Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa
File: 2505ea24-3c92-445f-9cd4-b90465450804.roa (raw, json)
Hash identifier: 6jzgMVWE0Pqo5oxZSkLsdY3cwUskNJduOGbtPL4wbg4=
Subject key identifier: 91:9E:BC:46:04:FD:0F:31:1F:9E:6E:0A:4C:6C:25:3A:93:CC:F2:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79C4846863ED76C52A3EB41ACB14393745FE50D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa
Signing time: Wed 01 Oct 2025 00:02:16 +0000
ROA not before: Wed 01 Oct 2025 00:02:16 +0000
ROA not after: Wed 05 Nov 2025 23:59:59 +0000
asID: 8987
IP address blocks: 108.175.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:c4:84:68:63:ed:76:c5:2a:3e:b4:1a:cb:14:39:37:45:fe:50:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 1 00:02:16 2025 GMT
Not After : Nov 5 23:59:59 2025 GMT
Subject: serialNumber=1ad3f5cedb636561c265c6350c1d93be3b15acab3d13912dc63c34d616238a48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:1b:8d:f9:57:42:9a:1a:c6:37:2c:08:d4:
85:c0:1c:59:b9:d8:ea:29:83:b0:3e:9d:65:36:2b:
0d:d0:7a:05:c4:53:74:f0:fe:33:e2:43:29:0f:10:
0c:c6:4a:a5:ae:87:9a:fd:a6:71:a8:28:c9:c8:14:
8e:54:1f:bd:a0:e3:e7:a0:83:70:b6:5d:59:77:06:
66:86:d8:8c:c8:fe:f3:7e:4e:3d:6b:24:79:39:4e:
d9:ab:52:ff:e1:74:a5:c6:b7:87:74:45:9b:13:f7:
f2:c4:68:a1:01:28:e3:2e:6a:48:db:c7:fa:69:87:
cd:49:87:fd:b9:d2:7f:08:6f:bf:56:71:c7:fa:44:
6e:7d:20:ef:d1:32:7a:63:77:23:ee:d7:f2:d2:c2:
e7:1e:41:af:f4:13:c3:fa:2d:5f:84:00:fa:2b:8d:
ea:1e:da:c4:b0:28:37:97:c7:aa:6b:82:7a:7d:0b:
aa:47:9f:00:9b:65:ef:1e:be:d0:95:fe:c8:83:d5:
1c:c1:c4:7d:99:83:ee:68:13:2f:b9:91:81:a3:26:
50:6d:1b:b5:47:79:90:9b:a3:6c:11:50:b5:7f:66:
f8:23:ce:ec:c3:7a:e8:d1:91:c8:ed:43:56:18:28:
4d:b9:4e:30:d9:9a:16:6a:c8:4e:b3:0a:db:6a:00:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9E:BC:46:04:FD:0F:31:1F:9E:6E:0A:4C:6C:25:3A:93:CC:F2:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2505ea24-3c92-445f-9cd4-b90465450804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.175.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:33:89:44:bb:1d:96:e0:0e:32:48:bf:57:3f:dc:9d:47:c6:
a8:6e:b1:90:76:95:fe:37:3b:46:60:73:8e:71:a9:0a:56:20:
13:60:6c:08:0a:c2:24:cc:ff:96:27:e3:2b:35:9f:6d:31:29:
75:9a:80:46:74:e2:fa:c4:d7:a5:a5:77:bd:7a:d0:39:28:f8:
2c:d9:25:bf:bb:8b:f6:fa:17:9a:e8:49:46:77:58:f0:c0:69:
f8:ec:45:df:c7:2a:52:c8:a8:eb:d7:b9:c3:0a:0a:19:71:75:
de:6a:ad:35:a3:56:50:ce:69:54:af:51:d1:e9:fd:94:35:e4:
21:cf:7d:0a:a7:b0:66:b7:55:af:78:ca:0f:a2:de:a5:91:07:
ea:aa:c5:a3:ec:76:7d:cc:f5:81:46:d3:c2:70:21:2c:22:82:
68:e7:a5:c2:02:62:03:b0:97:db:4b:32:fc:85:cf:d9:72:85:
d8:b3:f4:95:40:5c:2a:6c:bb:4d:df:98:ca:39:57:c8:cc:27:
b6:5d:66:fc:3d:df:0f:0f:cb:97:7d:c1:7b:6f:83:93:ae:3e:
d4:2b:e6:cd:c2:95:96:55:4d:b1:64:de:f1:30:22:9f:4d:e2:
ef:af:10:56:d7:65:42:a1:c7:32:af:ae:5f:cf:0c:6a:e8:33:
e1:1c:eb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:25:26 2025 by rpki-client