Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/464b51cb-6cc6-4c9a-8cfd-ed4d8696dfc9.roa
File: 464b51cb-6cc6-4c9a-8cfd-ed4d8696dfc9.roa (raw, json)
Hash identifier: /2G+DU0p54vUdBmUfqRpsuESjmT9wh+YiTgfuG9rNHg=
Subject key identifier: F9:4A:B2:2C:89:EA:B0:F2:53:44:98:7E:A3:0E:F6:9F:40:D2:66:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D794B49128CE7EE7A14BAACE4472BA1861C5057
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/464b51cb-6cc6-4c9a-8cfd-ed4d8696dfc9.roa
Signing time: Sun 19 Oct 2025 02:31:08 +0000
ROA not before: Sun 19 Oct 2025 02:31:08 +0000
ROA not after: Sun 23 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.138.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:79:4b:49:12:8c:e7:ee:7a:14:ba:ac:e4:47:2b:a1:86:1c:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 02:31:08 2025 GMT
Not After : Nov 23 23:59:59 2025 GMT
Subject: serialNumber=bc45134e634c4f8665565504e26ab89871c020f2984f29b7694937bdf0c1b59d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:87:5a:b1:5d:59:b8:40:24:99:74:cd:f8:0c:
30:2e:0e:01:82:6c:be:aa:31:f9:82:72:38:28:01:
8b:34:46:52:f1:ad:57:c8:db:46:a7:56:cd:3d:8c:
51:ff:dd:89:1e:47:fe:4f:e4:81:51:31:a8:8f:04:
60:fa:71:62:db:39:59:0d:7a:d5:ed:05:93:8f:2f:
d4:de:3b:5a:1d:50:52:44:6a:8c:97:cb:59:7a:85:
6a:bc:9a:16:cc:d3:e1:e3:58:46:17:7e:c1:8b:4c:
2a:60:31:cc:d2:68:39:ab:43:0a:11:19:77:33:20:
11:d3:42:97:a2:c3:8a:10:e5:95:d2:ac:dd:a7:46:
78:91:e3:28:ae:60:f4:84:67:1d:7e:e2:5e:82:8b:
19:2c:2d:dd:3b:42:8e:97:ba:c2:8e:50:52:22:94:
0a:19:1f:09:47:43:97:b8:82:11:e2:ff:00:24:08:
c6:b5:15:16:31:ba:7f:14:bf:38:42:7c:49:bb:a9:
1c:65:ff:dd:4e:61:16:99:a1:cb:37:5d:a0:29:e1:
8e:32:01:27:f8:d6:a3:f0:f3:a2:b5:7b:bd:60:5d:
2f:dd:eb:9b:10:db:b0:ec:8e:f9:15:67:95:5a:87:
b4:b1:c4:26:88:ff:bd:86:63:c0:76:8f:18:32:b3:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4A:B2:2C:89:EA:B0:F2:53:44:98:7E:A3:0E:F6:9F:40:D2:66:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/464b51cb-6cc6-4c9a-8cfd-ed4d8696dfc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.138.75.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e8:74:93:d9:00:67:5a:07:5d:b3:36:21:44:b0:80:fc:14:
7d:e8:92:e4:e6:5b:17:dd:d7:66:ee:9e:a5:8b:63:e4:9b:17:
6c:82:f7:54:c9:b7:01:99:c1:10:48:49:95:93:15:81:8e:f8:
ea:49:5d:79:14:8c:08:6e:aa:1c:0a:c1:d1:be:22:f0:79:46:
75:71:9c:53:16:85:6b:67:91:44:cf:54:12:61:f0:ba:6d:29:
50:25:68:7d:08:16:57:a1:dd:51:9b:00:75:c7:0d:1d:ec:7f:
a5:29:ba:5c:7a:72:6d:a8:25:04:0f:55:07:8c:17:ad:fc:9c:
28:df:56:31:e5:81:42:b9:b7:6f:1f:99:0a:73:99:29:a9:c1:
47:40:27:3a:63:c4:b2:47:64:b5:ee:3f:bc:9f:c7:86:2b:35:
61:cf:5b:0c:93:fe:2a:1d:26:6e:fe:5b:53:47:46:7c:f9:0c:
e1:f3:8d:e9:d3:21:7a:96:7a:69:af:e9:b3:50:7d:1b:ec:a9:
2e:6e:65:23:a9:c3:5f:c0:8a:a7:c3:23:25:56:c4:a0:8d:ad:
76:10:5b:be:91:40:28:9c:24:57:e8:08:48:eb:b7:24:60:4f:
4b:c5:c6:bf:13:0a:41:13:c5:de:ad:4d:bc:8e:da:d1:77:bd:
b4:15:0e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:49:47 2025 by rpki-client