Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df06078-6dba-403d-a3c7-0f6172add46c.roa
File: 2df06078-6dba-403d-a3c7-0f6172add46c.roa (raw, json)
Hash identifier: 8zYvMpFXWHNycYwBZGxVNGyuF4AoADSsTYRXWWTWSAA=
Subject key identifier: 8E:A0:95:E9:CF:82:34:8D:CC:D4:45:D6:0D:B6:A4:39:B8:B6:A6:87
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 673CA84CE581E4C76DDA55B42FFD990ADB2FAE10
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df06078-6dba-403d-a3c7-0f6172add46c.roa
Signing time: Mon 20 Oct 2025 05:51:31 +0000
ROA not before: Mon 20 Oct 2025 05:51:31 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.159.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:3c:a8:4c:e5:81:e4:c7:6d:da:55:b4:2f:fd:99:0a:db:2f:ae:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 05:51:31 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=5c4a29dddd510977e7adca285c38909358f529ec1ad7728a9e5f0f8348e2d5ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:98:ef:31:c0:20:44:62:d4:ee:a2:df:0a:
6a:83:19:7a:b6:79:d8:3a:58:6b:8b:80:8b:5f:82:
18:4a:c6:df:30:53:a5:42:5c:9c:8c:93:da:60:21:
36:6f:d7:cd:ff:d4:ea:f6:b6:29:0e:72:25:6c:46:
7e:70:1f:13:e1:d4:87:2a:9e:c4:95:b1:ee:cb:d6:
0b:99:8c:5c:cf:f4:ab:35:5e:33:43:68:81:bb:ac:
f3:bf:32:30:e2:7a:9c:9e:eb:60:46:b9:6a:3d:f1:
41:d0:7b:08:ff:68:96:d3:bf:7e:ff:5a:c1:4b:dc:
1c:90:41:99:f7:17:38:55:1c:69:dd:cf:9b:4d:82:
eb:ad:2e:fb:fb:cb:af:44:29:ae:c9:46:11:45:8f:
d5:fc:f5:00:0a:ee:1e:55:4d:bd:6c:97:7c:22:34:
96:5e:2f:36:b8:9f:c0:85:9a:43:70:64:42:1a:17:
b2:ff:ea:b8:53:c1:9a:70:49:94:74:92:45:7d:d8:
44:9d:65:a7:20:b7:26:fe:8c:74:af:1f:a2:4f:f1:
b8:da:58:9a:1e:0a:4f:c4:4b:02:f8:61:c8:b9:fb:
e3:bf:63:c8:57:8f:ca:5b:77:9e:f8:0a:dd:9d:9c:
05:45:77:33:f5:c1:47:fa:9f:2e:66:40:bd:38:89:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:95:E9:CF:82:34:8D:CC:D4:45:D6:0D:B6:A4:39:B8:B6:A6:87
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2df06078-6dba-403d-a3c7-0f6172add46c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.159.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:15:9b:50:8e:44:63:2e:4a:7a:5b:99:b0:2c:d8:ef:9d:24:
f3:c1:10:b9:b3:3c:e3:c7:ce:0b:a6:e8:cf:d5:b5:37:a3:d6:
79:42:ac:ff:a9:50:6a:25:9d:c1:bb:30:fe:6c:c0:70:2b:01:
31:b0:c4:e1:17:ca:c8:22:cb:67:cf:50:74:ed:d0:56:ef:58:
0d:f6:a6:a7:70:45:c3:4e:96:ae:62:e1:f0:54:43:93:cd:9f:
9f:ab:dc:7f:ce:f1:56:de:58:b0:92:cb:b8:15:70:ad:56:51:
4b:43:49:a7:1e:be:55:93:ea:83:62:69:3e:34:98:c7:8e:a5:
d7:84:b2:96:59:2b:aa:f3:9a:f5:12:2e:e9:d8:07:86:37:6d:
b2:c3:8c:4b:1d:0a:28:aa:60:95:c8:af:e4:45:90:02:fc:79:
c9:0a:35:e9:10:e5:89:ab:03:72:ad:b2:70:78:72:5a:8e:3e:
ab:25:88:c8:f6:ca:46:6a:9a:40:ee:0d:40:d9:35:8b:ba:82:
a2:59:8d:71:65:32:c9:02:4d:f5:da:0b:d3:f9:99:7d:b2:8a:
74:90:a8:ed:5e:fd:b0:49:b2:c4:b2:2a:69:d6:46:9f:a5:f5:
02:2f:5d:96:71:4b:e8:7b:31:d5:3b:71:db:56:94:68:4e:e6:
b8:47:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:58 2025 by rpki-client