Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84872c24-4cf9-4e8a-8047-2fbc7bf84912.roa
File: 84872c24-4cf9-4e8a-8047-2fbc7bf84912.roa (raw, json)
Hash identifier: q1m2HTfAbsy4wKUPHDFD0oMf7KpoqPLLsayXiLRo0TI=
Subject key identifier: AA:B0:21:4A:BB:AF:C5:71:BA:3F:EB:0D:79:90:2B:51:26:64:23:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56CE7D3326FE9E2DF52EA8B968464C030921B428
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84872c24-4cf9-4e8a-8047-2fbc7bf84912.roa
Signing time: Sun 19 Oct 2025 01:40:03 +0000
ROA not before: Sun 19 Oct 2025 01:40:03 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ce:7d:33:26:fe:9e:2d:f5:2e:a8:b9:68:46:4c:03:09:21:b4:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:40:03 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=7d1605fcae9ee4e108d5a4d22ce8251ab20a3dc22dda1c4e854adba074bf7cae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:21:6f:60:7b:2f:2c:29:2c:c7:41:14:38:ff:
d5:d9:b2:1a:71:3d:06:70:99:e1:ce:f5:d7:7a:6a:
6d:0e:1a:f8:fc:85:c5:05:af:9c:3f:1e:c3:45:d3:
ab:f4:24:6b:20:ef:c0:54:8f:be:21:a6:f5:68:73:
c1:eb:72:47:65:c7:14:83:2a:6c:0c:ac:e8:b7:76:
14:e0:7f:65:35:1c:b7:62:25:b6:2f:bd:4a:f6:03:
cc:e6:6d:2f:4b:0d:1e:84:b2:a2:4a:fc:d8:37:85:
fc:2b:c6:8a:cf:91:d5:6a:f3:c1:b9:12:89:b3:0c:
0b:07:d8:d3:5c:d5:ee:9b:19:cd:03:bf:0e:15:64:
91:8a:9c:e6:db:f8:30:5d:62:e1:ea:fb:0e:e7:f6:
ef:ae:db:2c:85:c1:33:23:1d:07:de:df:8f:b3:da:
68:c8:ef:2e:c1:7f:3b:86:26:72:a0:a4:25:9a:79:
f1:ab:92:af:6c:68:71:d2:36:fb:0e:08:81:fc:b8:
59:2e:dc:73:48:71:66:da:d1:66:7d:10:92:04:1c:
d7:ee:49:96:58:2a:c8:6a:59:2b:9e:f8:fe:99:b3:
1d:de:37:bc:38:23:a3:6e:07:49:eb:3f:75:53:1d:
67:3a:d2:2c:59:8a:6f:f2:c2:6e:34:f1:0b:4b:b1:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:21:4A:BB:AF:C5:71:BA:3F:EB:0D:79:90:2B:51:26:64:23:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/84872c24-4cf9-4e8a-8047-2fbc7bf84912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.149.0/24
Signature Algorithm: sha256WithRSAEncryption
91:28:18:5a:3e:2f:fc:59:1b:db:9c:a1:a8:3e:24:97:fc:f3:
de:21:5a:7f:29:4b:0d:45:bb:0e:6e:b8:4a:5b:d0:bb:50:fe:
d3:94:e1:1e:1e:a4:0e:af:cb:30:6e:4b:d2:09:f4:d8:5a:6a:
38:79:d9:81:ce:c2:09:eb:62:23:f8:8f:4e:2b:a8:fb:d8:a9:
85:1e:f3:70:4d:24:b8:21:a2:57:9d:1b:82:9c:16:24:2d:05:
62:ef:29:be:d0:6b:83:6b:e4:ec:ee:07:e5:69:6c:80:3d:b8:
44:39:ed:40:87:5d:46:9f:2a:65:3b:a8:f2:cb:44:83:70:58:
0c:e8:98:57:6a:3d:13:04:6a:bb:de:f0:c8:60:84:60:55:c4:
4f:b9:9a:7e:c5:f4:95:4a:17:f3:bd:b8:f7:c3:6d:a5:21:0c:
02:0a:7d:d1:5b:08:89:e1:cb:42:fd:10:4b:df:19:b4:3f:ab:
bd:42:fe:b9:4e:8d:db:27:66:34:24:b8:75:c2:56:46:cb:ac:
d7:2b:e2:7e:d7:6a:91:7e:13:7d:c9:d4:08:ed:d9:ea:98:37:
70:ab:9a:8f:60:a7:10:0a:c4:d7:19:de:ae:b7:99:41:a8:04:
89:29:6d:af:62:2f:a1:27:4a:2c:ca:cc:6e:01:b4:08:24:d3:
8b:45:15:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:44:18 2025 by rpki-client