Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40c1dbc6-1a26-4961-85d6-e87f6892b2c6.roa
File: 40c1dbc6-1a26-4961-85d6-e87f6892b2c6.roa (raw, json)
Hash identifier: Gahk22lKhrMF9M+7iK9YMUE4Iyv3utjDMKX5NJCs9oA=
Subject key identifier: C2:78:BE:5B:91:9E:8D:4E:56:C4:40:1C:4F:A7:86:F2:DB:22:50:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7EE7DB0C69C471EC7F3C491892F2FE7E197EB842
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40c1dbc6-1a26-4961-85d6-e87f6892b2c6.roa
Signing time: Sun 19 Oct 2025 00:41:25 +0000
ROA not before: Sun 19 Oct 2025 00:41:25 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:e7:db:0c:69:c4:71:ec:7f:3c:49:18:92:f2:fe:7e:19:7e:b8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:41:25 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=b63ea429fc55b324cc91a537c9644f12006f021174dfc8493ca66f9a1b6ed4a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:a5:33:dc:48:2e:23:77:13:d6:40:74:53:
cb:cc:45:a6:bb:10:3f:ef:d2:85:b5:a7:7a:94:c1:
75:95:38:2a:dd:9b:08:b9:ea:2d:cf:18:ad:3b:c7:
04:d8:26:df:d0:3c:cd:26:93:5b:42:51:1a:08:68:
1f:68:93:66:4b:0f:cc:ee:1a:84:cb:35:55:29:f1:
b9:70:57:3f:4e:c6:78:41:8b:d3:26:c0:ef:5a:49:
c7:69:2a:38:a5:fc:42:fb:94:e4:16:7e:47:ac:86:
13:81:ea:f4:64:83:3e:29:be:d1:69:c1:62:a8:3d:
c7:85:29:64:4e:4a:9c:31:76:74:fa:97:cc:d5:c9:
74:f8:6c:36:22:87:41:ee:39:9a:b9:c3:2d:d8:90:
99:bc:d0:a1:be:97:a8:85:f2:af:d5:46:b8:61:40:
f4:60:12:9c:86:fd:ee:1d:17:33:da:02:27:a4:0d:
cd:60:89:14:4f:88:e4:fe:c6:7d:ea:39:90:7b:ed:
a0:fe:32:fe:aa:62:e8:69:64:5d:fd:a0:d3:45:fe:
25:47:42:22:af:29:97:2f:6f:d8:e0:1c:02:50:0e:
95:03:d8:95:0f:2b:e0:12:35:30:f3:87:e8:2f:fc:
18:68:aa:03:3a:e4:2e:57:52:6a:f3:e7:e3:8d:0e:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:78:BE:5B:91:9E:8D:4E:56:C4:40:1C:4F:A7:86:F2:DB:22:50:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40c1dbc6-1a26-4961-85d6-e87f6892b2c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ad:8f:16:e9:d4:c7:52:11:56:bf:c2:02:31:66:d7:9f:92:
b2:30:69:47:81:59:13:b1:05:bc:e5:36:d6:35:17:0a:cd:04:
4b:4c:57:42:d1:74:2d:2e:a6:76:13:80:78:8e:ed:a5:1f:ef:
5a:ca:8c:d0:3f:94:ef:90:ab:27:00:4f:e1:ab:39:c9:e7:b3:
78:b8:c5:7b:9e:67:1e:62:f3:3a:fe:05:83:33:b5:16:6b:e4:
59:5e:44:f1:dd:5e:8e:3f:d0:4d:a5:e6:9e:71:0c:64:68:c6:
9e:89:96:1d:7b:d4:4b:02:6e:09:e7:25:a5:95:6f:3e:a3:7c:
fd:c4:66:9a:7e:05:20:fa:8a:3a:b4:a8:6f:e1:89:74:ff:7e:
41:e5:0c:41:a1:f0:c6:5f:3c:8b:33:17:eb:c8:b0:48:ea:0b:
ac:c7:5c:99:58:ef:4a:df:8a:52:c2:6c:8b:2a:6a:f1:ba:e4:
2b:c8:05:82:e4:ee:bf:63:cc:65:01:37:20:ec:65:8a:d4:9e:
45:96:96:e3:b5:df:bb:9c:fa:ef:bb:95:81:71:63:48:ec:98:
2c:63:da:87:be:6b:3f:f7:84:49:6b:8c:63:fa:5a:91:35:84:
ae:75:c1:5c:ac:ca:52:9b:12:e8:be:88:63:5e:9d:96:66:74:
1d:82:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:49:18 2025 by rpki-client