1:6c:02:78:e8:9f:fd:7d:10:37:f2:
4f:18:1d:b4:71:2b:63:e4:34:e4:a5:3e:35:c3:d5:
e8:b4:6e:4e:8c:5b:79:79:24:5b:f9:cd:4f:ef:ba:
2f:47:4e:18:58:43:48:7a:55:cb:23:26:93:f4:8e:
ba:ee:65:b0:89:5b:b5:3d:4c:a5:f2:be:0a:62:aa:
94:05:8e:33:4b:b5:e1:11:d0:50:1d:70:44:85:9f:
5c:19:2f:21:bb:b2:e7:11:22:3f:11:57:ff:18:a2:
94:2c:75:f7:0a:50:6d:d9:bb:f6:ba:49:3e:e1:41:
40:53:7c:e5:29:2f:ed:b3:d9:7a:9e:cb:5d:15:88:
b6:ae:0a:eb:4e:d9:58:76:52:5d:5a:21:01:b9:17:
a0:4a:57:56:19:e5:f1:96:ca:1b:20:a8:cd:5d:49:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:72:72:E2:63:17:6F:6C:64:7F:F8:1F:48:8C:3F:B5:C8:14:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e5aa922-e999-468f-9a7f-fc46487c6346.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.163.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:43:2a:4f:c5:59:6d:37:82:f7:fa:27:9f:83:21:7b:21:46:
ed:65:41:09:c0:68:76:50:ed:ec:80:00:59:79:32:b4:0c:52:
6a:cf:15:93:ce:5f:63:58:50:4c:fc:5f:e6:5c:43:99:c2:69:
2a:45:11:ad:89:1b:fd:e8:85:06:ef:64:47:7a:dd:59:9b:09:
b7:05:b7:b7:74:e9:a6:dc:fe:66:27:7f:fc:f6:06:c8:86:be:
1d:0f:7e:e4:7c:46:f4:59:10:72:ae:c4:b5:d0:45:02:d5:27:
df:93:3a:8d:f5:07:ae:ca:22:01:56:e4:5d:4a:d9:56:6d:62:
aa:1e:04:6c:b2:b1:b6:6b:d8:a4:4e:19:e6:ad:fb:63:24:b3:
76:e3:48:e1:58:97:b3:c2:26:54:ef:6a:78:7b:00:6c:c2:7d:
7a:a5:32:ba:c8:a5:cf:4d:71:2e:2b:c7:8d:91:55:82:f6:f5:
37:82:95:10:4f:8e:67:83:21:89:55:92:6e:c6:0a:7c:7c:c4:
6e:74:e4:ab:0e:40:0b:82:c8:09:c8:2e:a5:1e:71:c6:ec:19:
eb:e2:48:24:8c:09:23:1a:99:be:8c:b2:61:0b:b0:bc:66:eb:
88:05:50:59:06:20:4e:e3:89:4c:d1:19:ba:26:8e:2b:8b:a3:
09:0d:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:04:43 2025 by rpki-client