Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ee6b1b0-6082-47ae-86ce-5ada5bd59773.roa
File: 4ee6b1b0-6082-47ae-86ce-5ada5bd59773.roa (raw, json)
Hash identifier: 8hS72BV6ttrq1Oa1qyQ+Ivcf2PuMJ4TT90D6i2nXiTc=
Subject key identifier: 1A:7D:6A:FB:41:06:DC:C1:58:1C:8F:BD:1F:93:0A:E7:8E:A6:02:00
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56307AB06F9517136FF90E2BE733C62084C0E1EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ee6b1b0-6082-47ae-86ce-5ada5bd59773.roa
Signing time: Mon 20 Oct 2025 04:32:33 +0000
ROA not before: Mon 20 Oct 2025 04:32:33 +0000
ROA not after: Mon 24 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 108.158.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:30:7a:b0:6f:95:17:13:6f:f9:0e:2b:e7:33:c6:20:84:c0:e1:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 20 04:32:33 2025 GMT
Not After : Nov 24 23:59:59 2025 GMT
Subject: serialNumber=eecb86b6550e3cbe1e6ae2d514a6d456ede64f8c3af74b6664121c5223e6be66, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8f:1d:e1:70:44:be:cb:09:87:5c:27:09:d7:
e1:31:59:6c:4a:87:a9:1b:12:45:60:fb:bc:c2:de:
b8:5c:45:6d:8e:50:7c:b1:9f:f0:ec:3b:cc:5f:ba:
b5:f4:c1:6d:43:8d:4d:c1:82:cf:0b:07:f7:d7:2c:
97:6e:ca:3a:32:1e:8b:e9:4d:af:6e:a3:09:0a:a0:
bf:6e:55:a4:20:4e:b1:08:08:93:94:51:e6:0e:cb:
8d:8d:bd:61:9c:54:0f:5e:61:3d:54:1a:22:85:04:
2a:1b:31:b1:2b:43:30:5e:69:94:77:11:f2:fb:25:
36:53:e8:9c:32:bb:75:af:c7:6d:b0:a9:94:eb:cd:
a4:df:0d:be:00:d6:82:24:16:70:e5:fa:0b:16:4d:
a0:11:56:5e:10:ef:d3:08:e0:5c:2c:ae:38:ae:7c:
d1:ba:cf:78:ab:11:f4:54:36:66:de:f8:a3:8e:3f:
3c:a4:c4:91:4f:7c:15:5c:11:d0:73:a2:74:1e:52:
9f:3e:17:c5:e3:9a:51:f6:51:5c:dc:23:b0:4b:12:
1c:76:00:dd:98:39:47:cb:7d:4b:48:7e:eb:e8:92:
d8:c9:56:1b:5b:d8:26:93:b3:37:e2:c9:80:6f:fa:
5d:e0:95:b8:20:21:19:6c:64:50:c7:29:d0:9a:76:
30:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7D:6A:FB:41:06:DC:C1:58:1C:8F:BD:1F:93:0A:E7:8E:A6:02:00
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4ee6b1b0-6082-47ae-86ce-5ada5bd59773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.158.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ed:96:70:bd:d9:c5:d8:65:52:2a:38:32:2c:14:53:ec:9a:
c8:2f:e0:74:9b:2e:cf:b5:66:d8:67:24:c2:e5:45:c2:de:54:
f5:0b:06:65:42:4f:b3:9b:b3:88:79:27:00:c9:65:53:99:88:
3c:c9:e8:9d:65:67:83:4e:54:04:86:3d:b9:af:76:2e:13:14:
d8:d0:f0:b2:8e:31:05:bb:19:1d:9f:62:23:58:fd:a9:94:dc:
fa:45:65:2c:a2:e6:91:9e:9f:a4:c2:02:b0:14:30:be:24:61:
47:b8:b5:8a:30:65:60:47:2f:d0:ab:75:7a:c9:e4:3b:0b:90:
6f:52:e4:b8:00:d2:8c:31:09:df:ef:4e:95:2f:4f:ff:85:8b:
99:fb:f2:ea:30:4c:20:99:fb:cf:6d:1c:f6:dd:44:7b:3c:20:
64:57:b0:75:8e:a2:cc:ba:e2:f4:2a:92:c5:9d:66:97:01:a2:
9b:a8:41:e5:31:e4:85:3d:3f:07:2e:30:b3:4f:26:7c:60:e9:
e3:49:a7:c5:fb:2b:f3:9c:07:6b:0e:7d:6e:e5:7d:9c:a6:fb:
e7:ee:bb:98:3a:35:42:1c:ab:3a:bb:ef:07:d3:49:4b:28:6d:
d5:8c:19:b4:6c:d7:53:84:e4:dc:ed:92:3e:4a:88:d7:64:5b:
cf:08:e7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:18:35 2025 by rpki-client