Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc8391c-f44a-4e89-8ebc-0eb9d50f3ac5.roa
File: 0cc8391c-f44a-4e89-8ebc-0eb9d50f3ac5.roa (raw, json)
Hash identifier: LSO6KzaPvbw+NSAa3Fy5OhZmEJI1VLHM82h9zQiNoeA=
Subject key identifier: FE:A0:48:80:EA:40:A5:2D:78:3E:4D:8C:D9:78:88:C3:45:E4:46:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1BAEFC0B62A428827C42D90C8AC6A5FE50D532A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc8391c-f44a-4e89-8ebc-0eb9d50f3ac5.roa
Signing time: Mon 20 Oct 2025 04:01:44 +0000
ROA not before: Mon 20 Oct 2025 04:01:44 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ae:fc:0b:62:a4:28:82:7c:42:d9:0c:8a:c6:a5:fe:50:d5:32:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=48b958c0e7d4047085276e96274416ca306fcb82f21307c0e648b6a144c3ef0e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:d5:98:28:db:69:6d:b4:1d:dc:6a:3a:35:
de:66:48:ae:7e:4d:f0:72:d8:99:40:d5:81:99:1e:
e9:51:42:a9:c6:02:66:ae:7c:10:3d:ac:e1:21:84:
f1:b1:e4:94:c3:8d:ca:bb:75:af:79:53:91:00:70:
96:a6:37:e0:33:c7:7e:fc:19:d9:c4:e9:63:a3:8b:
33:0c:be:20:04:89:f9:e7:f0:12:ed:97:89:ce:70:
f4:cb:e8:e9:4c:2a:7e:94:7a:6e:97:a7:fc:57:d9:
3c:b6:d2:6c:6e:37:ba:97:2a:04:d3:05:a6:a9:f2:
b2:24:59:fb:07:66:5f:27:f3:65:9b:b2:5b:fd:3b:
71:b0:07:c2:00:cd:35:ab:a9:79:8a:c8:c2:67:e6:
2e:3d:45:8b:5d:71:4a:2f:16:a7:6d:ed:9e:ae:3a:
fa:44:af:6e:18:53:4e:20:ad:d1:e4:ad:ab:c3:9f:
fa:56:64:59:43:02:b3:fa:69:7e:b9:9b:a0:8b:bd:
3c:3e:de:2d:54:1b:2b:e3:23:42:62:a6:27:59:ed:
df:cf:2c:fa:29:0c:4c:dd:d9:19:6e:06:9d:ae:a7:
e7:19:8b:42:28:c4:60:65:e9:37:42:a2:29:68:07:
5c:33:d2:6a:b9:7e:9e:79:64:07:14:80:69:fe:3e:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:48:80:EA:40:A5:2D:78:3E:4D:8C:D9:78:88:C3:45:E4:46:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0cc8391c-f44a-4e89-8ebc-0eb9d50f3ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.101.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:07:7a:7c:a3:24:88:62:6a:eb:16:e9:09:4f:3e:7e:50:1e:
07:f6:6b:45:f3:5b:0d:b9:ed:ba:b5:01:93:01:93:f3:c0:74:
d7:c9:31:17:c8:df:15:25:c1:c8:04:51:a1:1d:f6:cc:f2:bb:
37:cd:e9:2d:f8:46:fd:8c:37:70:c7:a8:24:56:f4:36:fe:0c:
f4:58:fb:54:9f:c1:ff:66:28:bd:90:04:31:fe:54:d5:df:4c:
a7:a7:f4:91:3f:fc:15:1e:5a:6f:79:7e:56:dd:68:29:73:35:
2e:19:ab:eb:1c:83:c1:12:30:d7:3f:10:d7:48:cd:6c:dd:d4:
f0:9e:c6:67:d1:2f:91:c8:b3:69:78:8a:7b:88:92:fe:f9:8e:
9d:84:1e:11:be:ed:92:6e:c5:4b:30:85:67:1a:1c:09:88:ef:
2c:b4:7d:24:30:cf:f1:4b:31:87:c6:91:44:62:0e:b9:d0:79:
43:d2:4f:69:3d:f2:48:41:3c:66:ff:11:16:46:2c:4a:b0:84:
d4:15:43:9b:5d:0a:eb:50:77:6d:1b:ae:c8:5c:95:fb:84:ec:
e3:1d:ee:6e:30:c7:50:d3:3b:d3:e0:2d:1a:ca:27:48:ef:e8:
ad:c3:64:16:50:44:16:5d:bf:49:16:08:a5:5a:84:ca:52:a8:
d6:e4:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:26 2025 by rpki-client