Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa
File: 466ddae0-395f-40af-ab59-17db1b6352a7.roa (raw, json)
Hash identifier: b382uNzRUEeeoU4euo0StaBnFC0S4dsMXWrA02TKb9k=
Subject key identifier: C9:66:44:34:89:F9:9F:30:D1:B5:1B:D3:50:10:56:7E:F6:59:F8:FD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41C4972F7AC8BBC7BD8109C84060556B075BEA51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa
Signing time: Tue 21 Oct 2025 00:10:51 +0000
ROA not before: Tue 21 Oct 2025 00:10:51 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 108.175.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c4:97:2f:7a:c8:bb:c7:bd:81:09:c8:40:60:55:6b:07:5b:ea:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 21 00:10:51 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=a50b0b8e882c5076176e5d4b3e581b2d11b21684277eafc2d908e1cc46cb2b6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:6a:59:37:47:6b:80:26:d9:ce:5d:fe:b5:
65:fc:8c:eb:5f:ba:98:c2:c6:1c:f7:3f:56:0e:7d:
18:14:c9:a0:5e:ac:52:c3:1c:cf:c5:07:ab:7f:34:
6e:61:68:c6:d8:ab:e4:5f:b9:34:ef:11:09:0d:12:
08:df:25:87:fc:2e:75:67:59:74:b9:1a:0c:ef:12:
eb:af:66:01:a2:e6:93:37:2f:7a:4c:94:9e:49:b3:
de:8d:97:86:09:44:75:fb:2e:45:ee:fd:16:36:7d:
a2:99:0a:b8:3e:8a:ee:e6:e4:8d:6b:28:d8:4a:cb:
ec:95:10:cc:ae:62:86:5c:e5:37:46:cc:9e:6a:af:
52:00:12:5f:6f:f9:c7:0b:a6:34:0f:4a:fd:a2:99:
21:86:e1:47:6f:96:e4:0e:ba:98:17:40:d1:97:ed:
9d:90:d8:2d:34:ba:e6:ee:42:7d:d0:da:6c:31:18:
82:a6:d5:7b:00:82:58:83:89:c7:51:7b:68:26:00:
74:05:72:f0:5f:84:4d:d4:cb:79:a8:91:4f:78:c6:
38:52:9f:8d:76:bc:d5:70:a1:20:ca:e5:de:47:ee:
53:26:4f:54:ee:6a:f4:a8:11:e1:1e:86:7e:cb:a4:
eb:0f:2f:25:2e:ec:e7:2e:68:b9:c6:66:af:24:37:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:66:44:34:89:F9:9F:30:D1:B5:1B:D3:50:10:56:7E:F6:59:F8:FD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/466ddae0-395f-40af-ab59-17db1b6352a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.175.56.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:60:18:77:d6:e3:42:7c:dc:0d:4a:a1:14:93:13:4f:0e:2f:
38:e2:91:94:5f:d6:66:8a:cb:fb:48:23:72:3d:34:08:dc:8b:
b4:de:b8:c9:14:a4:25:5e:f6:60:4c:e6:87:95:1d:b2:7c:a6:
76:a4:b3:93:84:3b:5b:a2:23:4d:5c:b5:2b:3c:fd:5b:f1:5e:
4d:49:9d:8b:f0:c4:84:4c:79:c6:4e:2b:6d:87:12:76:20:fd:
6a:cf:d8:39:65:2a:82:32:44:21:10:73:45:b8:e6:88:6a:b2:
11:66:f9:6a:94:17:d2:63:83:21:37:a0:f9:dd:8e:79:2d:dc:
7c:ef:75:c9:fe:51:d5:e6:59:7b:fe:e3:ae:85:78:d9:42:43:
6f:8c:99:47:88:d0:2d:c4:2e:aa:72:96:ee:d1:6b:75:74:e9:
d6:29:97:f9:39:55:3b:3e:ee:f8:5d:77:a9:4e:b6:b9:e5:dd:
d1:57:3d:16:90:a1:a3:c9:62:fd:76:3f:e8:e9:ef:5a:18:e5:
19:48:e6:dd:cb:ea:4d:fb:14:cc:d8:ea:f2:18:2f:fb:38:38:
34:b2:7a:b1:db:2a:7f:ad:65:55:68:e5:70:4b:be:96:86:ad:
6e:a9:66:0e:4b:a9:ea:63:f8:85:54:7e:d3:f6:66:8d:54:9f:
e4:3e:25:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 09:09:05 2025 by rpki-client