Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/612e9d7e-5670-48f6-b291-8bb14e2a56de.roa
File: 612e9d7e-5670-48f6-b291-8bb14e2a56de.roa (raw, json)
Hash identifier: 3+2fuRXAhcpfSCHd/WirxBwf8mduGzgY3Xbt8GMdqR4=
Subject key identifier: FB:E6:13:02:15:A0:7A:74:47:1D:6D:F6:EB:70:7D:EC:A1:65:3D:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 712473CC2E04A9A83047361ECE895793D1C26EA2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/612e9d7e-5670-48f6-b291-8bb14e2a56de.roa
Signing time: Mon 20 Oct 2025 03:11:30 +0000
ROA not before: Mon 20 Oct 2025 03:11:30 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:24:73:cc:2e:04:a9:a8:30:47:36:1e:ce:89:57:93:d1:c2:6e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 03:11:30 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=9420103e90f257c83f28350d64e4b620be66a2d3e4e9ffe61bed0ab0ddf67be3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:47:de:af:25:9f:81:5b:11:0d:01:c5:8a:
16:84:45:87:d8:5d:a6:ab:4a:19:b5:b7:cc:64:28:
13:fc:83:85:43:39:c7:af:53:cd:e4:6b:85:5a:cf:
2d:28:3b:45:c3:0e:20:b3:da:2b:8a:6c:bc:04:8b:
6f:c4:0e:5f:8b:09:2a:b1:a6:3a:55:69:f0:62:c9:
dc:e4:95:cc:78:a1:c0:5f:0a:b3:e7:81:55:c4:82:
3b:31:a6:0c:0b:79:06:93:d9:3c:15:b0:26:79:1a:
de:99:f8:9f:fd:04:a8:95:35:3e:e6:a2:86:b2:47:
da:1a:66:6d:89:c9:90:b2:2e:33:40:fc:11:06:e8:
32:78:61:b6:b6:24:66:88:fc:bb:0b:a1:2b:f8:b4:
da:8d:48:b2:ed:14:58:89:d2:6f:1a:21:6d:38:d8:
db:49:b9:ec:0c:fe:88:f9:93:17:ed:61:97:54:f9:
90:a6:a8:ef:d3:1a:33:85:ac:81:70:9f:17:cf:02:
55:dc:81:df:61:7a:9d:66:62:cf:08:df:b2:d1:ed:
8b:5d:bc:50:a0:d4:e5:57:8a:7c:f7:23:3d:53:0c:
af:1d:32:3a:37:4f:e2:dd:25:fc:43:28:f0:f7:48:
19:70:74:5d:1e:b7:a9:35:3f:3d:49:c1:66:6b:d6:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E6:13:02:15:A0:7A:74:47:1D:6D:F6:EB:70:7D:EC:A1:65:3D:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/612e9d7e-5670-48f6-b291-8bb14e2a56de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.107.0/24
Signature Algorithm: sha256WithRSAEncryption
54:94:c6:39:9d:fa:5b:5c:a6:79:69:33:bf:3c:25:7b:9a:61:
5f:e0:6d:fb:72:f9:c1:2c:c8:6a:2d:7f:8b:10:f8:c6:8d:f1:
b0:15:ab:7f:f0:21:ee:38:13:7a:d5:67:d7:68:18:5f:3a:c3:
fa:e6:41:97:f6:58:01:e4:c5:85:6e:ab:14:bb:75:e7:e2:d0:
6f:ae:6f:d3:92:6e:b7:f3:13:cb:d0:7d:e4:4b:66:f5:e8:b6:
bd:a5:47:c7:e4:b3:7e:d0:bc:65:dd:a0:23:2b:9e:0b:f7:81:
36:fe:a6:73:27:67:c6:05:91:59:03:b3:17:44:d4:e7:f4:50:
46:3c:b5:cb:5e:c7:4e:f7:41:77:64:95:7c:ac:1f:f0:63:44:
67:c0:05:c8:d3:16:39:88:85:8c:7b:b5:22:8b:1d:e1:d2:0a:
d9:f7:ce:12:ba:26:f3:97:9c:43:d8:56:a5:9f:ec:5c:ba:52:
de:24:a8:f2:a7:9b:96:b3:79:b5:17:32:01:ff:d7:71:86:74:
74:81:6b:61:5f:7f:cd:95:b2:a7:83:18:8d:57:2b:60:fa:97:
07:79:31:8d:07:4f:3f:de:15:36:d2:cf:ef:2d:7a:1d:a5:2d:
96:44:f5:ba:9c:f7:da:1d:9c:99:5b:4a:6f:84:0e:56:c4:eb:
c1:8e:20:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:50 2025 by rpki-client