Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc6ca6d-87cc-4c30-a857-7d9fc5ed813a.roa
File: 1fc6ca6d-87cc-4c30-a857-7d9fc5ed813a.roa (raw, json)
Hash identifier: 7KAH28O0xiAX+ypvUipJkgZUcXD2L3JZrZNipE9jDIo=
Subject key identifier: 9A:9B:82:4A:11:1C:B3:91:0D:74:85:13:75:28:EE:6C:F9:BC:55:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79D105F3FF96BC542D7B8D6B74C988C877C9EC08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc6ca6d-87cc-4c30-a857-7d9fc5ed813a.roa
Signing time: Sun 19 Oct 2025 02:10:07 +0000
ROA not before: Sun 19 Oct 2025 02:10:07 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d1:05:f3:ff:96:bc:54:2d:7b:8d:6b:74:c9:88:c8:77:c9:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:10:07 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=360856b3cc7d0351160be1548669d8b30887d9b264214f2f49e90471da993d31, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:50:4e:74:93:55:2a:d2:2b:67:98:ed:3e:
d4:3f:35:66:f3:44:23:26:a6:ec:28:cc:4a:11:1b:
55:78:7c:7f:4b:6b:df:27:ea:1a:9c:44:7e:bb:2e:
22:9d:43:e9:56:cd:e8:58:80:04:e0:ea:b3:a3:38:
36:9f:22:47:e2:a4:86:86:1f:e6:5f:1c:46:b8:bd:
26:f5:bd:5e:d6:47:d7:3a:6b:4d:95:87:88:7e:63:
14:f6:be:25:25:ab:67:3c:ab:a9:a0:55:95:1f:b4:
04:b4:31:6c:2c:f1:25:f8:c2:9a:0e:22:a8:53:c3:
14:72:57:dc:41:d5:f7:31:10:b8:53:ff:37:2e:6f:
b5:cc:4b:96:a5:c0:d6:f8:b1:66:37:f6:eb:51:31:
05:51:06:ce:e2:2a:a8:40:bc:ae:e1:a8:6a:f5:8e:
23:92:db:31:a5:f9:f3:f9:de:bc:9e:19:a4:3e:ed:
6c:f5:6b:4c:dc:19:f0:58:a6:62:b2:ce:c6:6c:8a:
ac:55:6f:e6:ef:39:6c:21:19:08:43:9a:6e:6a:f3:
9e:5e:94:99:3b:2e:36:87:be:58:f0:b0:49:9b:fe:
70:b8:99:8d:b7:97:15:5b:ab:1c:da:7c:3d:4b:0b:
47:c6:04:2d:d9:5c:c9:9a:61:f6:90:15:72:be:49:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9B:82:4A:11:1C:B3:91:0D:74:85:13:75:28:EE:6C:F9:BC:55:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1fc6ca6d-87cc-4c30-a857-7d9fc5ed813a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.211.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f1:42:16:c7:09:da:17:ec:59:b3:ad:ba:ef:85:13:e4:8f:
c0:8e:c8:cd:77:57:db:d7:cf:4e:2c:a4:39:06:60:65:c6:49:
50:e6:66:ba:89:3b:8e:3c:cb:f7:cb:b3:6f:07:54:6e:0c:92:
2b:06:01:c6:83:d8:ef:a0:c0:7f:1c:a5:97:8e:fe:0f:1f:bf:
d0:37:12:a3:db:98:15:f8:f2:c7:c0:17:c5:1e:11:6f:f4:7a:
1a:bc:87:9e:c8:f0:5e:d2:40:ba:4b:db:41:3b:45:8b:78:87:
1d:f7:f7:51:6e:27:27:55:5e:18:02:2e:d8:37:b6:af:42:bc:
6d:86:ca:b2:7d:76:2e:05:9d:a2:48:f0:f9:6f:9c:84:02:e4:
a0:53:ac:81:ea:4b:63:b2:58:3f:94:ce:8a:ea:62:e0:03:5b:
bf:fd:2d:78:25:94:c9:38:c6:62:0d:5b:18:9e:1c:19:4a:8c:
a8:ed:e7:9c:70:12:c0:47:31:40:83:11:f5:63:38:c8:eb:86:
f0:19:51:5f:31:ce:d7:3d:af:fe:8d:4f:8b:d9:73:04:6a:84:
20:9b:82:79:6d:cd:df:ce:c8:e4:4c:2f:ec:1e:53:27:36:e9:
8f:1c:ff:c9:14:a7:d6:58:55:7f:1e:a9:cd:6d:33:4a:cf:f3:
b8:ba:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:12 2025 by rpki-client