Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894582e8-bb1a-405e-bab3-7f93ebed6333.roa
File: 894582e8-bb1a-405e-bab3-7f93ebed6333.roa (raw, json)
Hash identifier: LVAyuUMrBuNXAjLlWhtUSU2e2vu7ZkIDlrehZvzKiJA=
Subject key identifier: C9:9D:B8:44:09:E9:FB:A1:3E:59:3A:F5:37:8B:A2:1E:CB:43:58:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 239FD9F2FA301614C38BF1BE357B8C8CB2D94E98
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894582e8-bb1a-405e-bab3-7f93ebed6333.roa
Signing time: Mon 20 Oct 2025 04:02:27 +0000
ROA not before: Mon 20 Oct 2025 04:02:27 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9f:d9:f2:fa:30:16:14:c3:8b:f1:be:35:7b:8c:8c:b2:d9:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:02:27 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=b8fdb4f89e494c7e9702dbe73008a9e225b4712031c01d9a5d9b4df88cc60e58, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:8c:6b:c9:45:ae:34:67:0c:77:c3:39:b4:
c5:6f:e1:c2:2b:cf:e9:67:85:61:5a:15:aa:26:ee:
b2:03:33:aa:af:32:82:7b:8a:62:39:83:a4:7d:37:
e8:9e:cb:ae:f3:7f:91:d2:c2:f5:03:24:45:0e:5b:
09:c7:de:03:ef:81:75:cf:c3:5b:63:64:88:bc:57:
4b:2c:13:19:2f:05:d7:e0:cd:60:3d:1a:31:24:ef:
a6:95:b6:5d:61:f3:c0:b3:03:ce:e9:61:4e:78:c1:
97:7e:af:b4:83:4c:69:5b:91:38:58:61:b5:d4:1c:
47:55:b3:97:0f:f2:4c:43:18:23:fb:1e:63:e1:ba:
1f:69:d6:01:b4:e1:0f:9b:d4:6f:14:26:61:6c:ee:
8b:35:cf:c5:08:20:ac:a7:3d:f8:e2:b3:39:19:a4:
95:ec:39:c3:d7:2e:93:b1:d4:92:f5:31:4c:b1:3c:
7f:15:1c:fd:59:3c:85:ce:31:47:7f:82:fe:51:de:
b7:c0:34:e2:4a:f9:04:cc:ae:39:b8:f9:e6:08:81:
71:5f:45:37:0d:cf:33:79:23:38:00:fa:4a:50:cf:
76:28:97:f6:24:70:88:d3:6b:24:5a:2c:81:ef:1a:
90:de:c5:aa:85:e9:6b:5d:c3:38:39:ad:d6:1c:37:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9D:B8:44:09:E9:FB:A1:3E:59:3A:F5:37:8B:A2:1E:CB:43:58:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/894582e8-bb1a-405e-bab3-7f93ebed6333.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.215.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5a:59:17:e5:73:2c:48:55:f2:79:c3:51:3e:85:10:1a:2c:
d2:ca:ed:41:74:2d:75:53:11:78:0a:92:1c:e7:0e:1b:c5:ed:
d3:d7:2e:af:79:44:b2:da:00:fc:16:35:b0:b3:90:6c:ce:f2:
a9:e2:bf:2a:f2:50:48:45:a7:64:87:fd:33:14:c8:7c:2a:05:
fc:01:5d:e4:96:a2:e3:77:ad:28:c5:09:91:f0:2a:8e:f2:65:
42:30:e7:0c:d5:51:af:8e:eb:76:27:d2:b7:31:ca:4d:dc:fa:
f1:b2:f8:32:c6:66:84:12:db:f4:bc:42:4d:0f:d3:01:5e:26:
20:fe:af:51:66:ab:ec:3e:aa:67:46:2d:57:36:cb:56:45:05:
5e:2e:de:1c:af:57:9f:b2:2f:12:42:c7:5f:bb:1b:c3:b6:04:
9a:8d:e7:f1:09:d7:18:6a:03:7b:04:33:1e:d8:af:3f:41:7a:
97:2b:1e:3e:cf:49:ef:80:33:09:37:0b:ac:02:9e:47:44:7a:
ba:28:c5:ee:db:f4:a3:4f:c9:86:72:60:a6:40:06:6d:82:29:
c6:f9:da:87:01:f9:24:df:ca:c4:ff:8b:1d:63:9f:7b:29:88:
24:d0:1d:ff:5f:ac:d2:5a:0a:4e:f9:bb:fb:43:b5:17:ab:1e:
9b:75:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:09 2025 by rpki-client