Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d58e57-474f-49e2-8a8e-af000e540a34.roa
File: 88d58e57-474f-49e2-8a8e-af000e540a34.roa (raw, json)
Hash identifier: jToIj5I5vOFpoE6xfHGtB55MH6RhZbPE7cINNYoNsf4=
Subject key identifier: DA:93:B0:28:F9:A6:C5:DB:59:EE:56:6B:EC:48:D8:87:65:9B:92:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 466D759BDA21FB596D8A89229598731F97AE57E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d58e57-474f-49e2-8a8e-af000e540a34.roa
Signing time: Tue 28 Oct 2025 00:20:04 +0000
ROA not before: Tue 28 Oct 2025 00:20:04 +0000
ROA not after: Tue 02 Dec 2025 23:59:59 +0000
asID: 14618
IP address blocks: 107.152.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:6d:75:9b:da:21:fb:59:6d:8a:89:22:95:98:73:1f:97:ae:57:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 28 00:20:04 2025 GMT
Not After : Dec 2 23:59:59 2025 GMT
Subject: serialNumber=a009168c7c5f8491308593c4ebacaa5e4b7469461eb25a2bd83894007d27c51e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:e8:dc:da:25:a2:39:06:94:a1:d0:c3:4c:
57:c1:0a:d1:3c:ae:b5:18:51:e2:d0:44:75:f8:c6:
cb:be:35:43:61:0d:44:a3:64:82:1c:77:7e:b6:72:
de:3b:5e:44:72:29:59:29:05:9a:7b:2d:c5:ef:8e:
fe:a8:a3:63:11:4d:8f:3e:3e:63:f8:31:0c:68:43:
ec:f7:28:ef:5e:8b:54:56:c4:05:83:34:11:6e:43:
ad:72:2b:3c:93:72:09:1a:25:82:d2:ca:9f:f2:d3:
3c:2c:a2:bd:d8:63:5b:2d:df:fe:9a:f4:e7:71:c3:
b0:c7:a6:6a:f7:71:70:ee:20:89:ed:e5:97:ed:6e:
77:5c:6b:5d:17:16:f5:18:08:0b:f2:5d:cc:e2:76:
85:ad:e4:47:f6:7e:ef:23:b6:7b:ee:0a:b7:63:22:
fb:75:91:8e:36:a5:25:dd:35:ad:9d:3f:e7:c8:ab:
8e:79:fc:e5:4c:0b:0b:ba:92:95:89:49:44:98:17:
7c:70:75:a2:7f:a4:17:a7:c3:b1:3c:48:ab:3c:6e:
7f:35:21:4b:35:f4:86:98:53:83:f6:36:83:4b:b6:
fb:b5:af:3c:9e:2b:0e:eb:31:f3:bc:c0:6a:57:f7:
2d:a9:2f:d4:30:7c:35:19:60:23:46:ff:5a:ab:24:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:B0:28:F9:A6:C5:DB:59:EE:56:6B:EC:48:D8:87:65:9B:92:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88d58e57-474f-49e2-8a8e-af000e540a34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.152.132.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1d:78:b5:9f:f1:fb:4a:17:66:c3:68:1f:9b:c0:93:91:8b:
4b:9f:39:76:20:41:3f:ad:64:d1:e6:16:12:7a:17:65:88:2d:
88:1f:39:b1:8d:a2:63:ef:76:62:ea:3f:49:1d:13:f7:5d:17:
36:91:39:c8:fd:8f:eb:1d:f1:77:5c:f2:ef:f3:db:b2:82:d3:
7e:3b:04:1d:3c:68:da:90:53:f5:ca:d6:b2:19:ce:32:9e:72:
42:e7:a4:c4:3d:45:8f:15:08:79:a1:72:61:9b:15:b0:e9:e3:
8c:c5:19:32:e3:56:35:f7:24:46:c2:fb:da:0e:59:40:2e:b9:
91:83:f8:43:cd:37:91:92:49:70:df:44:6a:91:66:e5:94:be:
5a:3f:78:16:98:46:ff:22:f7:61:c4:16:d3:fb:d0:21:7d:14:
63:41:77:45:32:1f:d7:3d:e0:82:e5:48:b3:58:38:62:0b:4e:
e6:b7:28:29:4c:ff:15:d2:e3:10:da:23:00:ec:06:18:1b:8e:
63:41:e0:ef:e1:46:56:6d:8f:c4:f4:35:e9:88:d3:d8:8b:5b:
38:80:c0:2b:4c:6f:f3:d8:71:b5:4e:82:36:da:6f:c0:de:6d:
f5:a8:3b:06:8a:73:91:b9:50:32:17:c6:80:c7:0b:c9:7e:4d:
e2:e8:70:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:25 2025 by rpki-client