Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1144a8da-3485-43fd-b6ce-b814cf5186bd.roa
File: 1144a8da-3485-43fd-b6ce-b814cf5186bd.roa (raw, json)
Hash identifier: vxMxY9brcFLtNogI8DnyNRlGX6P4KOsTNpWM9ErtYeI=
Subject key identifier: D9:13:86:73:91:4D:84:B8:1D:B5:9C:05:76:00:B3:A6:55:FD:75:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B4F6BAE229AA725943C38B37A2F0AD4619E5B75
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1144a8da-3485-43fd-b6ce-b814cf5186bd.roa
Signing time: Mon 20 Oct 2025 00:21:01 +0000
ROA not before: Mon 20 Oct 2025 00:21:01 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4f:6b:ae:22:9a:a7:25:94:3c:38:b3:7a:2f:0a:d4:61:9e:5b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 00:21:01 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=4e601bd5cfc14a78625c02a7457769ef161e4216803da81d8a2bce6398b2b0b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:5c:34:08:58:dd:9f:75:3e:9a:0a:fe:d1:
f4:b0:25:60:ca:49:aa:e9:43:ef:1e:75:c7:65:f5:
bf:a2:03:e1:7c:31:37:a5:2b:b6:e6:6a:da:09:44:
7d:af:ea:7d:70:ad:fa:28:c0:af:01:12:98:52:6e:
d3:fc:8a:e7:8d:70:19:d1:55:b7:25:b6:db:6b:ee:
59:ff:e9:15:b9:19:95:8f:9c:d7:a8:46:f7:8c:e7:
36:e7:4f:64:3c:3d:f1:b5:9f:d8:5d:63:94:3b:2c:
0b:e2:43:4c:f2:e2:56:2b:88:a5:bf:68:70:ac:f8:
a5:50:95:22:0a:d6:7f:49:8f:21:ec:71:4f:9c:e5:
1f:30:52:c6:f9:85:83:69:0a:7c:3a:c5:e5:2e:9b:
c4:c7:1f:68:c7:3d:2e:2d:93:f2:e8:ea:cd:85:55:
ad:e2:27:79:59:f8:04:a9:d8:b3:d4:c3:d0:98:bb:
63:7b:b7:f8:98:b5:e6:48:7b:56:c2:e5:4a:f5:b5:
51:a9:a9:62:8b:3b:06:9f:ec:8d:47:e4:98:02:a6:
e3:59:76:11:8f:2d:06:04:0e:78:f5:7f:00:0d:77:
b4:9c:69:f5:cf:8c:c9:91:67:17:06:2b:28:53:2c:
57:68:80:90:60:71:08:b4:ca:11:4b:ce:d2:16:21:
07:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:86:73:91:4D:84:B8:1D:B5:9C:05:76:00:B3:A6:55:FD:75:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1144a8da-3485-43fd-b6ce-b814cf5186bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.73.0/24
Signature Algorithm: sha256WithRSAEncryption
92:98:47:75:3a:56:69:d7:82:4b:61:7b:4b:97:af:ec:03:1c:
f0:8b:dc:cd:ba:62:40:1c:95:87:20:6c:17:0b:d7:31:9e:f8:
5b:2c:f6:35:7b:6b:ed:f0:e3:06:02:ff:d0:8d:f7:32:70:14:
04:81:62:2c:e1:32:13:7d:f5:c6:38:d6:60:ff:71:84:ba:b8:
11:a6:7e:a3:3c:43:c5:ba:0f:b1:c3:7b:1b:67:85:be:aa:ad:
28:5c:ac:50:49:16:a5:8d:a9:5a:84:9e:08:87:2a:dc:ab:b3:
b3:71:dd:77:d4:78:55:32:14:38:36:95:9d:ec:f6:19:b3:4c:
1d:90:7d:86:16:e2:39:fa:74:49:be:1b:c7:5e:8a:eb:d4:ee:
0d:bc:3b:a4:19:f9:89:3f:6f:af:89:ae:6d:2d:ca:a6:9a:18:
91:06:dc:27:54:d7:97:34:5b:39:70:34:09:6d:53:25:43:41:
fe:1d:36:97:89:d9:74:77:21:2f:f7:14:99:45:a9:e4:1c:28:
3d:b0:09:ef:5b:26:da:98:b8:82:29:c9:4e:ae:8d:1a:a0:30:
0a:0b:a4:ee:a8:d7:22:a8:83:0a:eb:c4:01:44:40:a5:dd:ee:
68:a9:8c:b4:38:5c:d8:05:be:89:8f:ab:1b:39:42:b2:05:36:
a5:5a:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:11 2025 by rpki-client