Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047099a2-eaa9-4b36-be0a-a1c78ccbfe41.roa
File: 047099a2-eaa9-4b36-be0a-a1c78ccbfe41.roa (raw, json)
Hash identifier: 5m3BD1mO+7Uz4jcy1vXsMkVlMGCoPiWCT35RqJkslWA=
Subject key identifier: 33:BA:E7:85:F9:34:2C:99:87:56:6F:D2:71:A8:E2:F7:74:01:4F:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71B414FBB886DF307680FEDDB6BF20B6B7393A2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047099a2-eaa9-4b36-be0a-a1c78ccbfe41.roa
Signing time: Mon 20 Oct 2025 02:51:45 +0000
ROA not before: Mon 20 Oct 2025 02:51:45 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:14:fb:b8:86:df:30:76:80:fe:dd:b6:bf:20:b6:b7:39:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 02:51:45 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=0ea5c4a9db283a505adb82ab52724e463a98a7be13a7080a03fdf52f9dee6ed0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:66:76:f0:52:eb:91:7f:7d:ab:0e:72:6a:
37:17:18:00:fd:05:9a:ab:d7:35:d4:84:9c:30:6e:
e0:90:27:51:d4:2c:0a:31:f2:d8:5a:19:c3:a5:ed:
5c:71:b2:39:73:b8:88:57:75:b8:4f:ca:b2:54:2e:
7d:d1:2d:70:cc:b5:cf:fd:7d:5c:15:aa:11:a7:6d:
20:1c:46:bb:1b:4a:de:8e:43:f9:b1:21:2b:87:d9:
d8:90:fb:27:d1:69:07:da:b3:3c:c1:a7:d6:98:98:
d9:34:54:a0:67:31:8f:7c:6b:5f:4d:a0:5b:bf:d4:
59:52:5a:85:97:33:d3:9a:89:7d:40:d0:f7:eb:6f:
f2:20:48:f1:43:cd:9d:7d:e9:54:d1:8d:79:6b:3e:
6d:23:51:9a:f7:0c:8d:da:fa:1c:92:5f:08:90:c3:
f7:d2:f0:33:5c:86:7b:be:7d:37:b6:a9:82:36:68:
ed:88:69:0c:d9:a7:00:ff:28:2c:05:35:10:7d:c2:
1d:ed:bc:28:31:74:ba:84:0b:96:7d:92:66:eb:72:
62:56:c2:ea:56:71:20:24:db:fe:7d:b6:4d:59:4f:
63:b4:9e:ec:e3:92:f3:f6:39:b2:e9:17:d7:77:de:
c2:a8:13:11:82:23:44:52:b0:be:8b:bc:c6:7e:65:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BA:E7:85:F9:34:2C:99:87:56:6F:D2:71:A8:E2:F7:74:01:4F:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/047099a2-eaa9-4b36-be0a-a1c78ccbfe41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:1f:93:58:88:26:f5:71:0f:75:da:41:db:fc:46:9a:00:7b:
93:d7:26:60:90:c4:88:de:4c:0e:06:5f:bc:18:5f:b1:d9:ac:
e5:6f:ba:a1:63:3c:50:b1:06:97:e2:d5:e5:39:e0:c1:ae:1a:
6f:a6:af:5b:78:bb:69:bb:0a:ec:43:44:d2:e7:8e:c0:76:98:
35:94:e0:f7:3a:90:62:c9:14:f1:0f:6c:42:f1:80:3d:ee:6e:
53:3f:92:a5:07:86:fd:dd:75:3c:ed:20:5f:be:f8:05:ce:14:
77:a8:e0:53:eb:ac:8a:12:72:a9:f5:0a:70:90:69:34:60:f5:
22:c0:ad:97:36:2b:2c:a6:2d:94:47:ad:34:36:e1:20:30:f1:
03:f1:95:ad:45:f7:2c:10:0b:32:12:0b:d6:49:0f:52:32:de:
21:25:35:ea:d1:7e:90:b7:52:4c:82:b6:c6:60:1d:72:11:e9:
cb:ac:fc:c3:e4:b3:54:9f:15:f1:c2:d5:46:1d:d7:b2:6a:61:
a6:57:a4:14:6b:e5:34:97:95:11:61:28:f3:86:60:07:9b:9b:
03:d4:92:f1:16:e1:a8:a3:e5:8d:72:02:ae:a0:a8:22:33:e3:
e5:1a:ef:9e:32:64:fb:38:78:64:e5:21:aa:a7:2e:ca:c8:3a:
b3:dd:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:17 2025 by rpki-client