Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ab071d-e40c-4693-b843-a5b139cdae79.roa
File: 36ab071d-e40c-4693-b843-a5b139cdae79.roa (raw, json)
Hash identifier: RKKqDn8mRBmTV8OL0LAngFc67eIpNuKT8FMqlmc0lFg=
Subject key identifier: BE:C1:CC:F4:C2:FE:C0:BF:1B:D5:25:1E:11:41:79:C9:41:A4:65:EC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C0C3229FBBC8528208A8F647BF91B976414170B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ab071d-e40c-4693-b843-a5b139cdae79.roa
Signing time: Sun 19 Oct 2025 00:30:12 +0000
ROA not before: Sun 19 Oct 2025 00:30:12 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0c:32:29:fb:bc:85:28:20:8a:8f:64:7b:f9:1b:97:64:14:17:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:30:12 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=1262881ebf876ac7c4ec9757616eea470cd6346ef170d8ab0801ddfe6ff0e5de, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e9:ff:d1:88:96:4d:ee:c1:7c:4d:5e:d7:7b:
aa:cf:7d:1e:a2:03:d8:14:b6:c4:4b:e3:17:07:4b:
07:b3:ec:13:be:c0:76:80:97:81:58:27:0d:7c:3d:
f0:c1:1e:4d:8b:47:ba:d5:1b:df:ad:97:95:43:b8:
66:eb:2f:6d:2b:dc:55:27:27:cb:68:a6:88:ca:c5:
53:4a:36:2a:55:3f:d0:61:46:55:8f:fa:39:da:3e:
40:3e:bb:eb:29:d6:af:8d:c1:09:aa:47:1f:84:5a:
c9:e3:29:ad:3a:75:c4:36:1f:38:16:89:a4:f7:38:
53:44:0c:b0:36:e7:0d:e9:46:c1:25:5f:53:7e:be:
00:6a:bb:f7:46:70:25:ab:86:fa:a7:98:6d:20:45:
3e:04:aa:ff:c6:b9:fc:ef:7d:d2:94:fb:1f:18:6c:
9b:b5:8b:11:6b:83:a3:23:75:98:9a:3d:d4:a2:4c:
c3:0a:a7:24:14:f5:b1:eb:27:23:4a:8e:08:74:88:
ea:79:37:ae:41:30:85:92:0b:a1:de:52:75:30:aa:
f1:2a:cb:38:91:9d:a3:06:bf:aa:b3:fa:24:81:d1:
c6:f9:23:ca:6d:78:df:2f:28:7f:d5:d3:88:4d:20:
2d:0c:65:48:9c:35:92:07:78:59:51:4b:3e:25:a2:
05:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:CC:F4:C2:FE:C0:BF:1B:D5:25:1E:11:41:79:C9:41:A4:65:EC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36ab071d-e40c-4693-b843-a5b139cdae79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:c8:ab:17:de:74:7f:33:74:55:fc:b2:42:a4:8f:f8:d0:9e:
0f:d0:e0:d0:ba:36:11:aa:f1:1c:27:cd:52:95:c8:a8:b6:9a:
09:64:80:66:4d:c5:9d:37:66:5b:23:63:3b:44:9d:f4:06:60:
97:75:c0:3f:16:ef:bc:68:ce:dc:ba:3d:4c:c6:08:bb:9d:14:
80:ed:af:24:49:1e:50:3e:f5:4b:d1:be:16:1f:81:de:14:ab:
5b:3f:e3:ca:e3:f6:af:9f:d0:f5:7e:dc:1f:47:d7:56:2f:3f:
a6:ba:ea:8e:b7:45:e6:dc:b1:e9:cf:57:d7:91:f8:91:6a:3b:
30:56:c5:e3:1f:97:b1:a6:67:1b:bd:56:b9:79:08:2c:38:e5:
5f:e2:ba:83:ca:39:87:c2:95:17:23:ff:c0:41:5a:73:ef:96:
12:47:f8:19:20:44:22:86:77:96:7c:3b:5d:12:67:a6:67:1e:
61:98:3a:47:44:0f:2f:77:56:15:fa:c2:5e:36:bb:93:84:7b:
45:cf:bc:00:39:a3:31:97:ab:54:32:0e:8c:b3:11:7f:70:9c:
2d:85:b3:67:9f:b7:42:77:c8:5c:b4:1b:19:34:c9:34:19:3c:
8f:8a:87:99:06:1b:d6:5e:38:da:90:b8:4d:ad:d0:f5:b7:1d:
6c:00:5f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:50 2025 by rpki-client