Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ff484-4684-480a-8360-8adf52f170b1.roa
File: ba1ff484-4684-480a-8360-8adf52f170b1.roa (raw, json)
Hash identifier: lAVyIuybehJxOjhPRJ/Z0C+GJave6wtAwr486ywdH0o=
Subject key identifier: E7:4E:86:65:FF:6D:F3:23:1D:49:95:C2:76:E8:E0:34:AC:F2:C1:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3EF0216409A6C4BDFA27A5AD9CADDF7CF553758E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ff484-4684-480a-8360-8adf52f170b1.roa
Signing time: Mon 20 Oct 2025 04:52:31 +0000
ROA not before: Mon 20 Oct 2025 04:52:31 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f0:21:64:09:a6:c4:bd:fa:27:a5:ad:9c:ad:df:7c:f5:53:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:52:31 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=3b3b893bcde3978128a9656bc56a7c22c3512c92834c24948c881fcef397d9fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:03:62:1e:ae:1f:b9:71:be:ed:da:90:b1:
74:b8:20:c8:2c:4e:10:03:db:3c:a0:ae:2d:05:18:
81:fc:ac:9d:ea:5f:0e:19:9b:f4:c6:9e:32:f0:21:
69:cc:52:64:d0:4d:cc:78:e7:5a:43:a2:0c:d1:3f:
f4:79:91:84:80:04:e9:a1:90:56:b9:aa:5f:6b:da:
d2:08:0c:fe:94:41:aa:7c:07:95:3b:71:fe:27:7b:
7f:06:1a:8b:00:29:be:34:6d:01:5c:9f:c0:30:c6:
1c:91:6e:53:3b:28:2f:e1:bb:28:67:bb:b7:69:b0:
6d:f2:e0:3c:69:fd:3c:9b:e3:82:a7:70:e7:0f:64:
8a:da:1f:15:33:1d:68:d3:ec:85:53:80:5f:81:06:
55:b1:14:f1:39:7c:2f:b8:8c:da:7a:f9:27:2e:ae:
0c:b3:3a:80:66:96:41:dc:ec:ef:1c:7e:25:b3:46:
18:c6:76:2f:73:8b:b7:58:9b:44:d8:6f:23:a1:51:
18:13:33:0e:64:53:e8:dd:72:cc:0f:a6:63:1c:2f:
ae:d9:12:01:39:db:a2:12:b5:6f:f5:18:b9:75:4d:
0b:02:d9:af:7f:93:a4:52:7d:6d:ba:ce:07:aa:15:
c1:da:c4:49:43:54:09:c8:35:26:bd:31:63:82:64:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:86:65:FF:6D:F3:23:1D:49:95:C2:76:E8:E0:34:AC:F2:C1:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba1ff484-4684-480a-8360-8adf52f170b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.1.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4e:16:dd:23:a0:38:60:e2:ce:81:b8:0a:5f:dd:2f:6a:26:
e8:21:06:92:a0:3a:ee:40:54:0c:ab:90:27:1b:6f:18:37:02:
8d:32:1d:bf:28:d7:a9:1c:bb:37:75:2d:46:8b:41:46:5a:4e:
65:d7:9e:2f:bc:25:3d:c9:a6:4d:48:77:dd:90:00:28:03:44:
34:23:78:bd:36:5d:b2:74:d2:6a:d3:d7:5d:58:67:79:91:21:
5a:68:23:9b:97:09:cb:ee:44:2a:15:8c:91:5b:fa:07:90:b8:
e5:8f:08:e5:80:df:00:16:1f:9c:ed:9f:b5:8c:30:44:91:b6:
52:b8:76:fe:da:a9:38:d3:49:4a:53:3f:70:0d:35:c5:86:a4:
6c:99:67:d3:47:3d:e0:54:01:e9:c8:b4:98:29:83:44:ad:f0:
88:14:e9:5e:0d:3f:4e:bf:1e:38:b6:dc:3a:41:d2:8e:ec:fb:
af:56:49:84:31:06:ff:50:59:0f:d3:cd:f6:f9:a7:dd:5b:88:
e3:13:e4:42:93:01:ce:57:9a:94:e3:a0:1a:1c:f2:ba:45:60:
73:cc:09:2f:bd:13:d3:d1:27:73:ea:59:de:fa:ca:ed:ac:72:
a1:58:92:80:ad:de:b0:c0:fb:7e:2c:d3:01:06:81:c9:12:a4:
f7:e5:04:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:11:11 2025 by rpki-client