Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29f1ca92-d527-42cb-bb79-dfeba6fb8601.roa
File: 29f1ca92-d527-42cb-bb79-dfeba6fb8601.roa (raw, json)
Hash identifier: hvzzm9q1FTp1aPi0xmt5BxtqIfUy3Cg/vG+DX4j0t/A=
Subject key identifier: 1E:31:34:77:23:38:D7:DB:BF:7A:CF:60:3A:7F:6E:F7:69:BA:48:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DAE0BC430989D9DC2F82EBCF1FFF3389FC49A5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29f1ca92-d527-42cb-bb79-dfeba6fb8601.roa
Signing time: Mon 20 Oct 2025 05:20:48 +0000
ROA not before: Mon 20 Oct 2025 05:20:48 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.157.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:ae:0b:c4:30:98:9d:9d:c2:f8:2e:bc:f1:ff:f3:38:9f:c4:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:20:48 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=a3f7f3a7e3f4c82e5f4b88b9bb62a3fd230c6f5f412ec72a8419df732034c8ba, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:05:40:bf:2f:07:a4:f7:81:48:47:26:9e:
38:fb:ec:5c:8b:dd:dc:75:ba:ff:ff:2f:74:4d:f1:
56:aa:dc:6e:62:23:06:4b:70:ae:1b:3c:d4:25:35:
e3:9d:95:34:62:59:92:32:ff:a3:7f:6a:ac:03:c8:
04:33:de:34:d6:57:ff:15:d8:8f:6b:84:5c:9e:4a:
78:5b:73:53:b1:83:f1:bc:fa:ac:9a:24:52:93:7a:
e5:7e:f3:f0:81:71:d5:e9:af:34:b5:5f:70:5a:49:
b2:66:0d:0f:4c:88:fd:e8:13:aa:71:e7:23:d1:44:
7a:e7:28:47:0b:e1:cf:56:d9:7a:8b:16:e5:6d:25:
74:43:92:66:ff:25:16:ae:49:13:a5:88:84:02:a7:
f2:9e:90:bb:e9:a0:ff:e0:d4:32:3d:8f:76:0d:25:
c4:80:b0:88:45:ed:ed:36:33:1c:15:c7:5a:9b:8d:
cd:60:35:a0:2f:cc:fe:93:fa:49:b7:1a:c3:f5:7c:
d6:a5:5e:b4:f3:bb:57:df:12:d0:74:5b:90:d1:7b:
74:66:a1:18:61:6f:ee:e4:7e:f0:c8:f4:8a:60:1c:
05:48:be:df:c5:eb:b5:65:9d:01:24:f5:bd:02:db:
70:ae:b2:ba:44:68:a2:69:c8:6a:a0:67:80:00:c6:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:31:34:77:23:38:D7:DB:BF:7A:CF:60:3A:7F:6E:F7:69:BA:48:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/29f1ca92-d527-42cb-bb79-dfeba6fb8601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.157.93.0/24
Signature Algorithm: sha256WithRSAEncryption
04:99:02:23:32:84:6b:73:0e:d6:a0:44:b7:0f:4b:56:7d:89:
94:67:c7:a8:ab:c8:60:55:2f:d7:62:0f:35:60:dc:c4:e1:5b:
cc:1c:43:e1:b6:9a:8d:06:9b:6c:86:66:50:9d:8f:16:62:d4:
a3:8b:3f:cb:82:dc:9c:13:5a:0a:a5:fa:42:ee:da:0e:9b:42:
bf:64:0c:77:89:e1:06:fb:71:42:bc:b6:92:03:5b:cd:d5:88:
bb:77:b9:b8:6a:be:d4:53:f1:0d:17:18:5b:d1:0a:4e:d2:aa:
be:54:b1:71:c8:b8:11:d7:cd:01:5c:71:b7:9d:15:33:5d:1b:
85:d0:fa:9e:9e:44:15:a9:81:98:12:46:99:53:f4:f2:6b:30:
05:65:49:80:db:e3:db:cb:7d:16:06:82:7e:fd:15:59:99:ba:
25:76:37:2e:97:e8:bd:9e:8e:e7:5d:31:cd:4c:e4:09:54:d5:
d6:eb:2a:ea:e6:e4:89:b0:5b:72:a8:2e:29:cc:f3:87:f0:dd:
54:94:a4:8d:0b:d9:41:2b:3d:7f:f0:cc:b5:7a:c2:b7:4f:1c:
32:09:bd:4b:80:be:27:fd:cd:04:04:fe:06:cb:b2:52:2c:86:
f0:5b:11:ec:dc:d3:3a:d4:93:be:ac:87:ca:00:d4:79:99:3b:
2e:bd:15:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:47:35 2025 by rpki-client