Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c0c9460-42ad-4001-8729-a24ed119ec46.roa
File: 8c0c9460-42ad-4001-8729-a24ed119ec46.roa (raw, json)
Hash identifier: 1yb447zhpbRFYn5SRZ1Li2SN/dRGHoe3SqxKQQqsl1Y=
Subject key identifier: 07:27:A3:DC:40:B9:3B:19:8A:01:AD:23:DA:23:B4:99:86:30:6E:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 31F73CC1219651C163F579349C41465F1135566A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c0c9460-42ad-4001-8729-a24ed119ec46.roa
Signing time: Mon 20 Oct 2025 00:20:12 +0000
ROA not before: Mon 20 Oct 2025 00:20:12 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:f7:3c:c1:21:96:51:c1:63:f5:79:34:9c:41:46:5f:11:35:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:20:12 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=655686889133c0a9524089e61ba52d17ebfeb19c508f25cd64a74792f74bef09, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:95:4a:de:04:1b:73:86:de:95:67:48:7c:23:
c0:5f:8c:cb:34:f7:a7:bf:6e:19:60:30:45:ba:1b:
86:4f:76:b0:d8:f3:ef:36:6a:9a:80:5b:aa:90:4f:
39:bf:14:13:e2:b8:61:23:8e:c4:af:d2:e2:19:35:
8a:ab:f3:2f:e9:53:12:fa:6e:e9:0d:e6:02:bc:34:
2b:e4:27:52:89:49:85:8d:36:a0:d8:37:24:a5:d1:
57:c5:e6:04:30:f1:ab:64:e7:5f:81:3f:56:27:88:
0c:35:4b:30:b4:a5:e4:ec:db:6e:71:6e:13:33:6d:
04:98:e7:81:02:98:70:cc:6a:df:05:0e:51:54:64:
df:c9:a6:7f:37:7a:f4:06:12:9d:14:ad:cf:be:08:
7e:28:97:cf:e5:a5:e3:66:a3:0f:4a:9b:e4:a9:1b:
74:73:6f:c7:9b:70:7b:9e:71:1c:77:eb:3f:23:7d:
75:b0:95:96:95:37:fc:8d:62:a7:b7:64:a6:6e:10:
ca:1a:49:0f:be:6d:2b:42:64:4a:df:98:c9:8f:fb:
88:a8:b2:8b:85:33:14:a1:5a:d6:da:4f:ab:1c:ae:
c3:d6:e6:ce:f0:ff:a9:a2:fe:73:0b:7c:1c:cb:87:
bc:47:a2:af:b4:ea:46:1d:0a:03:20:fa:ef:4f:51:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:A3:DC:40:B9:3B:19:8A:01:AD:23:DA:23:B4:99:86:30:6E:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c0c9460-42ad-4001-8729-a24ed119ec46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.29.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:73:2f:32:52:da:86:ff:8f:cf:2b:9e:19:a9:85:f8:a3:4e:
70:d8:37:47:a0:d3:25:43:57:aa:e2:38:f8:fb:a5:8f:be:17:
0e:20:3a:a6:a7:50:ba:53:5b:65:14:12:97:f6:9a:63:23:2c:
42:d0:f3:d3:da:f2:68:05:07:b9:75:28:90:47:7b:89:cb:d2:
a9:fd:db:42:a9:4e:f9:db:4e:f2:2f:cc:66:ca:6d:77:c5:ac:
04:25:d8:3a:f6:dc:1a:37:64:61:cb:9f:8c:0d:fb:fb:2e:b4:
ec:de:1b:c9:27:63:f7:91:64:1a:7e:f7:2e:c7:37:39:be:8a:
83:4d:5e:d6:1a:e0:29:0a:82:13:a1:e3:ff:cb:5a:c8:62:7e:
ef:83:3a:96:a2:48:4a:d5:20:82:24:32:82:4b:82:81:9a:ad:
1d:66:0d:07:17:0e:93:b9:69:f0:d6:80:20:ed:c8:45:ad:45:
63:bd:96:e3:b5:2a:9f:f6:f7:4a:3f:b8:b2:85:ee:23:4c:93:
3c:55:e7:96:ba:4c:96:1a:4f:f5:dc:ba:64:7a:3d:20:a2:61:
cf:86:f7:05:64:33:d0:7d:c4:b2:59:a6:db:d7:6a:df:e2:d8:
c0:a8:60:82:b1:9d:8c:62:1a:c1:11:62:b2:39:bc:06:e0:4b:
5a:3a:c2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:10:44 2025 by rpki-client