Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cedb8bb-c9a8-4abf-8416-ec8eae4f5263.roa
File: 2cedb8bb-c9a8-4abf-8416-ec8eae4f5263.roa (raw, json)
Hash identifier: r/kvzFMe2+jUsJA4Hv2+lUJRVvnnZlc4wlh2wej88Qc=
Subject key identifier: F0:34:4A:D2:7E:DA:B1:0E:D5:BF:5E:31:AB:5D:87:E2:39:B5:AA:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 50066894C572B973B2A5BD71F3C587DBFD70C571
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cedb8bb-c9a8-4abf-8416-ec8eae4f5263.roa
Signing time: Sun 19 Oct 2025 02:10:07 +0000
ROA not before: Sun 19 Oct 2025 02:10:07 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:06:68:94:c5:72:b9:73:b2:a5:bd:71:f3:c5:87:db:fd:70:c5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:10:07 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b6456dcf8ab4038a9690df4dd04c68359885797926878dba69840e1838afc3cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a4:a7:25:0a:70:34:7c:d6:06:e4:c1:63:b8:
c2:18:95:31:6b:c0:67:5e:83:38:9f:82:8f:d0:89:
9a:ab:4b:e3:53:b9:3b:6b:49:31:52:60:03:7b:15:
06:88:e0:5a:05:20:f8:1e:9e:13:24:db:8c:43:16:
32:5d:ad:77:29:bd:f8:ef:81:d0:b0:27:d3:59:21:
6e:0c:31:54:8b:dd:86:18:34:54:86:35:b6:65:fd:
87:32:1b:22:f8:4f:3d:7b:a9:74:49:c0:ae:4a:40:
ae:a1:8d:6f:b8:3e:57:91:d2:42:62:61:5f:de:4f:
ed:f7:53:07:a6:66:7f:f3:03:22:2d:cf:18:08:7a:
b1:db:58:ef:e3:e2:a3:37:5e:0d:f6:98:29:95:f2:
f9:6f:43:8b:df:96:69:4d:7d:77:91:6a:ca:47:63:
ba:34:9c:5c:72:f5:43:fc:ea:b5:1d:cd:6a:f3:43:
f8:c3:56:ea:f5:14:9b:34:33:92:d0:21:2f:c2:76:
16:cf:bd:51:97:fd:1a:10:8c:25:42:a5:86:db:2e:
ca:93:1f:c7:ca:06:2e:d0:06:3a:5e:bc:9b:c1:49:
87:26:ef:97:e9:83:bc:3d:76:d6:20:f6:0c:e4:33:
b5:3a:9f:74:e3:1f:e8:5d:52:dd:38:eb:6b:18:c1:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:34:4A:D2:7E:DA:B1:0E:D5:BF:5E:31:AB:5D:87:E2:39:B5:AA:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cedb8bb-c9a8-4abf-8416-ec8eae4f5263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.47.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:83:83:03:83:16:e3:05:7d:37:eb:02:00:e3:da:25:94:3c:
0e:5e:50:98:fd:fe:72:bd:ff:10:a0:61:de:20:97:eb:ef:35:
f4:a9:3e:d8:32:07:81:25:78:99:a3:f7:fe:54:84:95:82:c9:
e2:d4:c3:4e:ef:36:35:6e:18:5c:54:ec:ab:95:fe:21:0e:01:
1e:5c:76:a2:ba:5f:d7:3e:e6:c2:8a:20:4f:30:b1:e2:7e:be:
c0:a5:db:36:6e:12:61:56:e8:6d:80:9b:81:5e:ef:51:ef:f7:
19:54:d6:85:dc:df:a0:b3:ce:20:ce:a8:92:c6:5b:2f:6d:a7:
c5:bd:e7:78:d6:4a:0b:5a:1d:4d:be:42:b6:72:40:61:09:36:
91:5d:ca:43:ac:e2:d8:24:aa:08:73:f5:27:80:6f:29:fa:a1:
df:f9:c4:4e:44:73:7c:e0:24:4a:b6:4a:6c:64:7f:d2:8e:fa:
7a:fe:1a:ce:04:d8:f7:d3:e9:9d:7a:71:0e:95:c7:5f:3b:ac:
72:88:fe:f3:55:f8:a3:00:3e:c6:ab:13:2e:5a:85:f6:a3:d0:
3e:83:ba:f1:17:1a:32:08:46:96:b5:77:3c:6e:da:30:f4:ba:
56:3d:6e:b5:72:a1:95:1e:df:a9:6c:df:d5:67:75:4a:d9:6a:
31:a6:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:07 2025 by rpki-client