Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932f5c8f-0da0-4419-b28c-e87fac0ed64a.roa
File: 932f5c8f-0da0-4419-b28c-e87fac0ed64a.roa (raw, json)
Hash identifier: nW5NiVz/zcHIpIg4audcejwgrzsVmsF9N921fqYGjig=
Subject key identifier: 72:16:93:32:B0:B4:67:FF:06:10:1E:E2:AF:99:63:EB:C0:FF:26:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DB0267D7852414020C2DF696A6ACD0A92150839
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932f5c8f-0da0-4419-b28c-e87fac0ed64a.roa
Signing time: Mon 20 Oct 2025 01:41:35 +0000
ROA not before: Mon 20 Oct 2025 01:41:35 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:26:7d:78:52:41:40:20:c2:df:69:6a:6a:cd:0a:92:15:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 01:41:35 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=d3911603b0d35b9a4135c68682687480700c21ff4b7f8a91039048c9f7f0994a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:43:9f:6e:3b:7d:a6:a9:a7:9f:37:4a:81:
05:66:14:91:f6:04:d8:91:8e:6a:56:63:c5:14:5d:
71:05:f0:b8:23:fb:00:b1:f3:92:83:90:3d:56:b1:
5e:5e:d1:64:b3:ac:e7:4b:3b:c8:73:d8:60:0a:50:
e1:75:db:cf:06:b5:b7:85:f1:91:8e:81:05:69:4c:
b0:cb:a1:e6:ce:c6:80:14:d9:a4:5a:a4:e4:36:a6:
6f:45:1e:1d:2d:43:57:5b:e9:3c:a1:00:5c:d5:0a:
69:7a:3b:ce:41:41:cc:ac:4f:63:13:a7:5e:4b:b7:
ea:ad:78:94:2d:40:08:bf:7a:73:70:cd:8d:09:0c:
8e:d3:cd:dd:37:1c:d1:55:f3:cd:c6:9f:59:9f:63:
fb:1b:74:8b:a7:67:d3:52:2a:91:c9:70:bf:f4:e5:
e6:2b:35:9c:66:0f:31:de:03:b2:2b:a8:bb:92:62:
6f:91:7b:57:66:44:8b:d2:fd:8c:af:f0:eb:ec:0b:
0a:b2:81:ae:b5:bc:b3:a5:47:1e:19:63:b2:de:0f:
b4:df:c9:cb:a8:03:cb:e6:53:f8:94:a9:34:31:b8:
20:54:13:a1:25:32:cd:85:78:33:23:98:09:c4:5e:
38:b6:a5:0a:f0:67:28:39:dc:52:7e:e0:cd:a9:1e:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:93:32:B0:B4:67:FF:06:10:1E:E2:AF:99:63:EB:C0:FF:26:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/932f5c8f-0da0-4419-b28c-e87fac0ed64a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.18.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:31:af:ea:86:2a:f5:ca:06:92:99:61:a1:25:4d:ff:f2:7c:
58:cc:c6:b7:96:4b:6e:4b:a8:61:7a:3a:52:cd:33:48:e6:30:
a6:ea:8a:d2:fd:fb:42:77:05:cc:93:fc:a7:00:eb:29:91:b8:
fa:20:ee:0b:f8:62:47:46:45:de:af:48:01:3f:03:91:05:21:
e0:bb:0b:0f:17:0d:43:f6:0e:01:ee:26:98:0e:2d:ba:54:6f:
1f:68:6d:a2:3b:ca:12:45:66:e9:7d:7f:16:ba:70:90:61:77:
48:74:70:75:76:28:c9:5e:0a:4f:85:37:44:9b:7b:c8:a5:6a:
20:13:3f:3e:06:dd:31:54:27:ec:62:30:5c:55:2e:e9:de:2e:
19:05:e1:72:9e:09:aa:f0:ea:d0:c2:7c:a0:e2:20:85:b6:63:
88:fd:7d:9d:77:a4:34:ab:6b:ad:76:73:2b:fb:30:43:d5:b3:
7f:3e:3c:84:22:48:0d:4f:d2:eb:4d:24:63:d3:22:b3:f5:69:
98:31:74:e1:5b:76:b1:f9:28:57:b6:07:22:e0:5b:de:05:fc:
27:3a:84:37:fd:f8:49:ed:8f:7e:90:04:00:ff:b3:5f:b1:fd:
9d:a0:e5:2d:2e:3c:f8:9e:a0:ce:03:ed:0b:c7:21:64:de:48:
09:b8:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:16:53 2025 by rpki-client