Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93afd923-d336-42cc-8702-b7a3512e93c8.roa
File: 93afd923-d336-42cc-8702-b7a3512e93c8.roa (raw, json)
Hash identifier: ZvjHMe2tkJ5PIET7i3lWApLZFPjnL8YRDzSatvYa4hU=
Subject key identifier: 2D:7B:02:FF:93:66:46:9E:42:7F:48:A7:B7:0D:E0:C6:20:1A:BB:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66F17C5C8E68358F6BA21F21FB215028A2DA5460
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93afd923-d336-42cc-8702-b7a3512e93c8.roa
Signing time: Mon 20 Oct 2025 02:00:52 +0000
ROA not before: Mon 20 Oct 2025 02:00:52 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f1:7c:5c:8e:68:35:8f:6b:a2:1f:21:fb:21:50:28:a2:da:54:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:00:52 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3f11ddddeab5d53156c89b45a97798c5ee0381d891891e0adb78ba3f89b52da8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8b:0a:be:7f:69:13:10:09:99:ac:74:f7:88:
7e:7d:a9:27:77:bf:1b:35:27:6c:ed:30:52:50:c0:
8c:92:f9:1c:ab:00:5c:09:d5:05:d0:4c:f4:e9:c4:
b4:0a:90:22:87:e5:b8:d4:d4:dd:70:3f:a9:15:19:
e5:a5:ad:85:c0:4d:b7:cc:09:ad:cb:ca:18:4c:61:
96:a6:47:a8:ac:b6:98:4b:0b:84:63:13:bb:4a:e3:
73:01:4e:e1:6d:43:09:05:d0:94:8a:75:56:19:8e:
30:39:d7:81:e9:c8:e9:19:bb:a1:0f:9a:96:94:69:
df:e9:f1:0b:f5:27:6b:d1:ea:c5:9a:45:b1:02:9c:
eb:c6:7a:f1:67:c2:bc:be:d6:0d:06:26:42:ca:4d:
97:dd:1f:2c:08:b5:a9:1d:d3:60:69:41:43:82:19:
f6:65:72:dc:2c:08:19:a1:40:e7:37:4d:54:05:2b:
a2:2f:12:4b:1f:6f:70:2f:80:81:19:70:a1:e3:a3:
55:bb:f6:09:36:d8:60:02:59:82:a0:ee:cf:f4:68:
57:93:ba:67:4d:4d:ad:1c:58:fc:f1:64:30:43:b1:
15:9d:06:55:de:2b:9c:02:93:1a:8b:42:38:7e:a4:
7b:3c:b9:27:24:da:de:8b:4f:2b:3d:1a:db:d2:97:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7B:02:FF:93:66:46:9E:42:7F:48:A7:B7:0D:E0:C6:20:1A:BB:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93afd923-d336-42cc-8702-b7a3512e93c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.61.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8c:b4:9d:bc:91:ec:d7:b2:2b:42:fe:d1:62:f3:72:9d:de:
b6:5a:5b:03:ec:ce:52:ab:d2:74:03:d7:32:20:92:35:f0:2a:
0e:9b:b2:b5:b3:f5:9a:06:f5:99:0a:a0:3a:53:30:e3:5b:31:
86:35:cc:b6:60:47:ce:df:2e:43:b6:fb:b9:c6:67:9e:80:1e:
37:b9:02:4c:74:ab:f9:91:25:69:fd:24:03:d9:80:64:f1:5d:
c6:ea:30:d3:b1:8f:d5:12:b3:70:e4:8c:bb:21:9b:8e:a1:ef:
5f:a0:9a:ee:8d:02:8e:77:81:46:c7:6c:e5:71:c0:2c:7f:c6:
f7:51:66:25:8e:2d:c5:75:e8:ef:6c:d1:ac:13:09:7e:f5:a5:
03:31:71:41:ba:92:7e:db:78:7d:02:d1:c9:97:d4:60:ec:f3:
dc:ae:b5:4e:79:50:75:20:5f:8a:f3:65:47:f5:29:3f:65:ff:
d3:99:7f:2d:d0:78:5f:f2:31:e1:75:e3:7e:46:fe:8a:ff:b4:
5d:d2:32:1d:24:8c:fe:fc:78:d0:7b:e5:bd:7a:19:7f:40:47:
69:e3:4d:3b:a2:23:54:19:3b:60:b9:60:91:c5:65:79:1e:37:
00:61:68:b4:7a:fe:2c:a2:1b:d2:b6:43:91:b8:68:03:83:9b:
c5:37:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:33 2025 by rpki-client