Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c886bd-7652-4c8d-b3fe-182d17cecc48.roa
File: 89c886bd-7652-4c8d-b3fe-182d17cecc48.roa (raw, json)
Hash identifier: Zd5dsPIBYLY/yiNAgcnj5FOsKd6hC5ns2sk+GYQNRVQ=
Subject key identifier: 02:26:79:71:B0:7B:81:C0:29:6F:74:94:AA:2B:CD:95:7E:D7:98:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 571A52D6F227719E6F9CDEBD777FBF2F40551123
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c886bd-7652-4c8d-b3fe-182d17cecc48.roa
Signing time: Mon 20 Oct 2025 00:10:40 +0000
ROA not before: Mon 20 Oct 2025 00:10:40 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:1a:52:d6:f2:27:71:9e:6f:9c:de:bd:77:7f:bf:2f:40:55:11:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:10:40 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=64206ba6d441c739360a14c90310050c0d68ef8cc72bd877fa3086cce2814245, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:4a:fe:92:8c:22:70:85:ec:0d:bb:52:8d:
eb:62:50:7f:c4:4f:d5:b5:34:60:d5:3f:b9:9f:99:
5b:b5:1e:5e:1a:43:34:29:50:93:a7:ec:6b:b9:c6:
aa:50:3a:70:5a:cc:3b:1b:b6:9b:af:c5:7b:08:57:
a5:ae:6a:ed:e1:6d:55:4b:e9:87:99:44:0e:59:06:
31:61:81:8b:19:e6:a6:db:28:35:21:3f:11:2d:4b:
c7:e4:e9:d8:5d:c0:8c:a5:0a:d5:51:f9:87:c8:63:
0c:84:fb:ac:c2:1f:e1:4c:47:c3:82:e6:cf:6e:0c:
38:68:ff:53:2d:f0:f7:c3:49:05:64:f5:1f:ba:33:
53:54:dd:b1:44:b2:75:68:6c:56:7b:98:c3:c0:3d:
32:d2:68:de:d8:2e:a4:3b:87:c9:33:cf:6b:f3:57:
90:92:cc:44:63:c4:9b:15:14:86:2b:e8:1e:ff:33:
ee:f4:ff:6a:ba:08:a2:c1:4e:c7:77:36:90:b3:92:
49:d5:95:40:7e:b7:02:41:5e:ba:8f:83:0f:a8:66:
51:24:70:ad:0d:e8:c8:34:5e:c7:c0:35:bd:c6:a3:
84:17:c8:3d:d2:5d:56:28:26:51:5c:09:07:c4:0f:
52:24:f7:41:65:6e:8b:b0:0a:13:2b:b7:69:69:6a:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:26:79:71:B0:7B:81:C0:29:6F:74:94:AA:2B:CD:95:7E:D7:98:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89c886bd-7652-4c8d-b3fe-182d17cecc48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.193.0/24
Signature Algorithm: sha256WithRSAEncryption
be:95:f6:1a:29:77:f1:47:af:df:9e:23:f3:94:a4:5f:83:74:
b0:2e:c0:9a:89:e4:0e:e3:8e:2d:5b:eb:e0:f0:94:ec:bd:f4:
d0:db:99:03:97:a1:9a:c7:69:91:15:f6:0a:cf:4e:24:5e:6d:
f3:bf:53:45:89:bf:c7:10:f4:d4:c8:89:93:fd:0d:47:22:8f:
b6:ff:4a:d0:17:19:ca:ac:2b:ca:1a:af:86:5b:0e:86:5a:44:
c7:04:66:5c:e6:db:82:bd:ef:2e:09:b4:4b:e0:05:a8:f9:93:
72:e1:ac:e9:7e:47:58:74:91:0c:b9:54:81:d5:12:59:8b:fb:
65:aa:7b:df:5a:1e:54:e1:39:d7:44:12:f0:73:1b:b4:39:d7:
c1:7e:22:a6:92:12:d8:a4:65:24:67:83:08:86:1c:29:f8:f8:
82:cb:08:21:03:74:19:d7:08:f3:d3:77:af:3f:e4:0d:ec:c9:
57:c4:aa:1e:42:ee:e1:51:a9:8d:75:e4:eb:e3:6c:c5:0c:3c:
b6:9f:33:65:b0:ce:ad:36:62:19:15:b4:13:5e:65:dc:d1:16:
bb:93:f3:22:8b:eb:99:60:07:14:18:c8:39:ed:f3:b0:10:5d:
fd:4e:00:a2:66:de:e2:c7:fc:8c:79:6e:51:dc:ac:d8:2a:c5:
78:81:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:06:01 2025 by rpki-client