Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44965b3a-1cf7-4b99-ac2b-0727fd23d6bb.roa
File: 44965b3a-1cf7-4b99-ac2b-0727fd23d6bb.roa (raw, json)
Hash identifier: teeO1J/RrZQpGY+w+ek9F9b0WrmfojYNrR9hUNQxfVg=
Subject key identifier: D9:1F:28:4F:EE:62:C7:E9:40:AF:36:4E:42:63:F1:53:0E:C7:5D:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13C865588E635F8EB1E0326E95BE1811B2AE8993
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44965b3a-1cf7-4b99-ac2b-0727fd23d6bb.roa
Signing time: Mon 20 Oct 2025 01:51:54 +0000
ROA not before: Mon 20 Oct 2025 01:51:54 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c8:65:58:8e:63:5f:8e:b1:e0:32:6e:95:be:18:11:b2:ae:89:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:51:54 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=1f29f02b7503389bef76bb9ffc920318fdb28f40c686581ed14016d526dd0315, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7f:e1:d3:c5:d1:8a:8a:67:50:76:58:b4:6c:
63:7a:03:ab:da:b6:30:67:2c:50:62:70:61:c2:55:
59:7f:29:81:a4:c3:6e:10:6e:5c:d8:04:a3:31:b4:
ad:18:4a:6e:93:46:87:e0:6a:65:4d:69:4f:05:1c:
84:87:38:0f:13:17:84:c2:e2:5b:96:1c:45:39:24:
27:1c:1e:d7:8a:27:af:c8:ea:3a:02:45:fe:d6:71:
5a:05:2a:1e:eb:ac:78:c4:ba:65:39:fa:aa:15:b0:
14:d5:3f:d7:86:f9:e6:e5:8b:ab:ee:57:e2:99:c2:
e4:c4:0b:e8:a1:36:b5:3f:06:3a:27:ee:42:3f:c8:
0f:03:34:d9:37:fe:40:97:3b:33:a5:0f:a7:00:2f:
0a:a6:b5:e1:1f:2b:fa:e6:d7:b8:1b:74:52:bc:aa:
dd:92:d0:d1:52:46:e9:bb:de:81:52:e8:85:11:92:
9d:e3:ed:0c:3c:84:76:08:0e:37:3b:55:f6:47:77:
05:fd:1a:93:ac:e5:31:2b:05:0d:7a:fa:7a:66:35:
1f:f8:1d:18:61:b1:80:66:f6:f1:b1:0f:a1:bf:32:
b7:c7:2f:b3:93:97:84:b2:8c:e1:52:76:ef:e2:e8:
67:73:d7:02:8c:dd:27:da:80:7d:9d:a8:09:c6:e0:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1F:28:4F:EE:62:C7:E9:40:AF:36:4E:42:63:F1:53:0E:C7:5D:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/44965b3a-1cf7-4b99-ac2b-0727fd23d6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.5.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:59:a4:a4:31:9c:a9:a8:db:90:4e:96:7b:c0:ac:ff:5f:60:
fe:3a:27:d6:25:ba:98:1a:8f:12:c5:ce:29:db:c7:e3:96:95:
06:5b:01:7d:22:04:a5:d5:42:2b:3f:4b:96:46:69:15:27:51:
25:d5:81:81:6f:d6:c5:4d:d3:41:58:2d:a2:51:b6:bc:91:25:
a3:27:06:a6:16:bc:02:bd:26:42:53:27:8e:78:a5:5f:74:8d:
d6:ac:f6:b7:bc:a5:88:95:23:fd:50:a2:f4:8f:f8:19:e5:a8:
70:82:4b:58:b5:03:40:34:6e:fc:c4:52:ad:b2:76:23:36:80:
af:55:b7:a9:80:b4:2d:29:fe:66:06:c0:29:22:c1:c0:ad:e3:
8a:c7:56:8d:98:98:14:e8:37:3e:1b:37:9d:13:7c:4d:e2:a9:
24:ca:d0:d3:4e:25:e1:02:ae:7c:94:85:41:f7:98:99:51:68:
6d:66:8f:b3:f9:5d:6c:2f:f1:45:cc:d4:ef:b5:fc:68:8e:25:
20:ee:b2:b3:50:6f:af:37:87:e8:22:79:6f:86:3a:ee:ab:6f:
a8:de:97:29:b0:b4:36:08:47:a6:71:e9:d0:01:10:2e:b4:26:
1c:a2:bc:f5:07:35:5f:09:4f:0b:a9:2f:b4:61:7e:e7:f2:98:
fe:27:9c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:24 2025 by rpki-client