Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4196d0cb-a1d9-44e2-8c9f-39a829f40c9f.roa
File: 4196d0cb-a1d9-44e2-8c9f-39a829f40c9f.roa (raw, json)
Hash identifier: WEQhT1k7lRsG3upNGVJabmkx5KTpXThdhsRZwjVCMBM=
Subject key identifier: C6:E0:61:96:51:B6:3A:47:CA:B6:41:14:5A:51:B8:B2:62:24:6B:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D6779AFC1CB43AE3329E7AE2BE71FAF3D8CA498
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4196d0cb-a1d9-44e2-8c9f-39a829f40c9f.roa
Signing time: Sun 19 Oct 2025 00:10:36 +0000
ROA not before: Sun 19 Oct 2025 00:10:36 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:67:79:af:c1:cb:43:ae:33:29:e7:ae:2b:e7:1f:af:3d:8c:a4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:10:36 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=7cd73330936a8a8dcfef9283ca0e3024264495c46ec99a1c0b22c465f9e91814, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b3:8a:bd:b7:42:a4:6f:67:8b:23:d9:4d:31:
6f:f3:bd:35:51:1b:a1:98:90:06:1b:b3:3c:08:6f:
ee:d9:dd:42:87:4d:46:fa:f2:ff:36:71:d4:7c:90:
88:2d:f3:ea:10:bd:2d:d3:13:35:6d:6f:9e:e4:44:
2d:64:54:12:8d:60:1d:f0:18:c4:d7:f0:6d:a4:17:
9e:a0:48:80:76:35:cd:0a:1d:38:5f:14:d1:dc:5e:
1e:33:05:9f:90:a2:ca:cc:8f:b9:a9:7c:7a:38:a2:
48:bd:87:54:34:bc:04:01:87:77:e5:b5:5f:af:4d:
a2:79:8b:43:3c:a6:93:11:dc:ab:07:a6:6a:a2:94:
1c:32:ee:0e:5e:b1:95:ff:e8:fd:e3:55:c9:46:73:
58:a6:23:53:f3:61:d3:ab:76:44:89:6d:20:b5:75:
d7:bb:c6:7f:7f:03:8a:1a:a9:9d:23:38:6d:1e:b2:
62:4c:d7:70:11:50:d6:6b:be:33:6e:2b:e2:a9:b3:
96:4f:14:66:cb:64:60:ac:18:f8:c0:32:c1:b7:43:
b4:1a:9b:a8:ac:35:a6:de:05:d2:4d:41:cd:6f:f5:
ae:83:e9:d6:61:61:48:46:ad:2a:63:59:7c:34:ea:
97:31:26:e9:1f:45:c0:cf:40:4b:02:d1:ed:29:3c:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:61:96:51:B6:3A:47:CA:B6:41:14:5A:51:B8:B2:62:24:6B:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4196d0cb-a1d9-44e2-8c9f-39a829f40c9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.132.0/24
Signature Algorithm: sha256WithRSAEncryption
34:1c:ba:63:ed:00:d3:dc:87:cd:b1:f0:08:37:fc:d0:e2:ef:
e7:47:51:d5:11:f0:83:ba:12:fb:0e:de:aa:d9:08:07:e0:de:
9c:09:91:67:77:4f:58:3c:70:fa:4b:55:25:31:16:3e:67:9f:
20:0b:82:13:17:1c:89:22:4e:b4:71:a6:ab:49:99:d7:a2:94:
4e:07:c6:56:06:81:39:3c:90:ab:e0:65:2a:c6:de:0a:31:1a:
8b:96:1f:82:06:88:e9:61:20:2e:cf:46:58:e6:d4:a5:d6:2b:
9f:89:b1:b8:eb:a2:0b:4f:f7:05:e9:e8:0f:5f:74:92:ca:a3:
af:08:e9:db:7d:a0:90:84:12:74:c2:97:0f:4a:10:c3:80:0a:
50:6b:89:3f:e7:4e:3a:e7:c3:a2:34:06:20:5f:84:8e:d3:90:
e3:17:61:05:42:d1:2d:3a:11:e1:2f:e3:c2:06:42:39:07:86:
30:24:18:0b:e2:48:7d:fa:7f:8a:86:4a:3f:19:ab:66:59:d0:
e4:04:d6:c7:d9:70:4e:41:35:b6:81:e1:92:64:c6:11:f2:c6:
67:07:b2:91:b4:0f:94:89:c1:2c:84:1d:2b:58:07:5d:0b:38:
43:6c:53:e5:01:c1:dd:10:a3:f2:4c:eb:88:81:1c:c8:83:d9:
81:5d:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:20 2025 by rpki-client